Wifi ?
I was thinking about writing a nice little page on stea… usin…. researching Wifi and how it works. So why not a better place to blab down some ideas then on my blog.
Just like most of the articles on this blog eventually the plan is to sketch it down on here then port it over to my website for a little more formal document. This is not the most technical of documents but will give a good general overview of what wireless is, how it affects you and some terms and all that fun stuff.
What is Wifi
To keep things simple wifi is basicly a wireless network someone sets up in their home or business so there wireless devices can all nicely talk to eachother. To keep things simple there is really 2 types of wireless connections. Ad-hoc and AP. Ad-hoc is a client to client model which one wireless client would setup a connection to another wireless connection avoiding a AP all together. The most popular is AP based. Meaning you need a nice embedded device (or computer) setup to handle all the wireless clients and let them talk to eachother. Most people only ever use the AP model because they want wireless to connect to the internet and this is by far the easiest method. With wireless AP devices so popular and cheap when it comes to buying a home router or any networking gear it’s almost cheaper to just get the wireless model of your favorite router to it’s old non-wifi partner.
What does this mean to me ?
This means when you sit down somewhere you have a much higher chance of seeing a wireless network around you that’s probably capable of access to the internet. Alot of people don’t secure their wireless network which sends all your traffic in the open but allows you to connect with ease. Like all things it’s never that easy. When you connect to a wireless network that does not support encryption you could be really connecting to anything, and it could take you anywhere. Plus for some reason people tend to think that no one can see what they are doing and everything they do is safe. This is really not the issue, when your connecting to an open wifi network everyone can see every single packet that your transmitting and even twist some of these packets to take you places you don’t want to go or manipulate some of this data and send it back. This is what I call an “untrusted” source. When it comes to the internet don’t trust anyone or anything you have not personally setup yourself.
Wireless works on 2.4ish GHz. There is multiple channels but to keep things simple it only works on 2.4GHz. If you have a wireless network in your home chances are your going to have to get rid of your 2.4 GHz phone and anything else that uses that spectrum because the wifi is very fussy when it comes to other radio noise.
Nifty Wireless Terms
When most people see wireless networks they only see the “SSID” this is the name of the wireless network your connecting too. Really this is just a frontend to keep things simple from our end. Your computer only see’s the “BSSID” which is the mac address of the AP your connecting too. For example:
SSID: Linksys
BSSID: 00:03:B4:05:C6
We would see the SSID … but your computers and devices only really care about the BSSID. This is handy to know if your in an area that has alot of multiple names, or you plan to dig a little deeper into this wireless network. Lets say for example we wanted to find some more information about that “Linksys” network. For example … the MAC address I choose is actually a 3com mac. 00:03 is a 3com OUI (and it’s actually the mac address of my old cable modem).
http://standards.ieee.org/regauth/oui/index.shtml
A quick search of that MAC address on this website proves so very quickly. This is nice to know if your looking to see what company makes the wireless router. Most people tend to keep things on default settings or change very little so this can help troubleshoot some connection issues i’ll talk about later.
Ok so now your computer is connected to the network “Linksys” with the BSSID of “00:03:B4:05:C6″. It won’t just work from there. You got the 802.11 part taken care of (your connected to the network) now you need things like an IP address and DNS servers etc etc.This is usually given to you by DHCP. 99.9% of people run DHCP esp if they have an open network. Believe it or not you can pretty much get away with securing your setup from about 85% of people by just disabling DHCP. If you don’t give them an address not alot of people can figure out what the default addressing is for the model of router they have. This is where the BSSID comes in handy and the OUI. With this information you can find out the default addressing and manually set it. Like most computers and networks these days they are mostly hidden behind NAT (Network Address Translation) which lets you connect more then one device to a single WAN IP (Wan=Wide Area Network). Residental routers and such usually use a Class C network with a Class C address Range. The private Class C range is 192.168.x.x with a subnet of 255.255.255.0. This basicly keeps your client amounts restricted to 254 devices. An example would be a linksys network. Linksys default sets your clients up on 192.168.1.x @255.255.255.0 this keeps broadcasts to only clients on 192.168.1.1 -> 192.168.1.254. You can’t use 192.168.1.255 because this is a default broadcast address. Thanks to your lovely MAC address you can find out who the manufacturer of the router is and assuming that the AP is using mostly stock settings you could assign your self your own address. This is alot safer because most router models only display the DHCP clients and not all the wireless clients.
So ?
Well … so far I went through the basics. What a wireless network is and how to look a little deeper into it without even really doing anything. Im going to deepend this up for sure in the future with my article on how to actually capture this data in rfmon mode (monitor mode) and then use this data to get information your looking for. On open networks this means you will be able to see any unencrypted data in the open. For encrypted networks it means you’ll get closer to being able to break the keys.
There is so much to go through on this topic it’s definitely a multiple article type deal … keep tuned i’ll release more and then hopefully eventually make a nice official page on my site with all this information all nicely cleaned up. As of now it’s simply a place to blab down some ideas.
Chris

