Full Disclosure mailing list archives

Re: Question Regarding Wireless Frames


From: Michael Holstein <michael.holstein () csuohio edu>
Date: Fri, 06 Apr 2007 09:08:45 -0400

You mean SSID not broadcast?

Look for the client's network-specific probe request. Kismet (and 
others) do this automagically. Windows quite helpfully issues probe 
requests for *all* the networks it has past associations for.

You can also use aircrack-ng to force-deauth a client and just watch for 
them to reauth, since the mac-layer stuff isn't encrypted.

IMHO, the Atheros chipsets work best for this sort of stuff. Get the 
patches to allow raw frames from aircrack's website 
(aircrack-ng.org/patches). The only bummer is you can't change *your* 
mac with ifconfig like you can with other cards.

~Mike.

Code Breaker wrote:
Hi All,

Recently i come to know about a network where becon frames where 
blocked.With the limited knowledge about this stuff i am wondering is 
there any other kind of frames from which we can identify the 
accesspoint over a wirless network?
Thanks for any help.

-- 
_code


------------------------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: