Printable View
At my work we have about 3 wireless routers (linksys) all have default SSID,no WEP, and no MAC filtering. But the only way to get on the network is through a preassigned static IP. I was wondering (since im a noob at this) how secure is their network?
at my place of employment we use alot of linksys routers. they are very secure, we havent had any security problems. however i dont know what our sysadmin did to them. i dont know if this is possible, but you might want to get them to turn on DHCP, because i understand that that assigns different IP's every time. i could be wrong though.
All this means is that they disabled the DHCP service. This is not a secure setup. Someone with the slightest bit of networking knowledge could be on your WAP in less than a minute.
Completely insecure. Wide open. You will be cracked, sooner or later. Even if those static IP's are not in the standard 'private ip ranges' reserved for home use or private networks, it's still easy to sniff the traffic and then set your IP to one of the 'allowed' ones.Quote:
Originally posted here by Simo
At my work we have about 3 wireless routers (linksys) all have default SSID,no WEP, and no MAC filtering. But the only way to get on the network is through a preassigned static IP. I was wondering (since im a noob at this) how secure is their network?
Now all that being said...this analysis is made on this rediculously small amount of info you've shared. If you take my response to your IT director and present it as holy fact, you're probably gonna get smacked down. There very well could be a LOT of security layers in place that you haven't seen or been advised of since, as you put it, you're a 'noob'.
But if you're describing the totality of the situation accurately, then that network will be owned, if it hasn't already.
/* Edit: added this for ironic value */
"If you spend more on coffee than on information security, then you will be hacked. What's more, you deserve to be hacked."
-- Richard Clarke, retired. Former Counter-Terrorism Security Advisor to the President of the United States of America
ive brought up this security issue to people but i get the "i dont care" response and the people who setup the routers belive that static IPs are more than enough for security.
What other information do you need, zencoder ?
Short and to the point, from the 'common sense' point of view:
Pretend you're an individual whom a hit man is hunting. If you sleep in the same spot twice, he'll find you and boom, you're dead.
Using static IP addressing is like sleeping in the same place twice.
What you need is a proof of concept demonstration.
Sit there with a sniffer of your choice (Ethereal is my personal favorite) and watch the wireless traffic. Then IP your host with an address on the subnet you see allowed traffic flowing to, THEN show them that you can connect to the WAP. At this point, a nice SPAM engine would be an interesting thing to kick off. Let em see that and I think the attitude may change.
many (most?) admins don't like proof of concepts, so before you mess arround have a nice talk with them and make sure they all understand your gonne mess arround before you actually do it... they tend to get pissy if they're outsmarted by non-admins and somtimes it has no use to proof anything if they really just don't care, because it'll only piss them off
...at least that's from my experience
You might be getting the "I don't care" attitude for the same reason you would get it from me....
See I have a nice little Linksys WAP on my network. On the bright side I broadcast the SSID, am WEP encrypted, DHCP IP's and MAC filter the NICS...... Have fun breaking in..... It's bulletproof as far as accessing my network is concerned. It's outside the firewall and the Linksys _only_ allows port 1723 to egress... Why 1723? PPTP to my firewall.... All you can do from the WAP is try to create a VPN tunnel to my firewall.... fail to successfully authenticate and your wireless access just became a doorstop.... Crack the WAP.... Go for it.... have fun.... My external IDS emails me the moment there is any outbound traffic, (except port 1723 to my firewall), from the WAP... So I'll know... and you'll be closed down... That's a **** load of time to waste to find you have nothing.... :D
Maybe they have the same system.... but I doubt it... ;)
War drivers have too much time to waste if they are out war driving in the first place...Quote:
Originally posted here by Tiger Shark
That's a **** load of time to waste to find you have nothing.... :D
While you're at it... use fakeap and broadcast a couple dozen fake APs to confuse them further?
APs with the names of
GO
AHEAD
TRY
AND
HACK
ME
IM
WATCHING
YOU
FBI FIELD OFFICE
stuff like that. could be fun. :)
Thats pretty bad. You really need to get that fixed ASAP.Quote:
At my work we have about 3 wireless routers (linksys) all have default SSID,no WEP, and no MAC filtering.
People have that mentality, because they don't know any better.Sad but true.Quote:
ive brought up this security issue to people but i get the "i dont care" response and the people who setup the routers belive that static IPs are more than enough for security.
fort knox baby ;)Quote:
Originally posted here by Tiger Shark
You might be getting the "I don't care" attitude for the same reason you would get it from me....
See I have a nice little Linksys WAP on my network. On the bright side I broadcast the SSID, am WEP encrypted, DHCP IP's and MAC filter the NICS...... Have fun breaking in..... It's bulletproof as far as accessing my network is concerned. It's outside the firewall and the Linksys _only_ allows port 1723 to egress... Why 1723? PPTP to my firewall.... All you can do from the WAP is try to create a VPN tunnel to my firewall.... fail to successfully authenticate and your wireless access just became a doorstop.... Crack the WAP.... Go for it.... have fun.... My external IDS emails me the moment there is any outbound traffic, (except port 1723 to my firewall), from the WAP... So I'll know... and you'll be closed down... That's a **** load of time to waste to find you have nothing.... :D
Maybe they have the same system.... but I doubt it... ;)
where do you work btw
Come on... he is disclosing some of his security practices... do you think he is going to post WHERE he applies those tactics on a PUBLIC forum? nah... me either...Quote:
well i was hoping for a general answer like GM, AT&T, ect ect.
i withdraw my question
He's a male stripper at "The Pink Bandana" in Portland Oregon.
Road: I TRUSTED YOU!!!!!!!! You said you'd never tell after the night we spent together.... See.... Security _is_ all about secrecy and not disclosing information.... You bitch.... If you ever come back to Portland I will slap you silly..... ;)
Simo: I work for a non-profit organization in Detroit MI..... That's pretty much publicly available... The precise organization I work for would be considered part of my "security by obscurity"... OTOH, can you really trust anything I say? I could be lying through my teeth and have no idea how to set this up.... I might just know enough to know that it could be done.... ;)
Phish.... I might be disclosing my security practices.... But there's a couple I might not be telling about..... It's all about tripwires, (I don't mean the program, I mean things you might do that might set off an alert that you couldn't predict.... layers, layers, layers....). They are easy to create, difficult to predict/locate/evade but they tell me that someone is playing "silly buggers" with my network.... :D
Don't make be he-bitch slap you. I was using "misdirection" :p
Like the skiddy on the other end of a frag who claims he has 3 hardware firwalls at home? After you inform him of the consequences of his haxxor threats on your game server since his IP has been connected for hours and every connection logged, his balls just shriveled to peanuts. You know Pix, Watchguard etc. all of them all chained together in his bedroom. Or like when he says he "is" proxy chaining to the server with a 30 ms constant ping. Nah... I think pinky boy is telling the truth. :DQuote:
I could be lying through my teeth and have no idea how to set this up....
I think I have worked too hard today :D