Fake AP

General wireless news

11 posts • Page 1 of 1

Postby bobzilla » Wed Sep 04, 2002 7:42 pm

"If one access point is good, 53,000 must be better."

http://www.blackalchemy.to/Projects/fakeap/fake-ap.html

(from BAWUG)
-bobzilla - WiGLE.net just a little bit
Image

Postby izzy4505 » Sun Jul 06, 2003 7:51 pm

Hmmmmm, hopefully people don't start using this rediculously, or there goes all the fun in wardriving.
Brad Isbell
brad@musatcha.com
http://www.musatcha.com
[img]http://www.musatcha.com/images/logo.jpg[/img]

Postby kai » Thu Dec 09, 2004 7:02 am

I hate to post on an old topic, but I've recently discovered that Home Depot uses this (or an application similar to it) to generate fake APs with the SSID of "orange."

Just a little FYI, but I wonder why they would do that? What does Home Depot have to gain by doing this (or lose by not doing it)?

Postby izzy4505 » Thu Dec 09, 2004 6:46 pm

Are you sure they're using that and not just a crapload of APs? Last time I was in a home depot looking around they had one about every 30 feet.
Brad Isbell
brad@musatcha.com
http://www.musatcha.com
[img]http://www.musatcha.com/images/logo.jpg[/img]

Postby kai » Thu Dec 09, 2004 11:35 pm

NS logs it as a Fake AP.

My real question is that why would they need a fake ap generator. Or even it isn't a fake ap generator (and NS is incorrect), why do they need cisco WAPs every 30 feet?

It just isn't adding up in my little head.

Postby izzy4505 » Fri Dec 10, 2004 5:12 am

NS logs anything that doesn't have the first 3 octets of it's mac address in it's known manufacturer list as a fake ap. It's not really a fake ap, just a fake mac address. Often times though it's not really fake. Usually a peer network, or one where mac addresses have been set, or stuff made by companies who for whatever reason don't have their mac manufacturer id's in ns.

You'll find that a lot of companies that really want full full coverage of their 802.11 deployments will rediculously over-cover an area. If the money is there, the only reason that you wouldn't want to do that is because of channel overlap. Usually though it's possible to keep things from causing too much interference.
Brad Isbell
brad@musatcha.com
http://www.musatcha.com
[img]http://www.musatcha.com/images/logo.jpg[/img]

Postby Mick » Sat Dec 18, 2004 7:43 am

Yes they do use a program just like FakeAP.
Yes most stores call them "orange".

This might be a good hint as to why they do:

http://www.securityfocus.com/news/10138

Postby jmedica01 » Wed Jul 20, 2005 6:05 am

Yes they do use a program just like FakeAP.
Yes most stores call them "orange".

This might be a good hint as to why they do:

http://www.securityfocus.com/news/10138
Orange (The Home depot) ontario that is, donno what their considered
in the US
[url]http://www.wdontario.com[/url]
[img]http://www.rootshell.be/~jmedica/wdo.jpg[/img]

Postby hratch » Fri Jul 22, 2005 2:37 am

sorry folks. Izzy is correct on this one.

Home Depot uses SSID orange

Peer to Peer networks will spew a bunch of mac addys in NS

trust me. i have seen more than a few "orange" ssid's across this country. :)

Postby poacher » Tue Mar 13, 2007 6:15 pm

From the original link I do like their description of war drivers:

"Fake AP confuses Wardrivers, NetStumblers, Script Kiddies, and other undesirables."


So I'm undesirable. Well now I finally understand why she left me. :shock: [/i]

Postby Dr_Dropper » Sat Mar 01, 2008 6:13 am

NS logs anything that doesn't have the first 3 octets of it's mac address in it's known manufacturer list as a fake ap. It's not really a fake ap, just a fake mac address. Often times though it's not really fake. Usually a peer network, or one where mac addresses have been set, or stuff made by companies who for whatever reason don't have their mac manufacturer id's in ns.

You'll find that a lot of companies that really want full full coverage of their 802.11 deployments will rediculously over-cover an area. If the money is there, the only reason that you wouldn't want to do that is because of channel overlap. Usually though it's possible to keep things from causing too much interference.
Yeah i use CommView for wifi quite a bit and it has a nice little tool that will identify the manufacturer of a network adapters mac address from only the first three octets. its come in handy more than a few times.

11 posts • Page 1 of 1

Return to “Wireless News”

Who is online

Users browsing this forum: Cin13 and 3 guests