Page 1 of 1

Fake AP

Posted: Wed Sep 04, 2002 7:42 pm
by bobzilla
"If one access point is good, 53,000 must be better."

http://www.blackalchemy.to/Projects/fakeap/fake-ap.html

(from BAWUG)

Well there goes all the fun

Posted: Sun Jul 06, 2003 7:51 pm
by izzy4505
Hmmmmm, hopefully people don't start using this rediculously, or there goes all the fun in wardriving.

Posted: Thu Dec 09, 2004 7:02 am
by kai
I hate to post on an old topic, but I've recently discovered that Home Depot uses this (or an application similar to it) to generate fake APs with the SSID of "orange."

Just a little FYI, but I wonder why they would do that? What does Home Depot have to gain by doing this (or lose by not doing it)?

Hmmmm

Posted: Thu Dec 09, 2004 6:46 pm
by izzy4505
Are you sure they're using that and not just a crapload of APs? Last time I was in a home depot looking around they had one about every 30 feet.

Posted: Thu Dec 09, 2004 11:35 pm
by kai
NS logs it as a Fake AP.

My real question is that why would they need a fake ap generator. Or even it isn't a fake ap generator (and NS is incorrect), why do they need cisco WAPs every 30 feet?

It just isn't adding up in my little head.

Posted: Fri Dec 10, 2004 5:12 am
by izzy4505
NS logs anything that doesn't have the first 3 octets of it's mac address in it's known manufacturer list as a fake ap. It's not really a fake ap, just a fake mac address. Often times though it's not really fake. Usually a peer network, or one where mac addresses have been set, or stuff made by companies who for whatever reason don't have their mac manufacturer id's in ns.

You'll find that a lot of companies that really want full full coverage of their 802.11 deployments will rediculously over-cover an area. If the money is there, the only reason that you wouldn't want to do that is because of channel overlap. Usually though it's possible to keep things from causing too much interference.

Posted: Sat Dec 18, 2004 7:43 am
by Mick
Yes they do use a program just like FakeAP.
Yes most stores call them "orange".

This might be a good hint as to why they do:

http://www.securityfocus.com/news/10138

Posted: Wed Jul 20, 2005 6:05 am
by jmedica01
Yes they do use a program just like FakeAP.
Yes most stores call them "orange".

This might be a good hint as to why they do:

http://www.securityfocus.com/news/10138
Orange (The Home depot) ontario that is, donno what their considered
in the US

IZZY is right

Posted: Fri Jul 22, 2005 2:37 am
by hratch
sorry folks. Izzy is correct on this one.

Home Depot uses SSID orange

Peer to Peer networks will spew a bunch of mac addys in NS

trust me. i have seen more than a few "orange" ssid's across this country. :)

Posted: Tue Mar 13, 2007 6:15 pm
by poacher
From the original link I do like their description of war drivers:

"Fake AP confuses Wardrivers, NetStumblers, Script Kiddies, and other undesirables."


So I'm undesirable. Well now I finally understand why she left me. :shock: [/i]

Posted: Sat Mar 01, 2008 6:13 am
by Dr_Dropper
NS logs anything that doesn't have the first 3 octets of it's mac address in it's known manufacturer list as a fake ap. It's not really a fake ap, just a fake mac address. Often times though it's not really fake. Usually a peer network, or one where mac addresses have been set, or stuff made by companies who for whatever reason don't have their mac manufacturer id's in ns.

You'll find that a lot of companies that really want full full coverage of their 802.11 deployments will rediculously over-cover an area. If the money is there, the only reason that you wouldn't want to do that is because of channel overlap. Usually though it's possible to keep things from causing too much interference.
Yeah i use CommView for wifi quite a bit and it has a nice little tool that will identify the manufacturer of a network adapters mac address from only the first three octets. its come in handy more than a few times.