Home page logo
/

pauldotcom logo PaulDotCom mailing list archives

Evil Twin attacks and specifying the BSSID
From: 1giglimit at gmail.com (Noah)
Date: Tue, 5 May 2009 21:16:20 +1000

I think the official way you're supposed to work around this in windows is
use certificates and to validate the wireless AP, not just the client. 

 

-Noah

 

From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of Nils
Sent: Tuesday, 5 May 2009 1:06 AM
To: 'PaulDotCom Security Weekly Mailing List'
Subject: Re: [Pauldotcom] Evil Twin attacks and specifying the BSSID

 

With the Ubiquiti SRC client utility for Windows you can specify a couple of
BSSIDs for one SSID.

I'm refering to the Ubiquiti-SRC300

 

 

Cheers,

Nils

 

 

  _____  

From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of Arch Angel
Sent: Monday, May 04, 2009 4:24 PM
To: PaulDotCom Security Weekly Mailing List
Subject: Re: [Pauldotcom] Evil Twin attacks and specifying the BSSID

Hey Adrian,

Zero_Chaos states the following in response to your question:

yeah. Answer is "depends on your supplicant".  Wireless Zero Config doesn't
have that option, Intel's client does.

 plus it should be noted there is no reason that you can't spoof the mac
when doing evil twin, but I wouldn't recommend it unless you are remote to
the AP being spoofed


Hope it helps man!

Robert 

 

On Mon, May 4, 2009 at 9:19 AM, Adrian Crenshaw <irongeek at irongeek.com>
wrote:

I've been thinking about Evil Twin attacks recently, and had a question.
With the Evil Twin attack both APs have the same ESSID, but the BSSID varies
(as I understand it). Is there a way in Windows to specify which BSSID to
attach to? I found some docs on Linux, but not Windows. 

Any ideas?

Thanks,
Adrian

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090505/6200993a/attachment.htm 


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]