How to Hack Wi-Fi: Creating an Invisible Rogue Access Point to Siphon Off Data Undetected « Null Byte :: WonderHowTo

Welcome back, my greenhorn hackers!Continuing withmy Wi-Fi hacking series, this article will focus on creating an invisible rogue access point, which is an access point that's not authorized by the information technology staff and may be a significant security vulnerability for any particular firm.Remember, as I've said before, hacking wireless networks isn't all justcracking Wi-Fi passwords!Let's Run a Scenario for ContextIn our scenario, we work for a large oil drilling and exploration firm. Our firm has been fracking rock and sandstone beneath the surface of the earth, a technique that injects sand, water, and chemicals underground to release oil and gas.Image via1bog.orgResidents Are Getting Sick Around the Fracking AreaLately, a number of residents in the area have fallen sick and one has died. Residents suspect that the chemicals our employer is using in their frack solution has poisoned their ground water, resulting in the illness and death.Our employer vehemently denies any role in the residents' illness and death, and claims that the chemicals that they inject into the ground are all safe. Furthermore, they claim that none of the fracking solution has leaked into the area's groundwater.Image viaappvoices.orgAlthough you're not a member of the engineering group, you have heard rumors that your employer is using toluene, a highly toxic substance, in its fracking solution. If this is true and it was released into the surrounding ground water, it probably accounts for the illnesses and death and will likely cause more deaths if it gets into the groundwater again.Help Uncover the Truth with a Rogue APYou are determined that this should not happen again and you decide that in your off-hours, you'll work with environmental groups and hackers to try to disclose whether your employer is actually using toluene in its fracking solution.They need access to the records of the engineering group's records to prove that the company is lying and keep them from further poisoning the surrounding ground water.Knowing that you work for the oil company, they ask you to put up a rogue access point that will bypass the firm's firewall and IDS (intrusion detection system), be invisible to the information security team, and yet provide them with nearly unlimited access to the firm's network and records.How a Rogue AP Works UndetectedIn the United States, the FCCregulates the wireless industryand technologies, and has decided that only channels 1-11 are to be used. Many other nations use 1-12 or 1-14.An access point communicating on channels 12, 13, or 14 would be totally invisible to wireless adapters built to only pick up only channels 1-11 in the states. If we can get our rogue AP to communicate on channel 13, for instance, it would invisible to the information security team at the oil drilling company or any one else. Of course, we would need to set our wireless adapters to communicate on channel 13 to be able to connect to it.Step 1: Change the Wireless Adapter's Regulatory DomainSince Japan allows channels 1-14, if we set our access point to use the Japanese regulatory domain, we will be able to communicate on channels 12, 13, and 14 in addition to the 1-11 allowed in the U.S.We can do this by:iw reg set JPiwconfig wlan0 channel 13iwconfigStep 2: Put the Wireless Adapter into Monitor ModeNext, we need to put the wireless adapter into monitor mode.airmon-ng start wlan0Step 3: Create Our Access PointTheaircrack-ng suite of hacking toolscontains a tool calledairbase-ngfor creating an AP from your wireless adapter. We can use it by typing:airbase-ng -c 13 mon0-c 13designates that it will communicate on channel 13mon0designates the wireless adapter to use to create the APStep 4: Bridge Our AP to the Wired NetworkNow that we've created an AP, we need to connect it to oil company's internal, wired network. In this way, traffic through the AP will go directly onto the corporate internal network and bypass all its security, including any firewall or intrusion detection system.First, open a new terminal, create a bridge, and name it "Frack-Bridge". We do this by typing:brctl addbr Frack-BridgeStep 5: Add the Interfaces to the BridgeAfter creating the bridge, we need to connect both interfaces, one for the internal wired network,eth0, and the other from the virtual interface from our AP,at0, to our bridge. We can do this by typing:brctl addif Frack-Bridge eth0brctl addif Frack-Bridge at0Step 6: Bring the Interfaces UpWe need to now bring up or activate the interfaces.ifconfig eth0 0.0.0.0 upifconfig at0 0.0.0.0 upStep 7: Enable IP ForwardingLinux has a built-in feature for forwarding traffic or IP forwarding in the kernel. We can do this by:echo 1 > /proc/sys/net/ipv4/ip_forwardStep 8: Navigate the Internal NetworkNow, when your colleagues connect to our invisible AP (they will need to enable channel 13 on their wireless adapter), they will have access to the entire, internal corporate network.In this way, they can get the information they need from the engineering department to prove that the fracking solution did or did not contain toluene, and whether the company is responsible for poisoning the drinking water of the local community.Stay Tuned...Make sure to check back on ourWi-Fi Hackingseries, because even more wireless hacks are coming! If you have any questions, please comment below or start a discussion in theNull Byte forumand we'll try to help you out.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual License'Gasland' stillvia 1BOG,Fracking rig photovia Appalachian Voice, andFrack you photoviaMichael G McKinne/ ShutterstockRelatedHow To:This App Saves Battery Life by Toggling Data Off When You're on Wi-FiHow to Hack Wi-Fi:Getting Started with the Aircrack-Ng Suite of Wi-Fi Hacking ToolsHack Like a Pro:How to Get Even with Your Annoying Neighbor by Bumping Them Off Their WiFi Network —UndetectedAndroid Basics:How to Connect to a Wi-Fi NetworkHow to Hack Wi-Fi:Getting Started with Terms & TechnologiesHow To:Your iPhone's Using More Data Than It Needs, but This Could Stop ItHow To:Build a Pumpkin Pi — The Rogue AP & MITM Framework That Fits in Your PocketHow To:Null Byte & Null Space Labs Present: Wi-Fi Hacking, MITM Attacks & the USB Rubber DuckyHow To:Turn on Google Pixel's Wi-Fi Assistant to Get Secure Access on Open NetworksHow to Hack with Arduino:Building MacOS Payloads for Inserting a Wi-Fi BackdoorHow to Hack with Arduino:Tracking Which Networks a Mac Has Connected To & WhenHow To:The Beginner's Guide to Defending Against Wi-Fi HackingHow To:Hack WiFi Passwords for Free Wireless Internet on Your PS3How To:Fix the Wi-Fi Roaming Bug on Your Samsung Galaxy S3How To:FaceTime Forcing LTE Instead of Wi-Fi? Here's How to Fix ItHow To:Spy on Network Relationships with Airgraph-NgHow To:What All the Bluetooth & Wi-Fi Symbols Mean in iOS 11's New Control Center (Blue, Gray, or Crossed Out)How To:Save Cellular Data by Using Wi-Fi Only for FaceTime Audio & Video CallsHow to Hack Wi-Fi:Selecting a Good Wi-Fi Hacking StrategyNews:Project Zero Finds iPhone & Android Open to Bugs in Broadcom's Wi-Fi ChipsHow To:This Widget Lets You Open Wi-Fi Settings Faster, Share Passwords & More on Your iPhoneNews:Save Money with These Awesome Freebies from Your Cellular ProviderHow To:Schedule Bluetooth, Data, Wi-Fi & Other System Settings on AndroidHow To:Save Battery Power by Pairing Wi-Fi Connections with Cell Tower Signals on Your Galaxy Note 3How To:PIN-Protect Mobile Data & Wi-Fi to Prevent Procrastination & Unwanted ChargesHow To:Easily Store Your iPhone's Wi-Fi Passwords & Share Them with Anybody — Even Android UsersHow To:Wardrive on an Android Phone to Map Vulnerable NetworksNews:Traveling Abroad? Here Are 6 Reasons Google Fi Is the Best OptionHacking Android:How to Create a Lab for Android Penetration TestingHow To:Track Wi-Fi Devices & Connect to Them Using ProbequestHow to Hack Wi-Fi:Disabling Security Cameras on Any Wireless Network with Aireplay-NgHow To:Get the Strongest Wi-Fi Connection on Your Android Every TimeHow to Hack Wi-Fi:Creating an Evil Twin Wireless Access Point to Eavesdrop on DataGoogle Chrome 101:How to Play the Hidden Dinosaur Mini-Game on Your iPhone or Android PhoneHow To:Hunt Down Wi-Fi Devices with a Directional AntennaHow To:PAIRS Is the Easy Way to Restore Wi-Fi & Bluetooth Connections After Wiping Your PhoneHow To:Scan, Fake & Attack Wi-Fi Networks with the ESP8266-Based WiFi DeautherHow To:Trick WiFi-Only Apps into Working with Mobile Data on Your HTC OneHow To:Hack Anyone's Facebook, Twitter or YouTube Account with Your Android DeviceHow To:Auto-Toggle Your Android Device's Wi-Fi On and Off When Near or Away from a Hotspot