Bugtraq mailing list archives
Re: Tool for Identifying Rogue Linksys Routers
From: Mike Kershaw <dragorn () kismetwireless net>
Date: Fri, 26 Aug 2005 19:37:48 -0400
Is there a scanning tool out there that can determine if there are unauthorized Linksys (type) routers in a specific VLAN?Try pinging all hosts using nmap: Then find MAC addresses that are from Linksys's space. I know macchanger [1] has a list of what addresses belong to which vendors.
Except, of course, that most Linksys units allow mac cloning through the web interface. This won't find anyone who is deliberately avoiding the scan, nor anyone who messed with the config out of boredom. -m -- Mike Kershaw/Dragorn <dragorn () kismetwireless net> GPG Fingerprint: 3546 89DF 3C9D ED80 3381 A661 D7B2 8822 738B BDB1 Bus Error at 008BE426 while reading byte from DEADBEEF in User data space
Attachment:
_bin
Description:
Current thread:
- Tool for Identifying Rogue Linksys Routers Martin Mkrtchian (Aug 25)
- Re: Tool for Identifying Rogue Linksys Routers Mike Frantzen (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Joshua Wright (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Graham Wilson (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Volker Tanger (Aug 27)
- Re: Tool for Identifying Rogue Linksys Routers Mike Kershaw (Aug 27)
- Re: Tool for Identifying Rogue Linksys Routers Dave Hull (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Tony Rall (Aug 27)
- <Possible follow-ups>
- RE: Tool for Identifying Rogue Linksys Routers Thomas Guyot-Sionnest (Aug 26)
- RE: Tool for Identifying Rogue Linksys Routers Matt Mercer (Aug 26)
- Re: Tool for Identifying Rogue Linksys Routers Paul Halliday (Aug 27)