Have you ever been away from home or on holiday and noticed an open network connection? FREE INTERNET! But then you find out that every search or page redirects you to an "enter password" or "signup here" page. Well, there are ways around this.
In this article, I'll show you how to bypass a local network proxy.
On a simple networking system, users would connect, enter passwords, get a local IP, and be able to connect to the internet through the proxy. But how does the machine know which computer is what? This is the key—the MAC address. The network logs the MAC address of the authenticated device and allows connectivity until either timeout or until they sign out.
The Exploit
To complete this exploitation, you'll need a Linux distro with networking and injection drivers, Aircrack-ng, and a program called Macchanger.
1) Open up Terminal and throw your card into monitor mode:
airmon-ng start wlan0 (or whatever your card's name is)
2) Now, start airodump-ng and observe the devices connected to your victim network:
airodump-ng mon0
3) Note your victim's network MAC address (or BSSID). Then, on the device list in airodump-ng, check out what the MAC addresses of the connected devices (to your network) are. Look for one with a lot of packet "acceptance" and "power" (meaning it's close by), and select and copy the MAC address of the device (NOT the access point BSSID). If you're confused, take a look at the photo below:
4) Disable all interfaces with:
ifconfig wlan0 down and airmon-ng stop mon0
5) Finally, fake the MAC address of the device you chose:
macchanger -m XX:XX:XX:XX:XX (the victim's MAC) wlan0
6) Start up Wicd or similar tool and connect to your victim's network. If all goes well, you should have internet access!
Warnings
- Hacking is illegal! This is for educational purposes only.
- I am not responsible for any damage, harm or legal trouble you get yourself into.
Comments
No Comments Exist
Be the first, drop a comment!