Airsnarf – Rogue Access Point

Access points are those points that has router to spread the radio signals of a network, these type of router have antenna(s) (smart or omni directional), the main aim of using these access point is to establish a wireless (Wi-Fi) network. Wireless networks are the rising network that are currently using by the organizations, for public places and for home usage.    

Wi-Fi network has different vulnerabilities that can be exploit, as discussed before about wardriving. In wardriving you are searching for an access point to exploit but what if an access point is searching for you to exploit, strange but true and the term can be called an Inverse wardriving.

In inverse wardriving an attacker has to create a rogue access point, so the question is what is rogue access point? A rogue access point is a access point that has been installed without the permission of legitimate user (Administrator), rogue access point is a biggest threat for wireless network for large organization because it is open a way to launch man-in-the-middle attack, and it is a backdoor to enter into an Enterprise network.

It is a layer 2 attack that can be turn into layer 3 attack, here is the video demonstration that will better explain rogue access point. Thanks to the AirTightNetworks for the wonderful video.

There is another awesome video that explain rouge access point and available on securitytube.

I hope after this you have an idea about rogue access point, Airsnarf is a simple rogue wireless access point setup utility designed to demonstrate how a rogue AP can steal usernames and passwords from public wireless hotspots.  Airsnarf was developed and released to demonstrate an inherent vulnerability of public 802.11b hotspots–snarfing usernames and passwords by confusing users with DNS and HTTP redirects from a competing AP. Follow the link to learn more about Airsnarf.

Note: If you want to learn more about Linux(Backtrack 5) and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

How To Create A Virtual Penetration Testing Lab At Home

In this article, I will demonstrate how to create your own virtual penetration testing lab at home. Creating a pentesting lab is must for...

The Importance of Cyber Security in The Medical Device Industry

Medical devices are a revolutionary aspect of healthcare - they connect doctors and patients, help diagnose and treat diseases. Some - like ECMO machines...

Top 5 Techniques Hackers Use to hack Social Media Accounts

These days, Social Media have become a significant need in our everyday life. It encourages us to associate and connect with anyone over the...

5 Top Programming Languages for Hacking

We live in the 21st century, which is very fast-changing. This is a century of competition for information and computing resources. Every year the...