corsasport.co.uk
 

Corsa Sport » Message Board » Off Day » Geek Day » Wireless Security Issues


New Topic

New Poll
  Subscribe | Add to Favourites

You are not logged in and may not post or reply to messages. Please log in or create a new account or mail us about fixing an existing one - register@corsasport.co.uk

There are also many more features available when you are logged in such as private messages, buddy list, location services, post search and more.


Author Wireless Security Issues
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:41   View User's Profile U2U Member Reply With Quote

Am i right in thinking, my wireless connection at home doesnt have any security, so someone could walk up to the house with a wireless laptop, and view any files that happen to be shared over the network?
e.g if i have sage installed on one main PC, and i have to allow 2 other PCs to access that PC, that someone couldview that?

Adam
Russ
Member

Registered: 14th Mar 04
Location: Armchair
User status: Offline
28th Oct 05 at 14:42   View User's Profile U2U Member Reply With Quote

depends, if its got a password or not
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:44   View User's Profile U2U Member Reply With Quote

if what has a password?
I know there is no security password on the wireless connection.
Russ
Member

Registered: 14th Mar 04
Location: Armchair
User status: Offline
28th Oct 05 at 14:46   View User's Profile U2U Member Reply With Quote

when you add computers dont you have a really long code to type in to each device that wants to connect?
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:48   View User's Profile U2U Member Reply With Quote

for what???? lol

Sage? no.

The router? no.
Cybermonkey
Member

Registered: 22nd Sep 02
Location: Sydney, Australia
User status: Offline
28th Oct 05 at 14:49   View User's Profile U2U Member Reply With Quote

depends if you are WIP'd up
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:52   View User's Profile U2U Member Reply With Quote

??? talk english lol
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:52   View User's Profile U2U Member Reply With Quote

the router has DCHP enabled i reckon.
Russ
Member

Registered: 14th Mar 04
Location: Armchair
User status: Offline
28th Oct 05 at 14:53   View User's Profile U2U Member Reply With Quote

jesus christ, you kids, why waste money on wireless technology if your thick

do you have a network key aka WPA or WEP key?
Russ
Member

Registered: 14th Mar 04
Location: Armchair
User status: Offline
28th Oct 05 at 14:55   View User's Profile U2U Member Reply With Quote

quote:
Originally posted by Bart
the router has DCHP enabled i reckon.


thats nice
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
28th Oct 05 at 14:55   View Garage View User's Profile U2U Member Reply With Quote

If they join your network, and you have shares, of course they can.
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:55   View User's Profile U2U Member Reply With Quote

i think there is a chance there might be a WEP key, but i do know i dont have to enter the key in order to connect to the router in order to go on the net.

Its not actually my network, is someone else, and he does have sage on the PCs, and 3/4 other PCs use that main sage PC as the server.
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
28th Oct 05 at 14:56   View Garage View User's Profile U2U Member Reply With Quote

Where does he live
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 14:56   View User's Profile U2U Member Reply With Quote

quote:
Originally posted by Ian
If they join your network, and you have shares, of course they can.


bloody hell... someone who can just answer the questions... thanks lol.


thats what i thought.
Russ
Member

Registered: 14th Mar 04
Location: Armchair
User status: Offline
28th Oct 05 at 15:00   View User's Profile U2U Member Reply With Quote

well its fuckin obvious!

Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 15:02   View User's Profile U2U Member Reply With Quote

yeah, i just wanted to be 100% sure before i tell him that the professional company he paid to do that for him wants lining up against a wall shooting.
Russ
Member

Registered: 14th Mar 04
Location: Armchair
User status: Offline
28th Oct 05 at 15:06   View User's Profile U2U Member Reply With Quote

oh lol
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
28th Oct 05 at 15:08   View Garage View User's Profile U2U Member Reply With Quote

The router has DHCP enabled, so your guy parked outside gets assigned an address.

He then runs a sweep of pings on the subnet which he's been assigned to look for other computers, or he might not even need to do that if he gets number 5. Just try 4,3,2,1.

He goes opens a the c$ UNC share and logs on as administrator with no password and has a root around the whole hard drive. Quick look around Documents and Settings get some cookies / Outlook dbx files so he can take the file and read your mail offline and take his time over it. Hopefully in the mail are other passwords to other services etc.

Maybe download My Documents if it looks interesting etc.

This is happening as quick as you're reading this as well, woudn't take long.
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
28th Oct 05 at 15:10   View Garage View User's Profile U2U Member Reply With Quote

ps. I'm assuming default configs here, it might not be that easy.

I would do a proper audit before coming to any conclusions about the company who did it.
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 15:14   View User's Profile U2U Member Reply With Quote

audit as in check what?

i know there is no network security for the wireless.
im off there in a min. if i can connect to any accounts computers then im gonna let him know
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
28th Oct 05 at 15:19   View Garage View User's Profile U2U Member Reply With Quote

Just run a few checks, basically try what I just posted.
Bart
Member

Registered: 19th Aug 02
Location: Midsomer Norton, Bristol Avon
User status: Offline
28th Oct 05 at 15:20   View User's Profile U2U Member Reply With Quote

never used/looked at the unc thing.
i just had a quick google at it, and talks about using it in dos.
but ive never tried anything like it.
Is there some quick commands i cant try?
Ian
Site Administrator

Avatar

Registered: 28th Aug 99
Location: Liverpool
User status: Online
28th Oct 05 at 16:12   View Garage View User's Profile U2U Member Reply With Quote

Start -> Run

\\192.168.0.2\c$

replace the 2 with whatever machine you want to look at. Might also be like

\\10.0.0.2

\\10.0.0.4

whatever.

If you join the laptop and it acquires a DHCP address, do a Start -> Run -> cmd on that and type ipconfig

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1

The 2 is your own address, the 1 is the gateway, your target machines will probably be in the middle of those two numbers as you're last to arrive.

 
New Topic

New Poll

  Related Threads Author Forum Replies Views Last Post
Wireless Help Andrew Off Day 22 1261
10th Feb 05 at 01:51
by Peugeot Nut
 
network people. Houckham Off Day 21 1159
17th Feb 05 at 07:26
by willay
 
Whos running XP SP2? dave17 Off Day 20 919
12th Apr 05 at 17:46
by corsadee
 
broadband help Pop Off Day 10 742
17th Apr 05 at 01:41
by Dan B
 
Wireless........ Stu General Chat 11 1706
1st Aug 05 at 09:29
by 16vOllie
 

Corsa Sport » Message Board » Off Day » Geek Day » Wireless Security Issues 29 database queries in 0.0158169 seconds