WVE ID: WVE-2005-0025
Type: Exploit
Status: Candidate
Classification:
Other
Description:
Netstumbler is an active 802.11 discovery tool for Windows.
Discussion:
Netstumbler is the original 802.11 network discovery tool for Windows 2000 and XP. However, unlike more sophisticated 802.11 discovery tools, Netstumbler makes use of probe requests for finding 802.11 networks in the vicinity.
Because of this, it is classified as an active discovery tool in that it sends traffic to elicit probe responses from access points in the area. This is in constrast to passive 802.11 discovery tools that monitor the airwaves for 802.11 traffic. This key difference makes it fairly easy to detect when an active 802.11 discovery tool is in use.
Cards that were compatible with Netstumbler were limited to ORiNOCO cards in early releases. However, newer releases of Netstumbler should work with nearly any wireless card that is compatible with Windows.
Some notable features of Netstumbler are graphical displays of RSSI for each network detected as well as GPS support to aid in creating network coverage maps.
Credits
Author:
Marius
Milner
(mariusm@pacbell.net)
: None
References
URL:
http://www.netstumbler.com/downloads/
Released: 2001-05-05
Submitter
Andrew
Lockhart
(alockhart@networkchemistry.com)
: Network Chemistry
Submitted: Tue Nov 01 12:14:23 -0800 2005
Candidate Date: Tue Nov 01 12:14:48 -0800 2005

