Wireless Vulnerabilities & Exploits
Wireless Vulnerabilities & Exploits
WVE ID: WVE-2005-0054
Type: Exploit
Status: Candidate
Classification:
Hijacking
Description:
Hotspotter is a tool used to exploit wireless clients probing for their preferred networks.
Discussion:
Hotspotter is a free open source tool that will passively monitor probe
requests from Windows XP clients and compares them to common
"hotspot" SSID names. If there is a match with the client’s request,
the rogue client will act as an AP with the same SSID.
Once associated to the rogue AP the hacker can assign an IP via
DHCP or run other scanning tools against the victim.
Credits
Author:
Joshua
Wright
(jwright@hasborg.com)
: None
Author:
Max
Moser
(mmo@remote-exploit.org)
: remote-exploit.org
References
URL:
http://www.remote-exploit.org/index.php/Hotspotter_main
URL:
http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019764.html
Released: 2004-04-05
Submitter
Andrew
Lockhart
(alockhart@networkchemistry.com)
: Network Chemistry
Submitted: Thu Dec 01 10:46:23 -0800 2005
Candidate Date: Thu Dec 01 12:57:12 -0800 2005
