Rouge Wireless AP

[Steven Bonici-2]

We have residential homes with PC's installed, Internet access, and I
know there are people installing there own wireless Aps during overnight
shifts because they ones we have installed are secured.  I know there
are a lot of ways to find out, but is there any relatively small
application that can be installed on a PC to identify either the rouge
AP or laptop connecting to the network?

Thanks - Steven

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Daniel A. O'Neal]

Check out this software, not sure what kinda business you have, but might be worth looking into
http://www.manageengine.com/products/wifi-manager/features.html

does WLAN management, firmware configurations, and also rogue detections for AP/clients/etc.

Daniel


-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of Steven Bonici
Sent: Wednesday, November 11, 2009 1:28 PM
To: security-basics@...
Subject: Rouge Wireless AP


We have residential homes with PC's installed, Internet access, and I
know there are people installing there own wireless Aps during overnight
shifts because they ones we have installed are secured.  I know there
are a lot of ways to find out, but is there any relatively small
application that can be installed on a PC to identify either the rouge
AP or laptop connecting to the network?

Thanks - Steven

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Daniel Hood-2]

I know on Cisco switches they have a feature called "port security",
where you can limit the number of MAC addresses on a switches port.
You can limit the amount of MAC addresses on each port to just one and
also limit it to the first IP plugged in. That way if someone plugs a
Wireless AP in, it will shutdown the port and they will have to
contact you to get it opened. You could try implementing something
like this. I'm not sure what the feature is called on other brand
switches but googling should turn it up.

Daniel

On Thu, Nov 12, 2009 at 6:28 AM, Steven Bonici <sbonici@...> wrote:

>
> We have residential homes with PC's installed, Internet access, and I
> know there are people installing there own wireless Aps during overnight
> shifts because they ones we have installed are secured.  I know there
> are a lot of ways to find out, but is there any relatively small
> application that can be installed on a PC to identify either the rouge
> AP or laptop connecting to the network?
>
> Thanks - Steven
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Murda Mcloud]

How about NetStumbler? Or mini stumbler? They find any wireless ap's and
tell you how strong their signals are and SSID's if needed. It's 'free' so
feel free to donate!

http://www.netstumbler.com/

What is harder is tracking them down or triangulating position. NetStumbler
has some GPS integration which could help you with 'maps'.

> >-----Original Message-----
> >From: listbounce@... [mailto:listbounce@...]
> >On Behalf Of Steven Bonici
> >Sent: Thursday, November 12, 2009 5:28 AM
> >To: security-basics@...
> >Subject: Rouge Wireless AP
> >
> >
> >We have residential homes with PC's installed, Internet access, and I
> >know there are people installing there own wireless Aps during overnight
> >shifts because they ones we have installed are secured.  I know there
> >are a lot of ways to find out, but is there any relatively small
> >application that can be installed on a PC to identify either the rouge
> >AP or laptop connecting to the network?
> >
> >Thanks - Steven
> >
> >------------------------------------------------------------------------
> >Securing Apache Web Server with thawte Digital Certificate
> >In this guide we examine the importance of Apache-SSL and who needs an
> >SSL certificate.  We look at how SSL works, how it benefits your company
> >and how your customers can tell if a site is secure. You will find out
> >how to test, purchase, install and use a thawte Digital Certificate on
> >your Apache web server. Throughout, best practices for set-up are
> >highlighted to help you ensure efficient ongoing management of your
> >encryption keys and digital certificates.
> >
> >http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f
> >727d1
> >------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[martinez85]

Any open source, freeware tools like this?
Sent via BlackBerry by AT&T

-----Original Message-----
From: "Daniel A. O'Neal" <doneal@...>
Date: Thu, 12 Nov 2009 14:57:18
To: Steven Bonici<sbonici@...>; security-basics@...<security-basics@...>
Subject: RE: Rouge Wireless AP

Check out this software, not sure what kinda business you have, but might be worth looking into
http://www.manageengine.com/products/wifi-manager/features.html

does WLAN management, firmware configurations, and also rogue detections for AP/clients/etc.

Daniel


-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of Steven Bonici
Sent: Wednesday, November 11, 2009 1:28 PM
To: security-basics@...
Subject: Rouge Wireless AP


We have residential homes with PC's installed, Internet access, and I
know there are people installing there own wireless Aps during overnight
shifts because they ones we have installed are secured.  I know there
are a lot of ways to find out, but is there any relatively small
application that can be installed on a PC to identify either the rouge
AP or laptop connecting to the network?

Thanks - Steven

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Nikhil Wagholikar]

Hello Steven,

You can give a try to 'Netstumbler'.

More Info: http://en.wikipedia.org/wiki/Netstumbler
Download: http://www.netstumbler.com/downloads/

--
Nikhil Wagholikar
Practice Lead | Security Assessments & Digital Forensics
Network Intelligence India Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://iisecurity.in/courses/Training Calendar.html

2009/11/12 Steven Bonici <sbonici@...>

>
> We have residential homes with PC's installed, Internet access, and I
> know there are people installing there own wireless Aps during overnight
> shifts because they ones we have installed are secured.  I know there
> are a lot of ways to find out, but is there any relatively small
> application that can be installed on a PC to identify either the rouge
> AP or laptop connecting to the network?
>
> Thanks - Steven
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Erin Carroll]

Ekahau Heat Mapper is a useful tool for building coverage maps &
triangulation that I've used with some success. www.ekahau.com


--
Erin Carroll
Moderator, SecurityFocus pen-test mailing list
"Do Not Taunt Happy-Fun Ball"

> -----Original Message-----
> From: listbounce@...
> [mailto:listbounce@...] On Behalf Of Murda Mcloud
> Sent: Thursday, November 12, 2009 2:53 PM
> To: 'Steven Bonici'; security-basics@...
> Subject: RE: Rouge Wireless AP
>
> How about NetStumbler? Or mini stumbler? They find any wireless ap's
> and
> tell you how strong their signals are and SSID's if needed. It's 'free'
> so
> feel free to donate!
>
> http://www.netstumbler.com/
>
> What is harder is tracking them down or triangulating position.
> NetStumbler
> has some GPS integration which could help you with 'maps'.
>
> > >-----Original Message-----
> > >From: listbounce@...
> [mailto:listbounce@...]
> > >On Behalf Of Steven Bonici
> > >Sent: Thursday, November 12, 2009 5:28 AM
> > >To: security-basics@...
> > >Subject: Rouge Wireless AP
> > >
> > >
> > >We have residential homes with PC's installed, Internet access, and
> I
> > >know there are people installing there own wireless Aps during
> overnight
> > >shifts because they ones we have installed are secured.  I know
> there
> > >are a lot of ways to find out, but is there any relatively small
> > >application that can be installed on a PC to identify either the
> rouge
> > >AP or laptop connecting to the network?
> > >
> > >Thanks - Steven
> > >
> > >--------------------------------------------------------------------
> ----
> > >Securing Apache Web Server with thawte Digital Certificate
> > >In this guide we examine the importance of Apache-SSL and who needs
> an
> > >SSL certificate.  We look at how SSL works, how it benefits your
> company
> > >and how your customers can tell if a site is secure. You will find
> out
> > >how to test, purchase, install and use a thawte Digital Certificate
> on
> > >your Apache web server. Throughout, best practices for set-up are
> > >highlighted to help you ensure efficient ongoing management of your
> > >encryption keys and digital certificates.
> > >
> >
> >http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f
> > >727d1
> > >--------------------------------------------------------------------
> ----
>
>
> -----------------------------------------------------------------------
> -
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an
> SSL certificate.  We look at how SSL works, how it benefits your
> company and how your customers can tell if a site is secure. You will
> find out how to test, purchase, install and use a thawte Digital
> Certificate on your Apache web server. Throughout, best practices for
> set-up are highlighted to help you ensure efficient ongoing management
> of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be44
> 2f727d1
> -----------------------------------------------------------------------
> -

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Nick Duda]

I know the OP is looking for cheap/free solutions, but we use Cisco Wireless LAN Controllers for rogue AP detection, (auto/manual)containment, and WIPS. Works pretty good.


-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of Murda Mcloud
Sent: Thursday, November 12, 2009 5:53 PM
To: 'Steven Bonici'; security-basics@...
Subject: RE: Rouge Wireless AP

How about NetStumbler? Or mini stumbler? They find any wireless ap's and
tell you how strong their signals are and SSID's if needed. It's 'free' so
feel free to donate!

http://www.netstumbler.com/

What is harder is tracking them down or triangulating position. NetStumbler
has some GPS integration which could help you with 'maps'.

> >-----Original Message-----
> >From: listbounce@... [mailto:listbounce@...]
> >On Behalf Of Steven Bonici
> >Sent: Thursday, November 12, 2009 5:28 AM
> >To: security-basics@...
> >Subject: Rouge Wireless AP
> >
> >
> >We have residential homes with PC's installed, Internet access, and I
> >know there are people installing there own wireless Aps during overnight
> >shifts because they ones we have installed are secured.  I know there
> >are a lot of ways to find out, but is there any relatively small
> >application that can be installed on a PC to identify either the rouge
> >AP or laptop connecting to the network?
> >
> >Thanks - Steven
> >
> >------------------------------------------------------------------------
> >Securing Apache Web Server with thawte Digital Certificate
> >In this guide we examine the importance of Apache-SSL and who needs an
> >SSL certificate.  We look at how SSL works, how it benefits your company
> >and how your customers can tell if a site is secure. You will find out
> >how to test, purchase, install and use a thawte Digital Certificate on
> >your Apache web server. Throughout, best practices for set-up are
> >highlighted to help you ensure efficient ongoing management of your
> >encryption keys and digital certificates.
> >
> >http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f
> >727d1
> >------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Boyd, Chad]

It doesn't do everything that ManageEngine does, but we use NeDi: http://www.nedi.ch/about

It does a great job backing up configs, health monitoring, has some capabilities to push commands back out, and we have it configured to do a full discovery every hour, so if a rouge is detected, we can find out exactly what switch port it was plugged into and track it down.

I'd love to get ManageEngine in, but for the price (free), NeDi does the trick very well.

Chad Boyd
Systems Dude


-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of martinez85@...
Sent: Thursday, November 12, 2009 5:04 PM
To: Daniel A. O'Neal; listbounce@...; Steven Bonici; security-basics@...
Subject: Re: Rouge Wireless AP

Any open source, freeware tools like this?
Sent via BlackBerry by AT&T

-----Original Message-----
From: "Daniel A. O'Neal" <doneal@...>
Date: Thu, 12 Nov 2009 14:57:18
To: Steven Bonici<sbonici@...>; security-basics@...<security-basics@...>
Subject: RE: Rouge Wireless AP

Check out this software, not sure what kinda business you have, but might be worth looking into
http://www.manageengine.com/products/wifi-manager/features.html

does WLAN management, firmware configurations, and also rogue detections for AP/clients/etc.

Daniel


-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of Steven Bonici
Sent: Wednesday, November 11, 2009 1:28 PM
To: security-basics@...
Subject: Rouge Wireless AP


We have residential homes with PC's installed, Internet access, and I
know there are people installing there own wireless Aps during overnight
shifts because they ones we have installed are secured.  I know there
are a lot of ways to find out, but is there any relatively small
application that can be installed on a PC to identify either the rouge
AP or laptop connecting to the network?

Thanks - Steven

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

[Greg Copenhaver]

Or kismet, which is passive, rather than actively probing like
NetStumbler does.  Since it does not rely on probing to detect networks,
and rather just listens for any wifi traffic, it will detect APs even if
they have their SSID broadcast disabled, and won't give you away as
someone searching for the rogue AP.  kismet is also open source, if that
matters to you at all.  It also has built-in GPS support, through the
gpsd daemon.

http://www.kismetwireless.net/

I'm pretty sure kismet in the BackTrack live cd, so if you run that (no
installation needed), you can run kismet without the hassle of
installing a new OS (linux) and compiling kismet.  It's possible you may
have driver issues for your wifi card, however.

http://www.remote-exploit.org/backtrack.html


On Fri, 2009-11-13 at 08:52 +1000, Murda Mcloud wrote:

> How about NetStumbler? Or mini stumbler? They find any wireless ap's and
> tell you how strong their signals are and SSID's if needed. It's 'free' so
> feel free to donate!
>
> http://www.netstumbler.com/
>
> What is harder is tracking them down or triangulating position. NetStumbler
> has some GPS integration which could help you with 'maps'.
>
> > >-----Original Message-----
> > >From: listbounce@... [mailto:listbounce@...]
> > >On Behalf Of Steven Bonici
> > >Sent: Thursday, November 12, 2009 5:28 AM
> > >To: security-basics@...
> > >Subject: Rouge Wireless AP
> > >
> > >
> > >We have residential homes with PC's installed, Internet access, and I
> > >know there are people installing there own wireless Aps during overnight
> > >shifts because they ones we have installed are secured.  I know there
> > >are a lot of ways to find out, but is there any relatively small
> > >application that can be installed on a PC to identify either the rouge
> > >AP or laptop connecting to the network?
> > >
> > >Thanks - Steven
> > >
> > >------------------------------------------------------------------------
> > >Securing Apache Web Server with thawte Digital Certificate
> > >In this guide we examine the importance of Apache-SSL and who needs an
> > >SSL certificate.  We look at how SSL works, how it benefits your company
> > >and how your customers can tell if a site is secure. You will find out
> > >how to test, purchase, install and use a thawte Digital Certificate on
> > >your Apache web server. Throughout, best practices for set-up are
> > >highlighted to help you ensure efficient ongoing management of your
> > >encryption keys and digital certificates.
> > >
> > >http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f
> > >727d1
> > >------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>

[Daniel A. O'Neal]

ManageEngine do have some free versions of their software, which is what I use for simple reporting on servers and high interest devices.  However as I said before, depending on the company, the investment in the full version might be worth it.

My biggest problem with Linux is: You get what you pay for, whether it's in cash or labor hours.

Daniel

-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of Greg Copenhaver
Sent: Friday, November 13, 2009 11:31 AM
To: 'Steven Bonici'
Cc: Murda Mcloud; security-basics@...
Subject: RE: Rouge Wireless AP

Or kismet, which is passive, rather than actively probing like NetStumbler does.  Since it does not rely on probing to detect networks, and rather just listens for any wifi traffic, it will detect APs even if they have their SSID broadcast disabled, and won't give you away as someone searching for the rogue AP.  kismet is also open source, if that matters to you at all.  It also has built-in GPS support, through the gpsd daemon.

http://www.kismetwireless.net/

I'm pretty sure kismet in the BackTrack live cd, so if you run that (no installation needed), you can run kismet without the hassle of installing a new OS (linux) and compiling kismet.  It's possible you may have driver issues for your wifi card, however.


http://www.remote-exploit.org/backtrack.html


On Fri, 2009-11-13 at 08:52 +1000, Murda Mcloud wrote:

> How about NetStumbler? Or mini stumbler? They find any wireless ap's
> and tell you how strong their signals are and SSID's if needed. It's
> 'free' so feel free to donate!
>
> http://www.netstumbler.com/
>
> What is harder is tracking them down or triangulating position.
> NetStumbler has some GPS integration which could help you with 'maps'.
>
> > >-----Original Message-----
> > >From: listbounce@...
> > >[mailto:listbounce@...]
> > >On Behalf Of Steven Bonici
> > >Sent: Thursday, November 12, 2009 5:28 AM
> > >To: security-basics@...
> > >Subject: Rouge Wireless AP
> > >
> > >
> > >We have residential homes with PC's installed, Internet access, and
> > >I know there are people installing there own wireless Aps during
> > >overnight shifts because they ones we have installed are secured.  
> > >I know there are a lot of ways to find out, but is there any
> > >relatively small application that can be installed on a PC to
> > >identify either the rouge AP or laptop connecting to the network?
> > >
> > >Thanks - Steven
> > >
> > >-------------------------------------------------------------------
> > >----- Securing Apache Web Server with thawte Digital Certificate In
> > >this guide we examine the importance of Apache-SSL and who needs an
> > >SSL certificate.  We look at how SSL works, how it benefits your
> > >company and how your customers can tell if a site is secure. You
> > >will find out how to test, purchase, install and use a thawte
> > >Digital Certificate on your Apache web server. Throughout, best
> > >practices for set-up are highlighted to help you ensure efficient
> > >ongoing management of your encryption keys and digital certificates.
> > >
> > >http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6
> > >be442f
> > >727d1
> > >-------------------------------------------------------------------
> > >-----
>
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this
> guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --
>

[Kurt Buff]

On Wed, Nov 11, 2009 at 11:28, Steven Bonici <sbonici@...> wrote:
>
> We have residential homes with PC's installed, Internet access, and I
> know there are people installing there own wireless Aps during overnight
> shifts because they ones we have installed are secured.  I know there
> are a lot of ways to find out, but is there any relatively small
> application that can be installed on a PC to identify either the rouge
> AP or laptop connecting to the network?
>
> Thanks - Steven

http://www.metageek.net/products/inssider

Among others that are on that site or linked to on that site.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------