Watching a hacker?


Status
Not open for further replies.

craigix

Mega GP Mania
Joined
Feb 3, 2003
Messages
11,008
Location
England
Website
twitter.com
My grandparents neighbours are using my granparents wifi connection without permission, they even changed the router password which I've just reset.


I've not stopped them accessing the wifi though as I'd like to see what they are doing.


They have ran up a £150 bill on my grandparents account in the last month due to incredible bandwidth usage (hundreds of gigs).


What I'm wondering is the best way to observe their activities, I'm wondering if I could set up a proxy and push all the wifi traffic though it and see what


they are up to? Could someone advice the easiest way to see what they are doing on a windows PC?


Thanks,


Craig
 
My grandparents neighbours are using my granparents wifi connection without permission, they even changed the router password which I've just reset.


I've not stopped them accessing the wifi though as I'd like to see what they are doing.


They have ran up a £150 bill on my grandparents account in the last month due to incredible bandwidth usage (hundreds of gigs).


What I'm wondering is the best way to observe their activities, I'm wondering if I could set up a proxy and push all the wifi traffic though it and see what


they are up to? Could someone advice the easiest way to see what they are doing on a windows PC?


Thanks,


Craig

setup a PC as a router between the wifi router and the internet, log all the HTTP traffic specially myspace, facebook, etc. you can probably figure out who they are by the pages/forums they browse.


... and collect material for blackma^H^H^H^H^H^H^H filing a formal complaint
 
A Linux machine with a wireless connection and LAN , share the wireless using same ssid and encryption that hacked router , install squid, some squid plugins, enjoy
 
For added fun, fill their hard drive with horse porn. Or something else that's just as nasty.
 
Last edited by a moderator:
My grandparents neighbours are using my granparents wifi connection without permission, they even changed the router password which I've just reset.


I've not stopped them accessing the wifi though as I'd like to see what they are doing.


They have ran up a £150 bill on my grandparents account in the last month due to incredible bandwidth usage (hundreds of gigs).


What I'm wondering is the best way to observe their activities, I'm wondering if I could set up a proxy and push all the wifi traffic though it and see what


they are up to? Could someone advice the easiest way to see what they are doing on a windows PC?


Thanks,


Craig
Internet Traffic Agent is probably one of the easiest pieces of software to use for this particular application. There are other more robust ways to go about it, but they all require more advanced knowledge of TCP/IP networking (packet sniffing, etc).
 
Get a representative of your Grandparents service provider to come & witness the evidence 'live'. It's theft, and their confirmation carries weight.


If you can't encourage your GPs to switch the router off at night, put it on a timer so mammoth overnight download sessions aren't possible anymore.
 
Last edited by a moderator:
Wireshark gives you all the information you'll want if you can get the traffic go through the PC. B)


If you want to tease them, you can also set static DHCP leases to the legitimate computers, leave some dynamic DHCP range, but firewall them out, possibly even only some ports. Drop packets, don't reject so they have to time out. They can connect and their connection seems to work fine, pings go through and all. Just to mess with them :p
 
Last edited by a moderator:
OK. Most wireless routers have a logging feature wich you can turn on to monitor traffic.


1. Go into the router and assign the wireless devices in the house their own IP. Then set the router to only accept those IPs and no other connections. Not hard but a little time consuming.


2. Turn off SSID discovery. That router is advertising it is out there to connect with. Change the SSID and turn off the discovery. They will then have to try to figure out the name of the router to connect to it.


3. Enable WEP2 security.


4. If you want to be jerky so you can monitor them but not get screwed on bandwidth. Drop the MTU's for their connection and cap their bandwidth.


Make sure you when you do these changes that you disconnect all users and remove the router from the net. All these can be accomplished pretty easily. All the router manufacturers have forums to help with securing your router.


I have set up several home wireless networks and never had a customer complain about their internet being robbed.
 
You still have Grandparents Craig? How old are you?


I wish mine were still about...my Grandpa would've loved the Internet...made me quite sad that has, sniff.
 
"Proper" way is to buy a wifi dongle which can be put into monitor mode in something like backtrack, then play around with the aircrack-ng package. Cheap but more complex to route alternative is to wire a computer in between your router and your modem. Macs are pretty good for this since their internet sharing option is pretty powerful and they run wireshark nicely.


Be careful how long you let it go on though; your grandparents are the ones responsible for what goes on through their internet connection.
 
3. Enable WEP2 security.
I hope this was a typo, because WEP2 isn't really used by anyone, or supported by any hardware.


If you want to see what they are doing, try running driftnet.


Always great fun at hacker-events :D


If you want to see more detail about the traffic going on your network a proper proxy is required. Probably this is too much effort for something like this.


And if you want to mess with them, you can always replace all images or run upside-down-ternet :D
 
And if you want to mess with them, you can always replace all images or run upside-down-ternet :D

Absolutely f*in brilliant :lol: :lol: :lol:


Although I think that putting a box in the middle and watching the traffic for a while would be useful, too. You know, bump into the neighbours on the street corner and greeting them with "Oh - Did you enjoy 'Speed 2'? You did download that yesterday, didn't you?" out of the blue (i.e. without saying anything about grannies or wifi or anything). "And oh - The movie that was downloaded later - Do you watch that kind of stuff toghether, or?" :D
 
Last edited by a moderator:
Unless you've got WPA2 on that router and they've still managed to sneak in, calling them hackers is a lot like calling the guy who walked through your open front door and took your TV while you were sitting on the couch watching him a cat burglar.
 
Lol, I love all the nice pranks idea... some of them are really great. that said, if you only want them to stop using your GP wifi, forget all this thing about SSID discovery MAC adress and such, all theses kind of counter measure are easily defeated by anyone able to run backtrack... just use WPA2 with a long key of random character...


almost all WPA2 attack are dictionary attacks... at least all the easy one are (or did I missed a recent news?)
 
Note that spying on them may be illegal. (ie: someone else being illegal does not excuse your also doing somethign illegal in the name of the law, better to just fix the problem and move on.)


Just cut them off and be done with it; WPA2 and MAC filtering is easy stuff, no need to go much further than that. Take you no time to set up (beyond typing in known MAC addies, just ti discourage casual drive by jerks.)


Ah, I get it though, I suppose tyou want to see if they're running torrents or something, so you can present them with a bandwidth bill and say 'pay up bitches!' .. but theres no way to go back in time and prove they were the ones using bandwidth (and not say a virus on your gpa's laptop..) -- though depends what small claims judge you get, if they'd go on gutt instinct or letter of the law.


jeff
 
Status
Not open for further replies.
Back
Top