2 ms·
Just a FYI. Certain enterprise access points that implement counter measures against rogue APs should be able to thwart this attack. Here is a link to documenta
by ryao 9y ago
Just a FYI. Certain enterprise access points that implement counter measures against rogue APs should be able to thwart this attack. Here is a link to documentation of the feature in one such vendor’s products:
https://docs.ruckuswireless.com/unleashed/200.5/t-EnablingDisablingRogueAPDetection.html https://docs.ruckuswireless.com/unleashed/200.5/t-EnablingDi...
The AP will begin broadcasting deauth frames against the rogue AP as long as it sees it. There are probably some edge cases, but I would expect either the rogue and real APs will fight over the clients indefinitely (thwarting information leaks) or the attack code will trigger an exception and crash because what programmer would expect the client to immediately disconnect?
- ryao 9y agoThis project seems to enable the same thing on commodity hardware: https://github.com/moha99sa/EvilAP_Defender/wiki https://github.com/moha99sa/EvilAP_Defender/wiki Setup some RPis with WiFi dongles and you can likely make a perimeter defense. IANAL and I do not know how the FCC would view this, although I imagine it is not worse than the Ruckus APs that can do this, yet still passed their certification. This is not a substitute for patching devices, but it might help somewhat with devices that will never be patched.