7 ms·

I don't quite get the point of this. Basically any home or small buisness router is going to have a password or it's a public wifi hotspot anyway. Am I missing

by dtx1 2y ago

I don't quite get the point of this. Basically any home or small buisness router is going to have a password or it's a public wifi hotspot anyway. Am I missing anything?

asynchronous 2y ago
Back in the day it was a way to capture a lot of handshakes from a lot of different WiFi networks, then offline and back home crack the passwords and get a growing list of networks you could get into. But all that to say that hackers don’t exactly need a reason to have a hobby.
deleted 2y ago
[deleted]
metrix 2y ago
It's not to get into a network, it's just to list where they're at.. For points. Similar to internet points :). There's no hacking involved just nerds being nerds What you find shows up here: https://wigle.net/ https://wigle.net/ As you can see there's quite a few people who do it
- niceguy4 2y ago
  Wardriving for sex toys! https://www.pentestpartners.com/security-blog/screwdriving-locating-and-exploiting-smart-adult-toys/ https://www.pentestpartners.com/security-blog/screwdriving-l...
- SpaceLawnmower 2y ago
  The "What has this project been used for?" section in the wigle FAQ is not very compelling tbh. Now that most routers ship WPA-2 secured by default and you can find free wifi everywhere, I think the most valid use that remains is finding malicious networks. But it seems to me that by and large this is nerds doing free work for the people who use their data commercially which seems kind of anti-hacker.
  - strken 2y ago
    I'm surprised nobody's using it for geolocation. AFAIK Google already does that, so a free competitor would be a compelling justification.
sva_ 2y ago
There are definitely ways like deauth all clients, grab hash and try to crack it; or evil twin attack.
teeray 2y ago
Most business wifi passwords are so ridiculously simple they could be trivially cracked.
sandworm101 2y ago
Passwords matter if your goal is to get free wifi. But wardriving can also scan for devices ... vulnerable/exploitable devices. It is not hard to track down specific vehicles and security systems, which are the first steps to all sorts of high end property crime. The uuid for a tesla car's bluetooth is 0xFE96 or 0xFE97. Some targeted wardriving easily gives you the general location of every tesla in a neighbourhood, and then the phones that unlock them. Then you sniff the ssid from the phone, look it up in wigle, and you know exactly what car lives in what garage, along with where the phone is that can start said car. Wardriving isnt all about kids wanting free wifi.

by dtx1 2y ago

I don't quite get the point of this. Basically any home or small buisness router is going to have a password or it's a public wifi hotspot anyway. Am I missing anything?

asynchronous 2y ago

Back in the day it was a way to capture a lot of handshakes from a lot of different WiFi networks, then offline and back home crack the passwords and get a growing list of networks you could get into. But all that to say that hackers don’t exactly need a reason to have a hobby.

deleted 2y ago

[deleted]

metrix 2y ago

It's not to get into a network, it's just to list where they're at.. For points. Similar to internet points :). There's no hacking involved just nerds being nerds What you find shows up here: https://wigle.net/ https://wigle.net/ As you can see there's quite a few people who do it

niceguy4 2y ago
Wardriving for sex toys! https://www.pentestpartners.com/security-blog/screwdriving-locating-and-exploiting-smart-adult-toys/ https://www.pentestpartners.com/security-blog/screwdriving-l...
SpaceLawnmower 2y ago
The "What has this project been used for?" section in the wigle FAQ is not very compelling tbh. Now that most routers ship WPA-2 secured by default and you can find free wifi everywhere, I think the most valid use that remains is finding malicious networks. But it seems to me that by and large this is nerds doing free work for the people who use their data commercially which seems kind of anti-hacker.
- strken 2y ago
  I'm surprised nobody's using it for geolocation. AFAIK Google already does that, so a free competitor would be a compelling justification.

sva_ 2y ago

There are definitely ways like deauth all clients, grab hash and try to crack it; or evil twin attack.

teeray 2y ago

Most business wifi passwords are so ridiculously simple they could be trivially cracked.

sandworm101 2y ago

Passwords matter if your goal is to get free wifi. But wardriving can also scan for devices ... vulnerable/exploitable devices. It is not hard to track down specific vehicles and security systems, which are the first steps to all sorts of high end property crime. The uuid for a tesla car's bluetooth is 0xFE96 or 0xFE97. Some targeted wardriving easily gives you the general location of every tesla in a neighbourhood, and then the phones that unlock them. Then you sniff the ssid from the phone, look it up in wigle, and you know exactly what car lives in what garage, along with where the phone is that can start said car. Wardriving isnt all about kids wanting free wifi.