Page 2 of 4 FirstFirst 1234 LastLast
Results 17 to 32 of 53

Thread: My Wifi has been hacked :(

  1. #17
    Senior Member Blastuk's Avatar
    Join Date
    Nov 2008
    Location
    Newcastle
    Posts
    984
    Thanks
    93
    Thanked
    66 times in 64 posts
    • Blastuk's system
      • Motherboard:
      • Gigabyte Z77X-D3H
      • CPU:
      • Intel Core i5 3570
      • Memory:
      • Corsair Vengeance LP 4x4GB @ 1600mhz
      • Storage:
      • Samsung 840 Pro 250GB, Samsung 850 EVO 500GB
      • Graphics card(s):
      • GeForce GTX 970
      • PSU:
      • OCZ ZS 650W
      • Case:
      • Antec Eleven Hundred
      • Operating System:
      • Windows 7 64bit
      • Monitor(s):
      • Dell 2209WA 22" + Dell U2412M 24"
      • Internet:
      • Virgin 152Mb

    Re: My Wifi has been hacked :(

    Oh, here's a pretty good method for keeping people off your network EVEN IF they manage to get your wifi password, turn off dhcp, set up a custom netmask (anything non-standard or just move a little away from the defaults*) and just set up your ip addresses and dns servers manually. They'll have a lot of fun trying to figure out your setup if they figure out why it's not working automatically


    *instead of 192.168.0.1 / 255.255.255.0
    you could just use a different subnet.. e.g. 192.168.12.1 or something along those lines..
    If you're technically inclined, set up a custom mask entirely.

  2. #18
    . bledd's Avatar
    Join Date
    Jul 2003
    Posts
    1,886
    Thanks
    22
    Thanked
    135 times in 85 posts

    Re: My Wifi has been hacked :(

    mac address filtering is almost pointless, it's just a pain for you and doesn't offer much protection

    use a really long obscure password

    PS3 works fine with WPA2

  3. #19
    Senior Member burble's Avatar
    Join Date
    May 2007
    Location
    Olney
    Posts
    1,138
    Thanks
    8
    Thanked
    90 times in 89 posts

    Re: My Wifi has been hacked :(

    Quote Originally Posted by bledd View Post
    mac address filtering is almost pointless, it's just a pain for you and doesn't offer much protection
    Agreed. If someone has got as far as bypassing the wireless key then sniffing some fo the frames flying about in the air and getting an allowed MAC address from it is trivial.

  4. #20
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Re: My Wifi has been hacked :(

    Condensation of what's been said really, but changing or hiding the SSID is near pointless*, it's easy to detect the MFR of an AP even with SSID broadcast disabled, and it just makes it harder for you to connect stuff. The same goes for MAC filtering, after an intruder has broken through the vault door, a sign saying employees only isn't likely to make an difference, and again just makes it harder for you to add stuff. Try again with WPA2 (not mixed), WPA is broken quite badly, and use a properly long random key from here for example (the full ASCII one). If there's no way to copy text on the consoles, I imagine typing it would be quite hard and prone to errors so just be sure to use I'd say at least 14 characters, no script kiddie is going to bruteforce that - just copy a section from that password generator ideally.

    Oh and as for investigation, you could enter the MAC address into here to see who the device (or the NIC at least) is made by: http://www.coffer.com/mac_find/

    *WPA uses the SSID to create the session keys from the PSK. Rainbow tables have been created for common SSID names which would make a bruteforce against APs with those names easier. Depending on the technical knowledge of the attacker this may be a problem. So I'm going to contradict myself and say DO change the SSID to something uncommon, and stick a few symbols in there for good measure.

    Edit: Oh and here's a list of common SSIDs, ideally make sure yours isn't on there: http://www.wigle.net/gps/gps//Stat
    Last edited by watercooled; 11-03-2011 at 12:20 PM.

  5. Received thanks from:

    oolon (11-03-2011)

  6. #21
    Senior Member oolon's Avatar
    Join Date
    Mar 2007
    Location
    London
    Posts
    2,294
    Thanks
    150
    Thanked
    302 times in 248 posts
    • oolon's system
      • Motherboard:
      • Asus P6T6
      • CPU:
      • Xeon w3680
      • Memory:
      • 3*4GB Kingston ECC
      • Storage:
      • 160GB Intel G2 SSD
      • Graphics card(s):
      • XFX HD6970 2GB
      • PSU:
      • Corsair HX850
      • Case:
      • Antec P183
      • Operating System:
      • Windows 7 Ultimate and Centos 5
      • Monitor(s):
      • Dell 2408WFP
      • Internet:
      • Be* Unlimied 6 down/1.2 up

    Re: My Wifi has been hacked :(

    I am not sure why people are so down on mac filtering, it means that someone must imposter an exisiting machine on the network, so its very noticable when the machine stops working. If you also roll your own dhcp server and hand out the same IP to the same mac every time, its very easy to spot a "bonus" machines, I caught one last night one of my machines "forgot" its mac address and set it to FE:FF:FF:FF:FF:FF !?!?! quickly spotted a new machine on my dynamic range and that its normal ip could not be accessed. (This was on wired BTW)

    The suggestion to go to a non common network settings isn't going to help much, as an attacker will just snoop the network for the IPs around, finding another mac on the network is easy, (that of the access point) they can then use arp, to get it to give away its IP. You don't need to know the subnet mask virtually no one is subnetted at home, all you need to do is to scan for the gateway 256 addresses either side of the working one will probably do it. You need a big address space like a /16 for the search to take any time at all.

    Hard wired and filtering the wireless traffic is the right way to go, you could create a proxy that requires authenication with name and password before granting access.
    (\__/) All I wanted in the end was world domination and a whole lot of money to spend. - NMA
    (='.*=)
    (")_(*)

  7. #22
    blueball
    Guest

    Re: My Wifi has been hacked :(

    I thought WPA was OK with AES but not TKIP?

  8. #23
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Re: My Wifi has been hacked :(

    WPA-AES is considered safe, but I find it a much less common option than WPA2. However, some devices list WPA2 as WPA-AES, just to confuse things.

  9. Received thanks from:


  10. #24
    Environ'mentalist Zadock's Avatar
    Join Date
    Nov 2007
    Location
    Pembroke
    Posts
    1,386
    Thanks
    104
    Thanked
    101 times in 83 posts
    • Zadock's system
      • Motherboard:
      • Asus Z77
      • CPU:
      • Intel Core i5 3570K
      • Memory:
      • Corsair Corsair Vengeance 8Gb (1600Mhz)
      • Storage:
      • Samsung 500GB HD501LJ Spinpoint T, SATA300, 7200 rpm
      • Graphics card(s):
      • XFX HD6950 2GB
      • PSU:
      • Corsair 520W HX Series Modular Powersupply
      • Case:
      • Antec Nine Hundred
      • Operating System:
      • Windows 7 64 HP
      • Monitor(s):
      • Samsung 27" LED
      • Internet:
      • BT

    Re: My Wifi has been hacked :(

    Sounds to me like somone has downloaded backtrack!

    Use WPA2 or the like, takes an age to break it. turn off your router when you are out, change your key regularly.. if the little sod wants to torrent porn and games on your connection he will soon get fed up when he can only use it for an hour or so a day and has to keep re-cracking to get in.
    ___________________________________________________________

    System 1: Case: Antec 900 Motherboard: Asus Z77 CPU: Core i5 3570K @3.4GHz RAM:8Gb DDR3 1600Mhz GFX: XFX AMD Radeon 6950 2Gb (Cayman) HDD: Samsung Spinpoint 500GB O/S: Windows 7 64bit Home Premium

    System 2: Lenovo Ideapad S205: AMD E350 APU (1.6Ghz), 2Gb 1066Mhz DDR3, Radeon HD6310 (integrated), 250Gb HDD, Windows 7 64Bit Home Premium

    System 3:Asus Eee 901: 12Gb Ubuntu 10.10 Gnome Desktop edition


  11. #25
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Re: My Wifi has been hacked :(

    WPA2-AES with a proper key will not be broken.

  12. #26
    Senior Member oolon's Avatar
    Join Date
    Mar 2007
    Location
    London
    Posts
    2,294
    Thanks
    150
    Thanked
    302 times in 248 posts
    • oolon's system
      • Motherboard:
      • Asus P6T6
      • CPU:
      • Xeon w3680
      • Memory:
      • 3*4GB Kingston ECC
      • Storage:
      • 160GB Intel G2 SSD
      • Graphics card(s):
      • XFX HD6970 2GB
      • PSU:
      • Corsair HX850
      • Case:
      • Antec P183
      • Operating System:
      • Windows 7 Ultimate and Centos 5
      • Monitor(s):
      • Dell 2408WFP
      • Internet:
      • Be* Unlimied 6 down/1.2 up

    Re: My Wifi has been hacked :(

    Quote Originally Posted by Zadock View Post
    Sounds to me like somone has downloaded backtrack!
    What is backtrack?
    (\__/) All I wanted in the end was world domination and a whole lot of money to spend. - NMA
    (='.*=)
    (")_(*)

  13. #27
    Thermoelectroceramicist redddraggon's Avatar
    Join Date
    Apr 2007
    Location
    Manchester
    Posts
    940
    Thanks
    27
    Thanked
    67 times in 49 posts
    • redddraggon's system
      • Motherboard:
      • Gigabyte X58A-UD3R (rev2)
      • CPU:
      • Core i7 930
      • Memory:
      • 3x2GB Corsair XMS3 1600MHz
      • Storage:
      • Corsair F60 SSD & 2x WD Caviar Green2TB
      • Graphics card(s):
      • 2 x ATI Radeon HD5870 1GB in CrossFireX
      • PSU:
      • Corsair 650TX
      • Operating System:
      • Windows 7 x64 Professional
      • Monitor(s):
      • Samsung 24" + LG 22"
      • Internet:
      • JANET

    Re: My Wifi has been hacked :(

    Quote Originally Posted by oolon View Post
    What is backtrack?
    http://www.backtrack-linux.org/

    I guess?

    Desktop - i7 930, XMS3 6x2GB DDR3, X58A-UD3R (rev2), 2xHD5870 1GB (CrossFireX), Crucial C300 64GB , 2x2TB WD Caviar Green, Corsair 650TX
    Notebook - MacBook Pro 13" i5 Early 2011

    My flickr

  14. #28
    Senior Member
    Join Date
    Aug 2005
    Location
    Worthing
    Posts
    375
    Thanks
    19
    Thanked
    5 times in 5 posts
    • camalbitboy's system
      • Motherboard:
      • MSI Z87-G45 Gaming
      • CPU:
      • Intel Core i5 4670k at 3.8ghz
      • Memory:
      • 16Gb Corsair Vengeance DDR3 PC3-19200(2400) CAS 11
      • Storage:
      • Samsung 750 Evo 250GB + Plextor 128 ssd + WD Raptor X 150Gb + 1Tb Samsung
      • Graphics card(s):
      • GTX 780ti Zotac
      • PSU:
      • 850W Corsair HX Modular
      • Case:
      • Coolermaster Stacker
      • Operating System:
      • Windows 10 64bit
      • Monitor(s):
      • Dell, 2412, Asus ROG Swift pg279q IPS, LG24"tv
      • Internet:
      • Virgin 120Mb

    Re: My Wifi has been hacked :(

    Ok as expected blocking his mac address just kept him out for a couple of days. Oddly once he had a connection again he didn't go anywhere, just googled a couple of pages, I assume to test connection.

    So now I've changed to WPA2-AES with a some rediculous key that was a right pain in the ass to key into PS3 and Wii, and was a right faff with the number of devices I've got that can connect.

    On the plus side I know its not the neighbours now as they were away this weekend when the hacker reconnected.

    Wait to see how good this hacker is now with a stronger encryption and key. Cheers all for your advice.

  15. #29
    RIP Peterb ik9000's Avatar
    Join Date
    Nov 2009
    Posts
    7,701
    Thanks
    1,839
    Thanked
    1,434 times in 1,057 posts
    • ik9000's system
      • Motherboard:
      • Asus P7H55-M/USB3
      • CPU:
      • i7-870, Prolimatech Megahalems, 2x Akasa Apache 120mm
      • Memory:
      • 4x4GB Corsair Vengeance 2133 11-11-11-27
      • Storage:
      • 2x256GB Samsung 840-Pro, 1TB Seagate 7200.12, 1TB Seagate ES.2
      • Graphics card(s):
      • Gigabyte GTX 460 1GB SuperOverClocked
      • PSU:
      • NZXT Hale 90 750w
      • Case:
      • BitFenix Survivor + Bitfenix spectre LED fans, LG BluRay R/W optical drive
      • Operating System:
      • Windows 7 Professional
      • Monitor(s):
      • Dell U2414h, U2311h 1920x1080
      • Internet:
      • 200Mb/s Fibre and 4G wifi

    Re: My Wifi has been hacked :(

    if it were me I'd change it back. Track the blighter's MAC address, intercept his googlemail log-ins, facebook log ins and the like, clarify his identity and then take your evidence gathered over a month or two and report him to the cops. You may want to send him a cease-and-desist letter (if that's allowable in this country) then I'd also get a lawyer friend to send him a letter threatening court action to recover your losses for a service you paid for and which he has partially deprived you of. Also report him to your ISP who can blacklist him should he apply to them in future, and generally make life as difficult for the pikey freeloader as possible. You'd do everyone in your area a favour cos if he can't get you anymore he'll just target someone else.

    (And are you sure your neighbours also took their kid away with them when they went on holiday?)
    Last edited by ik9000; 14-03-2011 at 12:28 PM.

  16. Received thanks from:

    razer121 (14-03-2011)

  17. #30
    Get in the van. Fraz's Avatar
    Join Date
    Aug 2007
    Location
    Bristol
    Posts
    2,919
    Thanks
    284
    Thanked
    397 times in 231 posts
    • Fraz's system
      • Motherboard:
      • Gigabyte X58A-UD5
      • CPU:
      • Watercooled i7-980X @ 4.2 GHz
      • Memory:
      • 24GB Crucial DDR3-1333
      • Storage:
      • 240 GB Vertex2E + 2 TB of Disk
      • Graphics card(s):
      • Water-cooled Sapphire 7970 @ 1175/1625
      • PSU:
      • Enermax Modu87+
      • Case:
      • Corsair 700D
      • Operating System:
      • Linux Mint 12 / Windows 7
      • Monitor(s):
      • Dell 30" 3008WFP and two Dell 24" 2412M
      • Internet:
      • Virgin Media 60 Mbps

    Re: My Wifi has been hacked :(

    Quote Originally Posted by camalbitboy View Post
    So next i put the unknown mac address in a blocked list, saw it dissapear from the network list, and voila, 10mb speeds again (well 9200kbps, so close enough). Turned PS3 Wii and phones back on and they all work fine.

    My concern is that from my understanding mac address spoofing is pretty easy and so the hacker will be back in again soon I expect.
    So, you're using a MAC address black list. What you want is a MAC address white list, where only your known equipment is allowed to connect. Spoofing isn't going to get them very far then, or at least, you'll notice much quicker.

    Then obviously change passwords/keys, etc, and don't use WEP encryption because it's a bad joke.
    Last edited by Fraz; 14-03-2011 at 12:53 PM.

  18. #31
    stormrazer razer121's Avatar
    Join Date
    Sep 2009
    Posts
    3,178
    Thanks
    880
    Thanked
    146 times in 128 posts

    Re: My Wifi has been hacked :(

    This really sucks, what you want to do is learn how to use backtrack...im sure using that you would be able to intercept him/her in some way
    Quote Originally Posted by TAKTAK View Post
    It was so small that mine wouldn't fit into it

  19. #32
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Re: My Wifi has been hacked :(

    Still pointless, while better than a blacklist, you can just sniff MAC addresses on the network and spoof one of them when it's offline, or worse when it's online and cause problems on the network. For someone who it seems knows his way around wireless networks I really don't think it's worth the effort.

    As ik9000 said, I would go to length to track the sod down. I can't recommend it obviously as I don't know how allowable it is, but I'd set up a linux firewall and log IM, session cookies, etc. Then it's just a matter of using an appropriate session cookie to log into his favourite website and find out his name and possibly address. You're allowed to log what you want on your own network, it's not your fault if some idiot keeps breaking in and happens to get logged.

    I think it was on this forum a while ago, someone had a similar problem to you and a member recommended again a linux firewall to mess around with the content they access, or redirect them to a nasty website. Found the link: http://www.ex-parrot.com/pete/upside-down-ternet.html

  20. Received thanks from:

    ik9000 (14-03-2011)

Page 2 of 4 FirstFirst 1234 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. boost wifi for house to summerhouse
    By keef247 in forum Networking and Broadband
    Replies: 4
    Last Post: 25-02-2008, 02:09 AM
  2. WiFi Walker - detailled hotspot locator + USB Wifi dongle - £21.99!
    By koocha in forum Retail Therapy and Bargains
    Replies: 9
    Last Post: 22-10-2007, 05:54 PM
  3. networking advice(homeplug vs wifi)
    By j.o.s.h.1408 in forum Networking and Broadband
    Replies: 30
    Last Post: 02-06-2007, 06:05 PM
  4. Abit IN9 32X-MAX / AirPace WiFi problem
    By Flanno in forum abit.care@HEXUS
    Replies: 8
    Last Post: 27-01-2007, 12:52 AM
  5. ASUS P5B Deluxe/WiFi-AP Mobo - poor wifi
    By Puncr0c in forum PC Hardware and Components
    Replies: 12
    Last Post: 12-01-2007, 02:05 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •