Upside-down-ternet on DD-WRT

[Pollock]

Text

I'm sure you've seen it.

I have somebody using my wireless who shouldn't be using it (a friend gave him my password), and while I could easily change my password or block his MAC address, that's no fun. Any ideas on how I can mess with him? I have a DD-WRT capable router (just stock firmware at the moment), but I think it would be hilarious to do something like the above mentioned upside-down-ternet.

 

[spidey07]

Why do that? He's yours now, he's on your private network. Why not really fuck with him by running sslstrip or the easy stuff of capturing cookies (messing with his forum posts)? Scan his machine, do whatever you want.

You are legally allowed to do this. Think outside the box - you can have a lot of fun with this.

 

[Pollock]

I have no idea how to do any of this, or where to begin. I am relatively noob at networking.

 

[phoenix79]

mmmm, port sniffing...

 

[JackMDS]

Questionable person Number One is some one that gives his Wireless Password to an None trusted "Friend".

Questionable person Number Two, is a "Friend" that give the password out.

Questionable person number Three is the One who take advndage of the situation and use the password.

If some one has to be "Punished" for the issue, deal first with One and Two instead of choosing the easy Target.

 

[somethingsketchy]

Originally posted by: JackMDS

If some one has to be "Punished" for the issue, deal first with One and Two instead of choosing the easy Target.

Agreed with JackMDS.

There are more than enough websites, books and forums that deal with security for wireless routers. Something simple as MAC address filtering should take all of 5 seconds to look for in a search engine. I'm sure even wiki-websites are dedicated to DD-WRT for most, if not, all of the security options that you would normally have in a wireless router.

Just screwing with someone is no excuse for not protecting your network. Besides you're going to put in the same amount of effort to do something like Upside-Down-Ternet as you would have if you locked down your router in the first place. On top of that you should never share the password to the router with your friend. That's like giving a key to your friend, for your personal safe deposit box. Would you trust him with the contents of that deposit box? I hope not.

EDIT: spelling mistake

 

[n0cmonkey]

airpwn to the rescue!

Actually, I've considered setting up a metasploit instance for situations like this, but got too lazy.