{"id":130236,"date":"2009-12-07T15:36:00","date_gmt":"2009-12-07T20:36:00","guid":{"rendered":"tag:blogger.com,1999:blog-7196788127833928948.post-6649497434838172701"},"modified":"2009-12-07T15:36:00","modified_gmt":"2009-12-07T20:36:00","slug":"corporate-guest-wlan-the-best-place-for-eavesdropping-to-interesting-traffic","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/130236","title":{"rendered":"Corporate Guest WLAN – The best place for Eavesdropping to Interesting Traffic"},"content":{"rendered":"

When pen-testing a corporation, always look for the Guest WLAN. If there is one and you manage to get on it, you are in luck!
Corporate Guest WLANs are a great place to get a lot of interesting and possibly confidential information without much effort. And this is simply because there are a lot of corporate laptops on the same WLAN.<\/p>\n

Ofcourse, you’ll discuss that the corporate devices have wired access to the internet, which is much more reliable and faster. But also, the wired infrastructure is fully controlled by IT – with web filters, content filters etc. So on the guest WLAN you can easily find the following high-profile targets related to the corporation:<\/p>\n

    \n
  1. corporate laptop holders <\/span>– usually employees higher in the hierarchy who just got bored from the restrictions of the corporate Internet filters can easily turn on their wi-fi and check the private e-mail, or just download something.<\/li>\n
  2. corporate guests<\/span> – most visitors to corporations have WLAN enabled devices, ranging from mobile phones\/pda, over netbooks to full blown laptops<\/span><\/li>\n
  3. external contractors<\/span> – a lot of corporations will isolate external contractors to the guest WLAN for internet access.<\/li>\n<\/ol>\n

    The following diagram is an example of hunting for interesting targets in the corporate WLAN<\/span>
    \"\"<\/a>
    The diagram clearly depicts the high concentration of possible high profile targets – marked in red color.<\/p>\n

    One can always make the argument that the same attack can be made within a Mall, or even in the home networks of those interesting targets. This argument is completely true, but in a Mall your high profile targets are blended in the multitude of the students, casual freebie surfers and even the mall store clerks with their WLAN devices.<\/p>\n

    And the home environment is even more difficult, because the high profile targets are dispersed all over the city, and you may not know where they reside. So, sniffing the networks one specific high profile target will bring a lot of costs to the attacker.<\/p>\n

    The following diagram is an example of the difficulties in sniffing for interesting targets in the home or public places WLAN<\/span><\/p>\n

    \"\"<\/a>
    So, for my money, I’ll always prefer to sniff for traffic in the corporate guest WLAN<\/span><\/p>\n

    Talkback and comments are most welcome<\/p>\n

    Related posts
    5 Rules to Home Wi-Fi Security<\/a>
    Example – Bypassing WiFi MAC Address Restriction<\/a>
    Obtaining a valid MAC address to bypass WiFi MAC Restriction<\/a>
    DHCP Security – The most overlooked service on the network<\/a><\/p>\n

    <\/div>\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    When pen-testing a corporation, always look for the Guest WLAN. If there is one and you manage to get on it, you are in luck!Corporate Guest WLANs are a great place to get a lot of interesting and possibly confidential information without much effort. And this is simply because there are a lot of corporate […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-130236","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/130236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=130236"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/130236\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=130236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=130236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=130236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}