i hacked my friend wisp - he use user manager 3.

13

Post new topic Reply to topic Page 1 of 1

[ 9 posts ]
Print view Previous topic | Next topic
Author Message
elnagar_ali
Post subject: i hacked my friend wisp - he use user manager 3.13
PostPosted: Thu Sep 18, 2008 1:28 am
Offline
just joined

Joined: Mon Aug 28, 2006 3:14 am

Posts: 19
Karma: 0

plz its a big Trouble

my friend have wisp using mikrotik user manager 3.13
and he asked me to try to hack the wisp
frist i open netcut and take one cilent data -ip address and mac address
and change my ip and mac to the same this client
first i write the ip address manauly and then change the mac

when i do that i haked the wisp and i can open web site and opsn yahoo messanger
i have full access to the internet
plz some one tell me - how to protect the mikrotik router os from this hack?

Top
Profile

aldalil
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Thu Sep 18, 2008 11:44 am
Offline
Frequent Visitor
Frequent Visitor

Joined: Mon Jun 25, 2007 3:43 am

Posts: 62
Karma: 0

Hi Ali,

It depends on how much your network design is complicated and what internet access
authentication is required.

As you mentioned, there was no any kind of security or wireless encryption, then you can access the
network easily.
The internet access authentication is by assigned IP address to a MAC address, supposing that there
are no 2 identical MAC on the same network and also no 2 IP address on the same network. (As the
MAC address can be easily changed to a virtual MAC address, then you have to use different kind
of authentication depending on your requirements.)

Suggestions:
1- use any kind of security encryption for your wireless network.
2- For internet access, try to use PPPoE or hotspot.

Regards,
Alaa

_________________
Internet Via Satellite services & VSAT Data communication: http://www.InternetVSAT.com
Cobranded VoIP solutions for resellers and service providers: http://www.CrestCall.com

Top
Profile

janisk
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Thu Sep 18, 2008 2:02 pm
Offline
Staff
Staff
User avatar

Joined: Tue Feb 14, 2006 10:46 am

Posts: 2437
Karma: 4

Location: Riga, Latvia

for wireless use wireless encryption like WPA or WPA2, for wired you have to use pppoe to ecnrypt
data, so no one can sniff unencrypted data over your network.

Top
Profile angga anggi
elnagar_ali
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Fri Sep 19, 2008 3:26 am
Offline
just joined

Joined: Mon Aug 28, 2006 3:14 am

Posts: 19
Karma: 0

i will wait more ideas

Top
Profile

QpoX
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Fri Sep 19, 2008 3:41 am
Offline
Member
Member

Joined: Mon Mar 24, 2008 8:42 pm

Posts: 374
Karma: 0

Location: Lemvig, Denmark

coloring
PPPoE? or VPN?

Top
Profile

aldalil
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Sat Sep 20, 2008 1:21 pm
Offline
Frequent Visitor
Frequent Visitor

Joined: Mon Jun 25, 2007 3:43 am

Posts: 62
Karma: 0

elnagar_ali wrote:
i will wait more ideas

abram
:)

_________________
Internet Via Satellite services & VSAT Data communication: http://www.InternetVSAT.com
Cobranded VoIP solutions for resellers and service providers: http://www.CrestCall.com

Top
Profile

elnagar_ali
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Sun Sep 21, 2008 1:55 am
Offline
just joined

Joined: Mon Aug 28, 2006 3:14 am

Posts: 19
Karma: 0

there is no more ideas but i will wait the admin to answer my q?

Top
Profile
aldalil
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Sun Sep 21, 2008 3:43 am
Offline
Frequent Visitor
Frequent Visitor

Joined: Mon Jun 25, 2007 3:43 am

Posts: 62
Karma: 0

Hi Ali,

If you are just waiting the admin to reply, then it is better to push them an email and ask them for
support !
But, I guess this is not a support issue, and all what you need as you mentioned above is sharing
idea, usually testers can answer you.

Good luck.
Rgds,
Alaa

_________________
Internet Via Satellite services & VSAT Data communication: http://www.InternetVSAT.com
Cobranded VoIP solutions for resellers and service providers: http://www.CrestCall.com

Top
Profile

butche
Post subject: Re: i hacked my friend wisp - he use user manager 3.13
PostPosted: Sat Sep 27, 2008 9:57 pm
Offline
Member
Member
User avatar

Joined: Fri May 28, 2004 6:14 pm

Posts: 356
Karma: 0

Location: Missouri, USA

elnagar_ali wrote:
my friend have wisp using mikrotik user manager 3.13
and he asked me to try to hack the wisp
frist i open netcut and take one cilent data -ip address and mac address
and change my ip and mac to the same this client
first i write the ip address manauly and then change the mac

when i do that i haked the wisp and i can open web site and opsn yahoo messanger
i have full access to the internet
plz some one tell me - how to protect the mikrotik router os from this hack?
So your friend is not very good at protecting his network. User Manager is not a security tool. It is
just a radius server in Mikrotik. If you were able to get in that easily, then what you are looking for
is not just a simple answer. Add encryption to the wireless segment to make it harder to see the data
(DO NOT BOTHER WITH WEP). Use the hotspot for auth. Use PPPoE for auth. Use PPtP tunnels
for transit. There are LOTS of ways to create a secure network. You want a complete engineered
solution? http://www.butchevans.com/. It will not be cheap, but it will be secure. I am sure there are
others here who would be willing to help for a fee.
Another thought is attending a training class that would teach you (or your friend) about security
options built into MT and how to implement them. My website will show upcoming information
about courses that can do that. The Security course is the one you/he want(s).

_________________
--
Butch Evans
Mikrotik Certified Trainer
Mikrotik Certified Consultant
BLOG: blog.butchevans.com
http://store.wispgear.net/

Top
Profile

Display posts from previous: Sort by

Post new topic Reply to topic Page 1 of 1
[ 9 posts ]

Board index » RouterOS » The User Manager

All times are UTC + 2 hours [ DST ]

Who is online

Users browsing this forum: Google [Bot], MSN [Bot] and 1 guest

You cannot post new topics in this forum

You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:

Jump to:
Powered by php
abram
abram
Top
Profile angga anggi

coloring