Re: [PLUG] wireless networks, web browsing, and forced pages

[sean finney <seanius@seanius.net>]

On Thu, Apr 08, 2004 at 08:41:36PM -0400, Jeff Abrahamson wrote:
> >    their page and have to register/pay/authenticate/whatever.  of course,
> >    for the l33t h4x0rz this is easy to circumvent.
> 
> How?  Even if you point to a different DNS server, you still have to
> pass through their router, which could block your DNS packets.

if it's only a stub dns server, you can still go out to ip addresses if
you know them, or use an alternate dns server (assuming you know one that
will answer recursive queries outside of its own network)

if there are more controls in place, like router acl's for unauthenticated
clients, it's a little more difficult to get around, but some patience
and packet/frame sniffing (à la ettercap) can still get you the mac
addresses of other machines on the network, and you win if any of them
aren't subject to the restrictions.


	sean

Attachment: signature.asc
Description: Digital signature