well, a friend (kind of friend...i dont really give a shit about him but i pretend to) has managed to get into his neighbor's wireless internet.

right now all he does is browse the internet but is there anything else cool he can do to fuck with these people?

He can log the packets (you can do this without connecting to be more "stealthy") and get any sensitive information transmitted in cleartext.

He could also launch an ARP poisoning attack and do a MITM attack on them. That could end him up with anything from bank account numbers to passwords to intercepted encrypted communication. That will take more work though.

Wireshark is a great sniffing tool. MITM is more delicate and platform-dependent.

I really need a wireless card!

__________________
In Silence I lay for that Fateful Day. 0day.

jamato@email.itt-tech.edu <-- My Email

I hear people can set up bait wireless networks and hack any poor fool that connects to them.

Yes, that's possible. If you have a worm ready on that network.

__________________
In Silence I lay for that Fateful Day. 0day.

jamato@email.itt-tech.edu <-- My Email

^^Thats called making a fake AP i think. Idk what you mean about the worm though.

Lol i have a ton of open wlan's where i am. packet sniffing/MITM is the best thing to do, although if u have the router too sometimes you could try to open up some ports and try exploits

There's something on the internet telling you how to configure your router to display everything backwards when someone uses their internet connection.

That isn't a fake AP. Making "a" fake AP would entail sending out bogus broadcast packets that advertise a nonexisting hotspot. What he means is that there's a real wifi network that has a daemon watching dhcp leases, and will initiate an attack when it detects one handed out.

Sorry thats what I meant. I googled it, and evidently its called the Evil twin attack. It works by making your computer into an AP (not so sure how to do this; i didnt research this attack too much), and then giving it the same details as your friends neighbor's AP (i.e. - SSID would be the same, encryption and pass the same, settings the same). Once someone connects, the person can modify the DNS (I think its DNS) settings to redirect something like paypal.com to myphishingsite.com. I believe this is what that new Zotob worm/bot does btw. Another use is to get access to pay-for WiFi Hotspots (the ones where you get redirected to a page that asks for your cc if you try to surf the net; usually found at airports). They'll connect to your AP, and instead of entering their CC details or login info on the real AP's internet access page, they'll enter it on your page (where you can sniff or just have it logged). There's only one catch: you have to be closer to the person than the real AP is. Otherwise, they'll connect to the real AP. This is an amazing attack IMO.

If you know the router's password (and if the network is unsecured, it's probably default), you can redirect the DNS servers so it points to your own special one, and, like the person said above, have urls like "paypal.com" and such redirect to your own fakes and harvest info from them.

Although secure stuff would usually involve you self-signing your certificates, so they might catch on.