HOPE Day 2 - Tales of Hotel Pennsylvania

Posted by Eric Stein - July 22, 2006 CE @ 20:19:19 UTC
Before we checked in, we expected:What we got was:The bedding issue wasn't too serious - after all, Mike had brought an air mattress, so we could get by. The problem was Internet access. But when 4 people with 4 laptops and plenty of networking gear are alone and bored in a hotel room, things happen. The Internet connection we could have got would have cost us $30 for the weekend, and you don't take that sitting down. So, Christian did some things and we soon found out that the gateway was running Windows with no firewall and IIS5. He called someone who knows things, and we had an exploit ready to go in a few minutes. However, we decided it wasn't the nicest thing to do, so we decided to leech wifi instead. Christian and Mike could get on, but I couldn't - my wifi card is considerably lower powered. Not to worry - Mike bridged his connection though a patch cable Bryon had. Sadly, by the time we had this all figured out, it was too late to do much and we had to get to sleep.

Fast forward to this morning. Still no net access for me, as the wifi set up by the convention only covers the 18th floor. In a lull of panels I didn't want to attend, I brought my laptop up to the Internet lounge on the top floor. I fired up kismet, and that worked perfectly - plenty of nodes to connect to (screenshot). However, it wasn't quite so simple when I tried to connect. After some hacking around, I found it.
bash-2.05b# arp -an
? (70.47.112.1) at 00:00:92:a7:c3:d9 on ath0 [ethernet]
? (70.47.115.239) at 00:0c:f1:26:3b:fd on ath0 [ethernet]
bash-2.05b# arp -d 70.47.115.239
70.47.115.239 (70.47.115.239) deleted
bash-2.05b# dhclient ath0
DHCPDISCOVER on ath0 to 255.255.255.255 port 67 interval 3
DHCPOFFER from 70.47.112.1
DHCPREQUEST on ath0 to 255.255.255.255 port 67
DHCPACK from 70.47.112.1
bound to 70.47.112.53 -- renewal in 300 seconds.
bash-2.05b#
70.47.112.239, you bastard. I totally wasn't expecting something like this at a hacker convention. No way - you shocked me. As you can probably guess, my IP is 70.47.112.53 right now. Bring it, 70.47.112.239.

Comments

There are no comments yet.

Post a Comment

Name
Email (not published, I won't spam you)
URL (optional)
Title
Comment
the last year before Y2K?
Worth Saying
Valid XHTML, CSS, RSS | 2ms | Copyright 2004-2025 Eric Stein