Developing Wifi Access Point

In this technical hardware and firmware session at the DEF CON 27 Wireless Village, Nishant Sharma explores the engineering process behind building weaponized rogue access points using embedded Linux kernel rootkits. He opens at 08:00 by examining the strategic advantage of kernel-level rootkits over conventional user-space attack tools, noting that rootkits can manipulate network traffic and system visibility directly at the operating system core.

At 16:00, Nishant introduces his hardware platform of choice—the budget GL.iNet AR750 portable travel router—and walks through setting up the cross-compilation toolchain for MIPS architectures running OpenWrt. At 24:00, he details compiling custom loadable kernel modules (LKMs), illustrating how to hook kernel function pointers and system call tables to intercept packets before firewall processing.

Nishant shows how these hooks stealthily conceal backdoors, illicit network sockets, and user-space binaries at 32:00, rendering them invisible to standard administrative diagnostic commands like ps and netstat. He demonstrates deploying browser-based terminal interfaces using ttyd at 40:00 to provide out-of-band management access over rogue Wi-Fi associations. He concludes at 48:00 by sharing reference source code and presentation resources through the Wireless Village repository. (AI summary — Gemini Flash)