Skip to content

Hunting Rogue APs Hard Lessons

t0ddpar0dy

Given the challenge of locating a static Access Point this presentation highlights our strategy, pitfalls, and success.

Summary

### Operational Lessons from Hunting Rogue Transmitters At 00:00, security researcher t0ddpar0dy delivers a practical guide to locating unauthorized wireless access points and rogue transmitters in complex enterprise facilities at the Wireless Village. The speaker recounts field challenges encountered during real-world physical fox-hunting operations.

### Building Field Direction-Finding Equipment At 07:30, t0ddpar0dy details the construction of portable direction-finding rigs. Utilizing a Raspberry Pi, USB Wi-Fi adapters supporting monitor mode, directional yagi antennas, and custom signal-strength logging scripts, researchers can measure received signal strength indicators (RSSI) while walking campus perimeters.

### Multipath Interference and Indoor RF Propagation At 15:24, the presentation explores radio frequency propagation pitfalls inside commercial real estate. Concrete construction, elevator shafts, metallic HVAC ducting, and reflective glass windows distort RF signal paths, causing directional antennas to register false signal peaks that mislead search teams.

### Systematically Tracking Across Vertical Space Concluding between 22:39 and 28:00, t0ddpar0dy shares strategies for hunting across multi-story buildings. He outlines methodical floor-by-floor search grids and triangulation techniques that help defenders locate rogue devices concealed above drop ceilings, inside wiring closets, or hidden within remote conference rooms.

(AI summary — Gemini Flash)

Related talks

Wireless Village·29 min

  • DEF CON
  • Red Team
  • Date: Aug 2019
  • Location: Las Vegas

Besim ALTINOK

eduroam networks are designed to provide wireless access to researchers and lecturers around the world. However, it is known that there are now 10,000 eduroam hotspots in 100 countries around the world. eduroam users ...

wirelessenterprise-wifiwireless-security+2