Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Wi-Fiによるモダン ネットストーキング

Wi-Fiによるモダン ネットストーキング

Akira KUMAGAI

August 24, 2013
Tweet

More Decks by Akira KUMAGAI

Other Decks in Technology

Transcript

  1. 8J'JʹΑΔ
    Ϟμϯ
    ωοτετʔΩϯά
    Akira KUMAGAI
    @tinbotu
    2013ՆٳΈࣗ༝ݚڀ

    View full-size slide

  2. ͋ͱͰσϞΛ͠·͢
    • ݸਓΛ௚઀ಛఆՄೳͳ৘ใ͸͋Γ·ͤΜ
    • ؒ઀తʹ͸ಛఆͷࡐྉʹͳΓಘΔ͔΋
    • ಉҙ͍͚ͨͩͳ͍৔߹͸ WiFi σόΠεͷ
    ిݯΛ੾͍ͬͯͩ͘͞

    View full-size slide

  3. σϞͷର৅ʹͳΔΑ

    View full-size slide

  4. WiFi ͷ͘͠Έ
    1.ΫϥΠΞϯτ(ࢠػ) ͕ AP(਌ػ) Λ୳͢
    2.ΫϥΠΞϯτ͕ AP ͷҰཡΛදࣔ
    3.Ϣʔβ͕ AP Λબ୒
    4.ೝূ
    5.઀ଓ׬ྃ

    View full-size slide

  5. APҰཡΛදࣔ

    View full-size slide

  6. Ϣʔβ͕APΛબ୒

    View full-size slide

  7. ύεϫʔυೖྗ

    View full-size slide

  8. ύεϫʔυೖྗ
    ॳճ͚ͩͩΖ

    View full-size slide

  9. WiFi ͷ͘͠Έ(2)
    1.ΫϥΠΞϯτ(ࢠػ) ͕ AP(਌ػ) Λ୳͢
    2.هԱ͍ͯ͠Δ AP͕͋Ε͹
    3.هԱ͍ͯ͠ΔύεϫʔυͰೝূ
    4.઀ଓ׬ྃ

    View full-size slide

  10. WiFi ͷ͘͠Έ(2)
    1.ΫϥΠΞϯτʢࢠػʣ͕ AP Λ୳͢
    2.هԱ͍ͯ͠ΔAP͕͋Ε͹
    3.هԱ͍ͯ͠ΔύεϫʔυͰೝূ
    4.઀ଓ׬ྃ
    શࣗಈ

    View full-size slide

  11. ΋͏গ͠ৄ͘͠

    View full-size slide

  12. ୺຤͸਌ػ͕ͳ͍ͱ
    ઀ଓͰ͖ͳ͍

    View full-size slide

  13. ୺຤͕AP(਌ػ)ͷଘࡏΛ஌Δํ๏͸2ͭ
    • AP͕ఆظ์ૹ͍ͯ͠ΔϏʔίϯ*1
    • ΞΫςΟϒͳݕग़ཁٻ*2
    *1 IEEE802.11 00/1000 Beacon Frame, MAC(APͷBSSID), SSID, Capability, BI, TIM ͳͲΛಛఆͷνϟωϧʹͯ௨ৗ20ʙ500msִؒͰૹ৴
    *2 IEEE802.11 00/0100 Probe Request, MAC(୺຤ͷMACΞυϨε), SSID(ۭͳΒϒϩʔυΩϟετ)
    ɹ IEEE802.11 00/0101 Probe Response, େମϏʔίϯͱಉ͡৘ใྔΛಛఆͷ୺຤΁Ԡ౴

    View full-size slide

  14. AP͸௨৴͕ͳ͍ͱ͖΋
    ࣗ෼ͷSSIDͳͲΛఆظతʹ์ૹ͍ͯ͠Δ
    ͜ΕΛBeacon(Ϗʔίϯ) ͱݺͼ·͢

    View full-size slide

  15. ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ౴
    ͕͋Ε͹ AP ΛೝࣝͰ͖Δ
    IEEE802.11 Probe Request

    View full-size slide

  16. ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ౴
    ͕͋Ε͹ AP ΛೝࣝͰ͖Δ
    AP ݕग़ཁٻ (Probe Request)
    ʮAP ୭͔͍·͔͢ʯ
    IEEE802.11 Probe Request

    View full-size slide

  17. ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ౴
    ͕͋Ε͹ AP ΛೝࣝͰ͖Δ
    AP ݕग़ཁٻ (Probe Request)
    ʮAP ୭͔͍·͔͢ʯ
    AP ݕग़Ԡ౴ (Probe Response)
    ʮ͸͍ɹԶͷ໊͸”MyHomeBuffalo”ʯ
    IEEE802.11 Probe Request

    View full-size slide

  18. ୺຤(ࢠػ)͸ϏʔίϯΛड৴͢Δ͔ɺ·ͨ͸
    ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ౴
    ͕͋Ε͹ AP ΛೝࣝͰ͖Δ

    View full-size slide

  19. ୺຤(ࢠػ)͸ϏʔίϯΛड৴͢Δ͔ɺ·ͨ͸
    ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ౴
    ͕͋Ε͹ AP ΛೝࣝͰ͖Δ
    ·ͨ͸ʁ

    View full-size slide

  20. ୺຤(ࢠػ)͸ϏʔίϯΛड৴͢Δ͔ɺ·ͨ͸
    ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ౴
    ͕͋Ε͹ AP ΛೝࣝͰ͖Δ
    ݕग़ཁٻ(Probe Request)ͬͯԿΑ
    AP͕Ϗʔίϯग़ͯ͠Ε͹ଘࡏ͕Θ͔Δ͡ΌΜ
    ͍Βͳ͍ͷͰ͸ɻ
    ·ͨ͸ʁ

    View full-size slide

  21. ݕग़ཁٻ͕ඞཁ!

    View full-size slide

  22. ݕग़ཁٻ͕ඞཁ!
    • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ
    SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ
    ଎͍(ೋճ໨Ҏ߱ͷ઀ଓͱ͔)

    View full-size slide

  23. ݕग़ཁٻ͕ඞཁ!
    • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ
    SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ
    ଎͍(ೋճ໨Ҏ߱ͷ઀ଓͱ͔)
    • WiFi ͸νϟωϧ͕͍ͬͺ͍͋Δ͠ɺλΠ
    ϛϯά͕ѱ͍ͱϏʔίϯΛड৴Ͱ͖ͳ͍

    View full-size slide

  24. ݕग़ཁٻ͕ඞཁ!
    • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ
    SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ
    ଎͍(ೋճ໨Ҏ߱ͷ઀ଓͱ͔)
    • WiFi ͸νϟωϧ͕͍ͬͺ͍͋Δ͠ɺλΠ
    ϛϯά͕ѱ͍ͱϏʔίϯΛड৴Ͱ͖ͳ͍
    • SSIDΛӅͯ͠ΔAP͸ͦ΋ͦ΋ݟ͑ͳ͍

    View full-size slide

  25. ݕग़ཁٻ͕ඞཁ!
    • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ
    SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ
    ଎͍(ೋճ໨Ҏ߱ͷ઀ଓͱ͔)
    • WiFi ͸νϟωϧ͕͍ͬͺ͍͋Δ͠ɺλΠ
    ϛϯά͕ѱ͍ͱϏʔίϯΛड৴Ͱ͖ͳ͍
    • SSIDΛӅͯ͠ΔAP͸ͦ΋ͦ΋ݟ͑ͳ͍

    View full-size slide

  26. SSID ໊ࢦ͠Ͱݕग़ཁٻ

    View full-size slide

  27. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ

    View full-size slide

  28. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़Ԡ౴ (Probe Response)
    ʮ͸͍ʯ

    View full-size slide

  29. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़Ԡ౴ (Probe Response)
    ʮ͸͍ʯ
    ͸΍͍

    View full-size slide

  30. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़Ԡ౴ (Probe Response)
    ʮ͸͍ʯ
    ͸΍͍
    ݕग़ϛε΋ͳ͍

    View full-size slide

  31. • ࢠػ͸ࣗ෼ͷډ৔ॴ͕Θ͔ͬͯͳ͍.

    AP͕ແ͍͸ͣͷ৔ॴͰ΋ Probe Request
    ͢Δ
    ໰୊఺

    View full-size slide

  32. • ࢠػ͸ࣗ෼ͷډ৔ॴ͕Θ͔ͬͯͳ͍.

    AP͕ແ͍͸ͣͷ৔ॴͰ΋ Probe Request
    ͢Δ
    • Ұ౓઀ଓهԱͤͨ͞Β͠͹Β͘ͷؒ
    Probe Request Λૹग़͠ଓ͚Δ(࣮૷ґଘ)
    ໰୊఺

    View full-size slide

  33. ͨͱ͑͹౦ژʙതଟΛҠಈ͠·͢

    View full-size slide

  34. ͨͱ͑͹౦ژʙതଟΛҠಈ͠·͢
    ࣗ୐ͷAPʹର͢Δݕग़ཁٻ͸
    ՈΛग़ͨॠ͔ؒΒ͢΂ͯແବܸͪ
    ʢి஑ͱ͔ͷແବ͸·͋ࠣ຤ͳ໰୊ʣ

    View full-size slide

  35. SSID ໊ࢦ͠Ͱݕग़ཁٻ

    View full-size slide

  36. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ

    View full-size slide

  37. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ

    View full-size slide

  38. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ

    View full-size slide

  39. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)

    View full-size slide

  40. SSID ໊ࢦ͠Ͱݕग़ཁٻ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
    AP ݕग़ཁٻ (Probe Request)
    ͜ͷiPhone͕͋ΒΏΔग़ઌͰ
    “MyHomeBuffalo”ͬͯͷΛཁٻͯ͠ΔΑ͏ͩ

    View full-size slide

  41. ࣮ࡍʹݟͯΈΑ͏

    View full-size slide

  42. ࣗ෼ͷϊʔτPC(b8:f6:b1:14:fc:1b)͕

    iis-visitor ͬͯͷΛ୳͍ͯ͠Δ

    View full-size slide

  43. iis-visitor

    Ͳ͔͜ͷήετ༻WiFiͬΆ͍

    View full-size slide

  44. iis-visitor

    Ͳ͔͜ͷήετ༻WiFiͬΆ͍
    ઀ଓ֮ͨ͑͋͠Δ

    View full-size slide

  45. Probe Request ʹؚ·ΕΔ಺༰

    View full-size slide

  46. Probe Request ʹؚ·ΕΔ಺༰
    • ୺຤ͷMACΞυϨε
    • ୺຤͕઀ଓͨ͜͠ͱͷ͋Δ AP ͷ ESSID

    ʢෳ਺͔΋ʣ
    • APͷBSSID(MACΞυϨε)͸ؚ·Εͳ͍

    View full-size slide

  47. ͜ͷ"QQMF੡඼ͷॴ༗ऀ͸Ϊʔਫʹߦͬͨ͜ͱ
    ͕͋ͬͯTIJCVIPVTFʹ΋ߦͬͨ͜ͱ͕͋ͬͯ
    TJOBQʹ΋ߦͬͨ͜ͱ͕͋ͬͯUBLBOP͞Μͱ
    ໘͕ࣝ͋ΔͩΖ͏ɻ

    View full-size slide

  48. ετʔΩϯά΁ͷԠ༻

    View full-size slide

  49. ετʔΩϯά΁ͷԠ༻
    • ׬શʹडಈ(passive)ͳετʔΩϯάͳͷͰɺ
    ୺຤ଆͰ͸߈ܸݕ஌͕ෆՄೳ

    View full-size slide

  50. ετʔΩϯά΁ͷԠ༻
    • ׬શʹडಈ(passive)ͳετʔΩϯάͳͷͰɺ
    ୺຤ଆͰ͸߈ܸݕ஌͕ෆՄೳ
    • WiFi ͕௚઀ಧ͘ൣғʹߦ͘ඞཁ͕͋ͬͯɺ
    ݫີʹ͸ωοτετʔΩϯά͡Όͳ͍

    View full-size slide

  51. ετʔΩϯά΁ͷԠ༻
    • ׬શʹडಈ(passive)ͳετʔΩϯάͳͷͰɺ
    ୺຤ଆͰ͸߈ܸݕ஌͕ෆՄೳ
    • WiFi ͕௚઀ಧ͘ൣғʹߦ͘ඞཁ͕͋ͬͯɺ
    ݫີʹ͸ωοτετʔΩϯά͡Όͳ͍
    • λʔήοτͷ୺຤ͷMACΞυϨε͕Θ͔Β
    ͳ͍ͱ୭͕୭͔ͩΘ͔Βͳ͍

    View full-size slide

  52. MACΞυϨεΛ஌Δํ๏

    View full-size slide

  53. MACΞυϨεΛ஌Δํ๏
    λʔήοτͷ୺຤ʹ௚઀઀৮͢Δඞཁ͕͋Δ…
    ͦΕ͕ແཧͳΒਪଌ͢ΔͷΈ

    View full-size slide

  54. ଞͷωλ
    • BSSID(MAC) ͔ΒҐஔ৘ใΛҾ͚ΔAPI
    • ESSID ͔Β BSSID Λਪଌ͠ Probe
    Request ͔Β୺຤ͷաڈͷҐஔ৘ใΛਪ

    View full-size slide

  55. ๏཯తͳ࿩
    • ి೾๏ ୈ59৚ʢൿີͷอޢʣ
    • Կਓ΋๏཯ʹผஈͷఆΊ͕͋Δ৔߹Λআ͘΄͔ɺಛఆͷ૬खํʹର͠
    ͯߦΘΕΔແઢ௨৴ʢిؾ௨৴ࣄۀ๏ୈ4৚ୈ1߲ຢ͸ୈ164৚ୈ2߲ͷ
    ௨৴Ͱ͋ Δ΋ͷΛআ͘ɻୈ109৚ฒͼʹୈ109৚ͷ2ୈ2߲ٴͼୈ3߲ʹ͓
    ͍ͯಉ͡ɻʣΛ๣डͯͦ͠ͷଘࡏए͘͠͸಺༰Λ࿙Β͠ɺຢ͸͜ΕΛ઄
    ༻ͯ͠͸ͳΒͳ͍ɻ

    View full-size slide