Hacker News new | ask | show | jobs
by andersonmvd 3837 days ago
One easier way to detect (without jamming afterwards), for iOS at least, is to install the "Fing" app, connect to the wifi and scan the network. Then you will know the connected devices and their names. Chances are that cameras will have easy to recognize names on them. EDIT: you'll get the MAC address too, so you can compare if they match camera companies.
3 comments

For those who don't own an iOS device, or don't feel it is the best tool to do this kind of analysis: The standard tool on OS X or Linux appears to be Kismet[1], which, while I haven't actually used it and so can't vouch for it firsthand, appears to be quite capable. I don't know what, if any, equivalent tool exists for Windows, and since I don't own a Windows laptop, I also don't really care.

Edit: Having now installed Fing and looked at what it does, it seems to basically just look at its assigned IP and netmask to determine the address space of the local network, and then perform an nmap-style ping scan to see what doesn't time out. When it gets a packet back, it uses the MAC address to identify the type of device, and a PTR lookup with the DHCP-provided DNS server to obtain a hostname. These are pretty cool capabilities to have on a handheld device, of course, but if you can't or won't install Fing, you can do pretty much everything it does with a 15-line Perl script on any device that can connect to the wireless network.

[1] http://www.kismetwireless.net/

Yeah, kismet and/or airscan are pretty much the two go-to tools for wifi security auditing.

Kali Linux (can run from a bootable live image) has these two plus a whole lot more useful tools for doing this kind of thing.

In the past I used inSSIDer to view nearby networks, checking to see how capable it is led here:

https://www.reddit.com/r/networking/comments/3fyjbm/now_that...

Which points to (pdf):

http://www.xirrus.com/cdn/pdf/Xirrus-Wi-Fi-inspectorguide-1-...

If you think Fring offers cool capabilities from a handheld device, you should check out Kali Nethunter[0]

[0] https://www.kali.org/kali-linux-nethunter/

Fing scares me. I know theoretically any app I install could be scanning my network but Fing actually says it is scanning my network.

On the Fing page it says: "Fing does not collect nor sends any detail about your environment, your accounts or your network to anybody. And that's guaranteed!"

Yet on the Fingbox page it says: "By installing Fing on a desktop workstation and logging into your account, you can perform operations on remote networks through the Fingbox cloud."

Those 2 things sound in conflict.

They are two seperate parts of the product. You can run Fing stand alone or you can subrscribe to and use the Fingbox cloud.
I've got to hand it to Fing, they've convinced people to pay through the nose for something we used to do for free.

Nmap. You want nmap.

Fing is free. You only have to pay for their "enterprise cloud" offering. There is no nmap for the iPhone.
Talk about not easy to use. I am not ashamed to say I can't figure this software out and I'm a software developer. What am I supposed to do in the case that it demands I set a target? Localhost? It'll tell me all about what I'm connected to.

192.168.1.1? That tells me what my router is connected to but that isn't necessarily what I want. 90% of output is just what it is doing. Oh you initialised, completed, initialised, completed, Unable to split netmask from target expression, script post-scanning, Read data files from: /usr/local/bin/../share/nmap.

I have no immediately identifiable use for this.

True, the syntax is cryptic and unintuitive. Target is a subnet in CIDR notation, i.e. 192.168.1.0/24. The other various options describe the scan to perform. You can do simple pings, a full portscan, a quick portscan of the few most popular ports, and enable various IDS-evasion behaviors.

Fing provides something of a value-add by wrapping its sort of functionality in a nice UI. It's just amusing to see people discover Fing as though it were the first or only tool of its kind.

nmap is a universal stalwart of network security since the late 90s. It is the classic "hacking tool" long predating Metasploit, and Hollywood VFX people have even figured this out - it features in hacking scenes in Matrix Reloaded, Battle Royale, Bourne Ultimatum, and Elysium. I suspect ease of use has never been a priority, since its target audience is fellow open-source-savvy l33t haxxors.