Hello everyone. I really could use some help connecting to my dorms wi-fi, the fees they charge for their guests (like me) are ridiculous 30$ Per month for 200 mb daily limit & 1 device per connection..
I don’t get free wi-fi because I’m not enrolled in their university but rather just use their dorms.
They use a portal for their wi-fi that is called Mikrotik.
Login page: https://imgur.com/NOr5YFw
I know the login is university students names.
I’ve blocked the uni name for privacy reasons.
I don’t expect to be spoon fed on how to do this but if there is a known method for this particular portal they use, I’d be grateful if you can help me as you would be saving me hella money on 3g/4g plans monthly.
Just ask around and find someone with a login and ask if you can use it for a second and just keep it logged in.
(Oct 6, 2017 10:39 AM)Jimmie Wrote: Just ask around and find someone with a login and ask if you can use it for a second and just keep it logged in.
But then I am using their 1 device limit, so they’d eventually tell me to log off.
(Oct 6, 2017 10:41 AM)G4ng Wrote: But then I am using their 1 device limit, so they’d eventually tell me to log off.
Just find someone who has service and never uses the hotspot.
DO NOT DEAL WITH THIS MEMBER
You could try MAC spoofing.
In a nutshell, a MAC address is the address that a manufacturer assigns a networking device (wireless adapter, wireless chip, etc).
Most captive portals that I've seen identify by MAC, so you can easily spoof to someone who is already logged in.
Here's what you'll have to do:
1. Scan the network to identify already-logged-in MAC's
2. Deauth that MAC
3. Spoof
(Not deauthing could result in one of you not getting wifi)
(Oct 6, 2017 11:36 AM)Not Your Average Orange Wrote: You could try MAC spoofing.
In a nutshell, a MAC address is the address that a manufacturer assigns a networking device (wireless adapter, wireless chip, etc).
Most captive portals that I've seen identify by MAC, so you can easily spoof to someone who is already logged in.
Here's what you'll have to do:
1. Scan the network to identify already-logged-in MAC's
2. Deauth that MAC
3. Spoof
(Not deauthing could result in one of you not getting wifi)
To deauth the mac, what would I have to be in control of?
200mb daily limit, good luck lmao
Vouch
DO NOT DEAL WITH THIS MEMBER
When you are connected, try to probe the internet to see what kind of protocols are accessible (how did the login page render? was it sent by the gateway's web server or allowed by the firewall?).
Notable things to check for are DNS, HTTPS connections, anomalous ports (ports that aren't normally used), connections to the LAN, OpenVPN, etc.
Sometimes, these types of hotspots intentionally let some things through the firewall (usually DNS) that you can use to get access to the internet without logging in.
(Oct 6, 2017 11:47 AM)XeCheats Wrote: 200mb daily limit, good luck lmao It’s unlimited for their students.
(Oct 6, 2017 11:51 AM)Inkling Wrote: When you are connected, try to probe the internet to see what kind of protocols are accessible (how did the login page render? was it sent by the gateway's web server or allowed by the firewall?).
Notable things to check for are DNS, HTTPS connections, anomalous ports (ports that aren't normally used), connections to the LAN, OpenVPN, etc.
Sometimes, these types of hotspots intentionally let some things through the firewall (usually DNS) that you can use to get access to the internet without logging in. How would I go on about doing this? When you connect it loads you the default ip: 192.168.100.1. I also have wire access to the connection if needed.
DO NOT DEAL WITH THIS MEMBER
(Oct 6, 2017 12:07 PM)G4ng Wrote: It’s unlimited for their students.
How would I go on about doing this? When you connect it loads you the default ip: 192.168.100.1. I also have wire access to the connection if needed.
You just need to do some general probing to see what the network is enforcing.
Nmap could be useful. There's a great chance it probably isn't routing anything that isn't required.
(Oct 6, 2017 12:40 PM)Inkling Wrote: You just need to do some general probing to see what the network is enforcing.
Nmap could be useful. There's a great chance it probably isn't routing anything that isn't required.
I assume none of this can be done on windows os? Only Kali Linux right?
(Oct 6, 2017 01:48 PM)G4ng Wrote: I assume none of this can be done on windows os? Only Kali Linux right? Kali liux isnt some sort of “the only way to be able to hack”. Its just a gnu/linux os but edited so its good for pentester. These tools are also available for other linux (obfiously) and some or even most are also for windows
(Oct 6, 2017 02:24 PM)Stenly21 Wrote: Kali liux isnt some sort of “the only way to be able to hack”. Its just a gnu/linux os but edited so its good for pentester. These tools are also available for other linux (obfiously) and some or even most are also for windows
Thanks for the response. I’ll do some additional reading about the tools I may require and give it a shot when my exams are done.
DO NOT DEAL WITH THIS MEMBER
You googled this right? I googled mikrotil router login bypass found a couple of things already. Have you looked at their wiki ? OH geez is this thing really running an OS from 2005. Geez go get it!
I've used a WISP router before in the army base camp that limit one wireless device per soldier. Basically the WISP router acts as a wireless client, it connects to the dorm network. You then login through the router, connect to that hotspot, authenticate as you would a dorm student and then login to the portal. Once done, that router is now a registered device for that one student login, and can now be shared through its own private wireless LAN for many other devices. I've used both these below:
Search amazon for HooToo Wireless Streaming Hotspot TripMate and TP-Link-TL-WR841ND. Or portable travel router that allow bridging.
|
