Unassociated clients... who are they and what to do with 'em?

[10goto10]

In my daily communting from work to home, I do some random wardriving with airodump-ng to see what's in the airwaves. Lately I noticed some unassociated clients with interesting names under the "probes" tab. They're there all during the train ride home, and never associate with an AP. How can I find out more about these machines, see what runs on them, etc.?

[Sparda]

In my daily communting from work to home, I do some random wardriving with airodump-ng to see what's in the airwaves. Lately I noticed some unassociated clients with interesting names under the "probes" tab. They're there all during the train ride home, and never associate with an AP. How can I find out more about these machines, see what runs on them, etc.?

Jasager

[digip]

Jasager

QFE! Pefect example of what you can do with Jasager.

[10goto10]

I'm using an Eee 701 so I'll have to dig into Karma/Karmasploit. I kinda figured there would be a more basic approach to this, sort of like a nmap-like scan of the client to see what kind of adapter/system/OS is behind it.

[Lord C]

I'm using an Eee 701 so I'll have to dig into Karma/Karmasploit. I kinda figured there would be a more basic approach to this, sort of like a nmap-like scan of the client to see what kind of adapter/system/OS is behind it.

Karmasploit gets all that information for you. Try having a play with the mfs webgui =]

[vector]

In my daily communting from work to home, I do some random wardriving with airodump-ng to see what's in the airwaves. Lately I noticed some unassociated clients with interesting names under the "probes" tab. They're there all during the train ride home, and never associate with an AP. How can I find out more about these machines, see what runs on them, etc.?

you can have unassociated stations and AP's but once a station associates it then becomes a client, so you cant really have an unassociated client. also i dont know that airodump is the best wardriving app. i do all of my wireless pwning in windows, and a few of my favorite apps are of course netstumbler, wifi-hopper, xirrus wifi scanner for the vista sidebar, and i have a couple for my windows mobile phone that i like, wi fi fo fum, and airscanner wireless sniffer.

you also want to see which stations are wired and which are wireless, and get a nice visual map of the wireless/wired nodes on the wlan that youre connected to, as well as others around you. i like to use commview for wifi. i put a few screenshots to show how it can be broken down to see which ip/mac/alias is talking to which others.