Identifying Rouge access point from legitimate from user end

[rajith]

Hi,

I am trying to identify rouge access point from legitimate access point. Have any one try this ?

[barry99705]

It's a lot harder to do than it sounds. The easiest way is to turn off your known good ap and locate the still transmitting rogue. Or changing the ssid temporarily.

[rajith]

hi, thanks for the reply.

Thing is that in end user mode we cannot shut legitimate AP's. In administrator level that can be done.

Is there a way to analysis the frequency density with a software run on laptop ?

[cooper]

The only thing you have is radiowaves of a legitimate transmitter and that of a rogue trantmitter that's trying *really* hard to mimic the real one.

I would look for deauth attacks in progress as that's the best way to get your victims to disconnect from the legitimate AP.

[barry99705]

The only thing you have is radiowaves of a legitimate transmitter and that of a rogue trantmitter that's trying *really* hard to mimic the real one.

I would look for deauth attacks in progress as that's the best way to get your victims to disconnect from the legitimate AP.

The problem is if they set the rogue up properly, then the mac address will be the same as the legit ap. You're not going to be able to tell the difference between the real ap and the rogue just from that.