Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Wi-Fiによるモダン ネットストーキング
Search
Akira KUMAGAI
August 24, 2013
Technology
0
1.8k
Wi-Fiによるモダン ネットストーキング
Akira KUMAGAI
August 24, 2013
Tweet
Share
More Decks by Akira KUMAGAI
See All by Akira KUMAGAI
Wi-Fiの混雑に向き合う基本的知識とオフィスWi-Fi提供時の課題
tinbotu
0
90
JANOG39会場ネットワークの裏話
tinbotu
0
360
Wi-Fi再入門〜見えない電波を知識で見抜く
tinbotu
71
160k
Other Decks in Technology
See All in Technology
JPOUG Tech Talk #12 UNDO Tablespace Reintroduction
nori_shinoda
2
150
【Oracle Cloud ウェビナー】ご希望のクラウドでOracle Databaseを実行〜マルチクラウド・ソリューション徹底解説〜
oracle4engineer
PRO
1
110
アジャイル脅威モデリング#1(脅威モデリングナイト#8)
masakane55
3
230
SmartHR プロダクトエンジニア求人ガイド_2025 / PdE job guide 2025
smarthr
0
170
Web Intelligence and Visual Media Analytics
weblyzard
PRO
1
5.8k
PicoRabbit: a Tiny Presentation Device Powered by Ruby
harukasan
PRO
2
250
Winning at PHP in Production in 2025
beberlei
1
150
コードや知識を組み込む / Incorporating Codes and Knowledge
ks91
PRO
0
110
LiteXとオレオレCPUで作る自作SoC奮闘記
msyksphinz
0
770
より良い開発者体験を実現するために~開発初心者が感じた生成AIの可能性~
masakiokuda
0
210
Databricksで完全履修!オールインワンレイクハウスは実在した!
akuwano
0
110
10ヶ月かけてstyled-components v4からv5にアップデートした話
uhyo
2
110
Featured
See All Featured
Building Flexible Design Systems
yeseniaperezcruz
329
38k
The MySQL Ecosystem @ GitHub 2015
samlambert
251
12k
Stop Working from a Prison Cell
hatefulcrawdad
268
20k
Agile that works and the tools we love
rasmusluckow
328
21k
Rebuilding a faster, lazier Slack
samanthasiow
80
8.9k
Git: the NoSQL Database
bkeepers
PRO
430
65k
The Cost Of JavaScript in 2023
addyosmani
49
7.7k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
227
22k
ピンチをチャンスに:未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
119
51k
Making the Leap to Tech Lead
cromwellryan
133
9.2k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
135
33k
Music & Morning Musume
bryan
47
6.5k
Transcript
8J'JʹΑΔ Ϟμϯ ωοτετʔΩϯά Akira KUMAGAI @tinbotu 2013ՆٳΈࣗ༝ݚڀ
͋ͱͰσϞΛ͠·͢ • ݸਓΛಛఆՄೳͳใ͋Γ·ͤΜ • ؒతʹಛఆͷࡐྉʹͳΓಘΔ͔ • ಉҙ͍͚ͨͩͳ͍߹ WiFi σόΠεͷ ిݯΛ͍ͬͯͩ͘͞
σϞͷରʹͳΔΑ
WiFi ͷ͘͠Έ 1.ΫϥΠΞϯτ(ࢠػ) ͕ AP(ػ) Λ୳͢ 2.ΫϥΠΞϯτ͕ AP ͷҰཡΛදࣔ 3.Ϣʔβ͕
AP Λબ 4.ೝূ 5.ଓྃ
APҰཡΛදࣔ
Ϣʔβ͕APΛબ
ύεϫʔυೖྗ
ύεϫʔυೖྗ ॳճ͚ͩͩΖ
WiFi ͷ͘͠Έ(2) 1.ΫϥΠΞϯτ(ࢠػ) ͕ AP(ػ) Λ୳͢ 2.هԱ͍ͯ͠Δ AP͕͋Ε 3.هԱ͍ͯ͠ΔύεϫʔυͰೝূ 4.ଓྃ
WiFi ͷ͘͠Έ(2) 1.ΫϥΠΞϯτʢࢠػʣ͕ AP Λ୳͢ 2.هԱ͍ͯ͠ΔAP͕͋Ε 3.هԱ͍ͯ͠ΔύεϫʔυͰೝূ 4.ଓྃ શࣗಈ
͏গ͠ৄ͘͠
ػ͕ͳ͍ͱ ଓͰ͖ͳ͍
͕AP(ػ)ͷଘࡏΛΔํ๏2ͭ • AP͕ఆظ์ૹ͍ͯ͠ΔϏʔίϯ*1 • ΞΫςΟϒͳݕग़ཁٻ*2 *1 IEEE802.11 00/1000 Beacon Frame,
MAC(APͷBSSID), SSID, Capability, BI, TIM ͳͲΛಛఆͷνϟωϧʹͯ௨ৗ20ʙ500msִؒͰૹ৴ *2 IEEE802.11 00/0100 Probe Request, MAC(ͷMACΞυϨε), SSID(ۭͳΒϒϩʔυΩϟετ) ɹ IEEE802.11 00/0101 Probe Response, େମϏʔίϯͱಉ͡ใྔΛಛఆͷԠ
AP௨৴͕ͳ͍ͱ͖ ࣗͷSSIDͳͲΛఆظతʹ์ૹ͍ͯ͠Δ ͜ΕΛBeacon(Ϗʔίϯ) ͱݺͼ·͢
ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ ͕͋Ε AP ΛೝࣝͰ͖Δ IEEE802.11 Probe Request
ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ ͕͋Ε AP ΛೝࣝͰ͖Δ AP ݕग़ཁٻ (Probe Request) ʮAP ୭͔͍·͔͢ʯ
IEEE802.11 Probe Request
ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ ͕͋Ε AP ΛೝࣝͰ͖Δ AP ݕग़ཁٻ (Probe Request) ʮAP ୭͔͍·͔͢ʯ
AP ݕग़Ԡ (Probe Response) ʮ͍ɹԶͷ໊”MyHomeBuffalo”ʯ IEEE802.11 Probe Request
None
(ࢠػ)ϏʔίϯΛड৴͢Δ͔ɺ·ͨ ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ ͕͋Ε AP ΛೝࣝͰ͖Δ
(ࢠػ)ϏʔίϯΛड৴͢Δ͔ɺ·ͨ ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ ͕͋Ε AP ΛೝࣝͰ͖Δ ·ͨʁ
(ࢠػ)ϏʔίϯΛड৴͢Δ͔ɺ·ͨ ݕग़ཁٻΛੵۃతʹૹ৴͠ɺAP͔ΒͷԠ ͕͋Ε AP ΛೝࣝͰ͖Δ ݕग़ཁٻ(Probe Request)ͬͯԿΑ AP͕Ϗʔίϯग़ͯ͠Εଘࡏ͕Θ͔Δ͡ΌΜ ͍Βͳ͍ͷͰɻ ·ͨʁ
ݕग़ཁٻ͕ඞཁ!
ݕग़ཁٻ͕ඞཁ! • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ ͍(ೋճҎ߱ͷଓͱ͔)
ݕग़ཁٻ͕ඞཁ! • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ ͍(ೋճҎ߱ͷଓͱ͔) • WiFi νϟωϧ͕͍ͬͺ͍͋Δ͠ɺλΠ ϛϯά͕ѱ͍ͱϏʔίϯΛड৴Ͱ͖ͳ͍
ݕग़ཁٻ͕ඞཁ! • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ ͍(ೋճҎ߱ͷଓͱ͔) • WiFi νϟωϧ͕͍ͬͺ͍͋Δ͠ɺλΠ ϛϯά͕ѱ͍ͱϏʔίϯΛड৴Ͱ͖ͳ͍ •
SSIDΛӅͯ͠ΔAPͦͦݟ͑ͳ͍
ݕग़ཁٻ͕ඞཁ! • ܨ͍͗ͨSSID͕طʹΘ͔ͬͯΔͳΒɺͦͷ SSIDΛ໊ࢦ͠Ͱݕग़ཁٻͨ͠΄͏͕ᴴ͔ʹ ͍(ೋճҎ߱ͷଓͱ͔) • WiFi νϟωϧ͕͍ͬͺ͍͋Δ͠ɺλΠ ϛϯά͕ѱ͍ͱϏʔίϯΛड৴Ͱ͖ͳ͍ •
SSIDΛӅͯ͠ΔAPͦͦݟ͑ͳ͍
SSID ໊ࢦ͠Ͱݕग़ཁٻ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़Ԡ (Probe
Response) ʮ͍ʯ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़Ԡ (Probe
Response) ʮ͍ʯ ͍
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़Ԡ (Probe
Response) ʮ͍ʯ ͍ ݕग़ϛεͳ͍
͍͚Ͳ
• ࢠػࣗͷډॴ͕Θ͔ͬͯͳ͍. AP͕ແ͍ͣͷॴͰ Probe Request ͢Δ
• ࢠػࣗͷډॴ͕Θ͔ͬͯͳ͍. AP͕ແ͍ͣͷॴͰ Probe Request ͢Δ • ҰଓهԱͤͨ͞Β͠Β͘ͷؒ Probe Request
Λૹग़͠ଓ͚Δ(࣮ґଘ)
ͨͱ͑౦ژʙതଟΛҠಈ͠·͢
ͨͱ͑౦ژʙതଟΛҠಈ͠·͢ ࣗͷAPʹର͢Δݕग़ཁٻ ՈΛग़ͨॠ͔ؒΒͯ͢ແବܸͪ ʢిͱ͔ͷແବ·͋ࠣͳʣ
SSID ໊ࢦ͠Ͱݕग़ཁٻ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe
Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe
Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe
Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe Request)
SSID ໊ࢦ͠Ͱݕग़ཁٻ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe
Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe Request) ʮ“MyHomeBuffalo”͞Μ͍·͔͢ʯ AP ݕग़ཁٻ (Probe Request) ͜ͷiPhone͕͋ΒΏΔग़ઌͰ “MyHomeBuffalo”ͬͯͷΛཁٻͯ͠ΔΑ͏ͩ
࣮ࡍʹݟͯΈΑ͏
None
ࣗͷϊʔτPC(b8:f6:b1:14:fc:1b)͕ iis-visitor ͬͯͷΛ୳͍ͯ͠Δ
iis-visitor Ͳ͔͜ͷήετ༻WiFiͬΆ͍
iis-visitor Ͳ͔͜ͷήετ༻WiFiͬΆ͍ ଓ֮ͨ͑͋͠Δ
Probe Request ʹؚ·ΕΔ༰
Probe Request ʹؚ·ΕΔ༰ • ͷMACΞυϨε • ͕ଓͨ͜͠ͱͷ͋Δ AP ͷ ESSID
ʢෳ͔ʣ • APͷBSSID(MACΞυϨε)ؚ·Εͳ͍
None
None
͜ͷ"QQMFͷॴ༗ऀΪʔਫʹߦͬͨ͜ͱ ͕͋ͬͯTIJCVIPVTFʹߦͬͨ͜ͱ͕͋ͬͯ TJOBQʹߦͬͨ͜ͱ͕͋ͬͯUBLBOP͞Μͱ ໘͕ࣝ͋ΔͩΖ͏ɻ
͍
ετʔΩϯάͷԠ༻
ετʔΩϯάͷԠ༻ • શʹडಈ(passive)ͳετʔΩϯάͳͷͰɺ ଆͰ߈ܸݕ͕ෆՄೳ
ετʔΩϯάͷԠ༻ • શʹडಈ(passive)ͳετʔΩϯάͳͷͰɺ ଆͰ߈ܸݕ͕ෆՄೳ • WiFi ͕ಧ͘ൣғʹߦ͘ඞཁ͕͋ͬͯɺ ݫີʹωοτετʔΩϯά͡Όͳ͍
ετʔΩϯάͷԠ༻ • શʹडಈ(passive)ͳετʔΩϯάͳͷͰɺ ଆͰ߈ܸݕ͕ෆՄೳ • WiFi ͕ಧ͘ൣғʹߦ͘ඞཁ͕͋ͬͯɺ ݫີʹωοτετʔΩϯά͡Όͳ͍ • λʔήοτͷͷMACΞυϨε͕Θ͔Β
ͳ͍ͱ୭͕୭͔ͩΘ͔Βͳ͍
MACΞυϨεΛΔํ๏
MACΞυϨεΛΔํ๏ λʔήοτͷʹ৮͢Δඞཁ͕͋Δ… ͦΕ͕ແཧͳΒਪଌ͢ΔͷΈ
σϞ
None
ଞͷωλ • BSSID(MAC) ͔ΒҐஔใΛҾ͚ΔAPI • ESSID ͔Β BSSID Λਪଌ͠ Probe
Request ͔ΒͷաڈͷҐஔใΛਪ ଌ
๏తͳ • ి๏ ୈ59ʢൿີͷอޢʣ • Կਓ๏ʹผஈͷఆΊ͕͋Δ߹Λআ͘΄͔ɺಛఆͷ૬खํʹର͠ ͯߦΘΕΔແઢ௨৴ʢిؾ௨৴ࣄۀ๏ୈ4ୈ1߲ຢୈ164ୈ2߲ͷ ௨৴Ͱ͋ ΔͷΛআ͘ɻୈ109ฒͼʹୈ109ͷ2ୈ2߲ٴͼୈ3߲ʹ͓ ͍ͯಉ͡ɻʣΛडͯͦ͠ͷଘࡏए͘͠༰Λ࿙Β͠ɺຢ͜ΕΛ
༻ͯ͠ͳΒͳ͍ɻ
__END__