daloRADIUS - Cracking A Hole in The HotSpot 2014

From black holes to wireless networking
daloRADIUS and cracking a hole in the hotspot Liran Tal 2013
Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Whats ahead
Topics
Wireless ISPs and Hotspots RADIUS and How It Works Open Source A journey through open source, from need to product
The Story
2006
5 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
HTML5
Twitter
2006
Android
Apps Store iPhone UX Designer Responsive Web
First REAL job at a Hi-Tech startup
* Image source: capecoral.net
Which Hi-Tech startup?
Why REAL startup?
Why REAL startup?
10
Why REAL startup?
11
10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom
12
10Levels participated, as an integrator, Mail Server for big WISP project Networking in Freetown, Sierra Leone led by Netcom
13
Wireless ISP
* Image source: makeuseof.com
14
15
16
17
18
Users report network issues
* Image source: arstechnica.com
19
Local CTO calls Netcom (integrator)
* Image source: omnitechsupport.com
20
Netcom contact person calls 10Levels
* Image source: findandconvert.com
21
2 weeks later Im in Sierra Leone Doing network sniffing with my best friend ethereal
* Image source: shutterstock.com
22
Freetowns air port...
* Image source: sean mendis
23
Freetowns air port... and thats after the upgrade
24
Freetowns air port... From my camera
25
* Image source: www.screenhog.com
26
Company has an idea
27
or actually
28
an IDEA!
29
Lets do WISP, on Linux
* Image source: http://www.ossramblings.com/
30
How do you pull a WISP?
31
Access Points and Backhaul for infrastructure
* Image source: fibernova.com, http://img1.mlstatic.com/
32
Network equipment, routers, switches
* Image source: crn.com
33
You do want to make money, right? Billing.
* Image source: http://www.citrusdb.org/, http://www.freeside.biz/
34
E-mail services
35
Remote access servers
36
Remote access servers

often referred to as or
NAS Network Access Server
RAS Remote Access Server
37
Authentication
The worlds most popular RADIUS server
38
Authentication
RADIUS
The worlds most popular RADIUS server
39
Authentication
40
Authentication
Not really
41
RADIUS Remote Access Dial-In User System
42
RADIUS Remote Access Dial-In User System
Authentication who is this user? Is that really him? Authorization what is this user allowed to do? Accounting what did the user do?
43
How does it work?
* Image source: h3c.com
44
Remember how to connect to your ISP?
* Image source: exetel.com.au
45
Remember how to connect to your ISP?
* Image source: exetel.com.au
46
RADIUS attributes apply a user policy
47
How do we manage users?
48
How do we manage users? Provisioning
49
How do we manage users? Provisioning

Create users Configure user profiles Bandwidth limits Login times Account expiration Simultaneous Logins
50
daloRADIUS,
The rise of
2007
2007
web management platform for freeRADIUS deployments?
53
2007
dialup admin = bundles with FreeRADIUS
54
2007
no other worthy open source project to tackle this problem
55
2007
the endeavor begins
56
2007
the endeavor begins lets scratch that itch!
57
2007
hardest part of every new software project?
58
2007
choosing a name
59
2007
daloRADIUS
60
2007
daloRADIUS whats in a name?
61
2007
daloRADIUS whats in a name? Daloya my wifes last name
62
2007
daloRADIUS whats in a name? Daloya my wifes last name Now she is famous!
63
2007
daloRADIUS whats in a name? Daloya my wifes last name Now she is famous!
64
daloRADIUS
daloRADIUS is an advanced RADIUS web management application aimed at managing hotspots and generalpurpose ISP deployments. It features user management, graphical reporting, accounting, a billing engine and integrates with GoogleMaps for geo-locating.
daloRADIUS
every decent project needs a logo
66
daloRADIUS
every decent project needs a logo
67
daloRADIUS
my first major open source web venture
68
daloRADIUS
my first major open source web venture pioneer project
69
daloRADIUS
my first major open source web venture pioneer project great adoption potential
70
daloRADIUS
my first major open source web venture pioneer project great adoption potential amazing community feedback
71
daloRADIUS
mission #1
72
daloRADIUS
SourceForge project page
73
daloRADIUS
SourceForge project page code hosting
74
daloRADIUS
SourceForge project page code hosting collaboration
75
daloRADIUS
open source yields some food-wise benefits
76
daloRADIUS
I bet my friend I can hit lower than 1000 ranking on SourceForge
77
daloRADIUS
78
daloRADIUS
That reminds me! @andel7 you still owe me a meal!
79
daloRADIUS
Back To The Future
80
daloRADIUS
Back To The Future
81
daloRADIUS
open source project analysis
82
daloRADIUS
mostly written in PHP well established, mature codebase maintained by one developer decreasing Y-O-Y commits
83
daloRADIUS
84
daloRADIUS
105K
lines of code has had 2,061 commits made by 6 contributors
daloRADIUS
26
person years based on COCOMO model
86
$1.4M
estimated cost for $55k average salary
daloRADIUS
more on project growth
87
daloRADIUS
more on project growth
88
daloRADIUS
> 150K
downloads
daloRADIUS
who is using it?
90
daloRADIUS
who is using it? exotic people
91
daloRADIUS
who is using it? exotic people really
92
daloRADIUS
Papua New Guinea
93
daloRADIUS
Ecuador
94
daloRADIUS
Iceland
95
daloRADIUS
who is behind those downloads?
96
daloRADIUS
ISPs, Hotspots, Education
97
daloRADIUS
ISPs, Hotspots, Education partial list:
98
daloRADIUS
ISPs, Hotspots and Education
SiPalto
daloRADIUS
ISPs, Hotspots and Education
* these companies have been on the mailing list at some point
daloRADIUS
I even published a user guide book
daloRADIUS
daloRADIUS
>100
copies sold since December 2012
~250
pages step by step instructions
daloRADIUS
none of this would have been possible without
daloRADIUS
none of this would have been possible without an amazing community of users
daloRADIUS
none of this would have been possible without an amazing community of users an amazing community of developers
daloRADIUS
daloRADIUS
Evgeniy Kozhuhovskiy introducing multi-lingual support
daloRADIUS
multi-lingual proves promising as project grows
daloRADIUS
Hotspots
The origins of
- Yoda
* Image source: http://www.space.com/
* Image source: http://www.space.com/
John OSullivan, astronomer, electrical engineer.
* Image source: http://www.techweekeurope.co.uk/
John OSullivan, astronomer, electrical engineer.

Australian mate Work in the area of radio waves and Fourier transforms (eh?) Hunter of black holes, in hope of improving his radio telescope
Wireless Fidelity
Moving packets in the air since the 90s

* Image source: http://rlab.lse.ac.uk/
Wireless Fidelity
802.11b (11Mbps) 802.11g (54Mbps) 802.11n (120Mbps)
Moving packets in the air since the 90s

* Image source: http://rlab.lse.ac.uk/
Hotspots = Wireless Access Points for Internet connectivity
Hotspots
Coffee shops Institutions Airports
Captive Portals
Redirect all HTTP traffic to a web page User agrees to terms of service or pay online for Internet access
Hotspots
Doesnt mean free Doesnt mean secure
Captive Portals
The gateway for Internet access
Captive Portals Internet access
Not always free Airports Hotels
Restricted access only to staff
Need SSH access but only HTTP is allowed?
Internet makes people happy
Happiness is free wi-fi
Gaining Internet access through Captive portals
VPNs ICMP traffic tunneling MAC piggy-back
Most probably all of these are not an option
VPNs ICMP traffic tunneling MAC piggy-back
Gaining Internet access through Captive portals that actually work
DNS
DNS Huh??
DNS Tunneling
DNS is mandatory to resolve hostnames DNS is recursive -> delegate hostname resolution to a host you control
* Image source: wikibooks.com

Payload must be base32/base64 encoded 512 bytes for each DNS packet DNS uses UDP so it requires further handling
* Image source: http://analogbit.com/
Gaining Internet access through Captive portals that actually work, but not always
DNS redirection will prevent DNS tunneling from working Firewalling DNS activity
Demo Time!
Thank you

daloRADIUS - Cracking A Hole in The HotSpot 2014

Uploaded by

Copyright:

Available Formats

daloRADIUS - Cracking A Hole in The HotSpot 2014

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

daloRADIUS - Cracking A Hole in The HotSpot 2014

Uploaded by

Copyright:

Available Formats

From black holes to wireless networking

daloRADIUS and cracking a hole in the hotspot Liran Tal 2013

Apps Store iPhone UX Designer Responsive Web

First REAL job at a Hi-Tech startup

* Image source: capecoral.net

Which Hi-Tech startup?

Why REAL startup?

Why REAL startup?

Why REAL startup?

* Image source: makeuseof.com

* Image source: makeuseof.com

* Image source: makeuseof.com

* Image source: makeuseof.com

* Image source: makeuseof.com

Users report network issues

* Image source: arstechnica.com

Local CTO calls Netcom (integrator)

* Image source: omnitechsupport.com

Netcom contact person calls 10Levels

* Image source: findandconvert.com

* Image source: shutterstock.com

Freetowns air port...

* Image source: sean mendis

Freetowns air port... and thats after the upgrade

* Image source: sean mendis

Freetowns air port... From my camera

* Image source: sean mendis

* Image source: www.screenhog.com

Company has an idea

* Image source: www.screenhog.com

* Image source: www.screenhog.com

* Image source: www.screenhog.com

Lets do WISP, on Linux

* Image source: http://www.ossramblings.com/

How do you pull a WISP?

* Image source: www.screenhog.com

Access Points and Backhaul for infrastructure

* Image source: fibernova.com, http://img1.mlstatic.com/

Network equipment, routers, switches

* Image source: crn.com

You do want to make money, right? Billing.

* Image source: http://www.citrusdb.org/, http://www.freeside.biz/

* Image source: www.screenhog.com

Remote access servers

* Image source: www.screenhog.com

Remote access servers

NAS Network Access Server

RAS Remote Access Server

* Image source: www.screenhog.com

The worlds most popular RADIUS server

* Image source: www.screenhog.com

* Image source: www.screenhog.com

* Image source: www.screenhog.com

RADIUS Remote Access Dial-In User System

RADIUS Remote Access Dial-In User System

How does it work?

* Image source: h3c.com

Remember how to connect to your ISP?

* Image source: exetel.com.au