Hunting Rogue APs Hard Lessons
Given the challenge of locating a static Access Point this presentation highlights our strategy, pitfalls, and success.
Summary
### Operational Lessons from Hunting Rogue Transmitters At 00:00, security researcher t0ddpar0dy delivers a practical guide to locating unauthorized wireless access points and rogue transmitters in complex enterprise facilities at the Wireless Village. The speaker recounts field challenges encountered during real-world physical fox-hunting operations.
### Building Field Direction-Finding Equipment At 07:30, t0ddpar0dy details the construction of portable direction-finding rigs. Utilizing a Raspberry Pi, USB Wi-Fi adapters supporting monitor mode, directional yagi antennas, and custom signal-strength logging scripts, researchers can measure received signal strength indicators (RSSI) while walking campus perimeters.
### Multipath Interference and Indoor RF Propagation At 15:24, the presentation explores radio frequency propagation pitfalls inside commercial real estate. Concrete construction, elevator shafts, metallic HVAC ducting, and reflective glass windows distort RF signal paths, causing directional antennas to register false signal peaks that mislead search teams.
### Systematically Tracking Across Vertical Space Concluding between 22:39 and 28:00, t0ddpar0dy shares strategies for hunting across multi-story buildings. He outlines methodical floor-by-floor search grids and triangulation techniques that help defenders locate rogue devices concealed above drop ceilings, inside wiring closets, or hidden within remote conference rooms.
(AI summary — Gemini Flash)
Related talks
Wireless Village·29 min
Besim ALTINOK
eduroam networks are designed to provide wireless access to researchers and lecturers around the world. However, it is known that there are now 10,000 eduroam hotspots in 100 countries around the world. eduroam users ...
Wireless Village·18 min
Eric Reuter
AirWire is a popular wireless control system for large scale model railroad locomotives and accessories. A handheld transmitter is used to control train speed, lights, sound, and trackside accessories. Analysis of thi...
Wireless Village·41 min
s0lst1c3
In this presentation we will introduce working proof-of-concept attacks that can be used against wireless networks that use Opportunity Wireless Encryption (OWE), which is better known as WPA3’s “Enhanced Open.” We’ll...


