Ok so i came up with an idea.
I live in a pretty busy street. Alot of shops are near my house, that means that alot of people are passing by my house.
So i came up with a funny idea:
Make an open wifi connection.
Configure it so people can go on it, but cannot surf on the web, cannot acces the network, etc.
I connect a "server" to it.
On the server is a script running with multiple payloads.
When a device is seen on the network, it will see that its a mobile phone with android. When he sees it's android it will activate "payload android". This payload will contain stuff like, wifi monitor/whatsappsniffer/mayby if i get awesome FinSpy someday (fml thats gonna be a pain, from what i've heard its a fairytale).
If a Windows system is seen, it will activate payload windows (xxbit, depends what the server sees). It will contain stuff like keyloggers, enables vpn, mayby some other stuff, i dunno yet.
I like to come up with more idea's, but for now setting up the network and creating that server should be hard enough. But i think i'm gonna get bored. Do you have any suggestions what i should put in the payload...
I also need a static and a reliable way to redirect the adress to my server, since they probably start the "virus" on their own network. I could adjust it that when they start "Internet" on their phone that it's gonna be installed. then i could mayby just direct it to 192.168.xx.xx locally.
Look, you don't have to engage in criminal activities to have a good fun. You will be caught, it's trivial to triangulate you.
Build the wireless server you described, but forget about the payloads. Think of your neighbourhood as a great population sample for all kind of amusing statistics. (iPhone guys buying a lot more of asian food and lube...)
Name:
Liz2012-11-21 5:15
You think, i show a picture of myself after posting this? (◕‿◕✿)
You could do that. You could also contribute your skills to help improve any number of community projects.
Name:
Liz2012-11-21 5:21
So you say, i should make a wireless connection without the payloads? So people can login on my wireless connection, notice they cant do stuff (i don't want them to drain my connection), and leave again?
I'm just bored and want to get some random fun info. I've got a whatsappsniffer at my own network running. It's really fun to read after family or friends have come to your home :)
Name:
Liz2012-11-21 5:45
The scripting for this is really simple. It only takes alot of time to figure out where to put what command ect...
Problem with the community is, people are like: Look at this code, enter shitload <,>,|,derpherp
Mostly, i'm to lazy to read what it does... Creating something your own idea is easier.
What do i want?
How do i want it?
(then i start thinking) Why do i want it?
Then i start scripting, halfway there i stop because i'm getting bored. I'm a lazy fuck
Here are my PNG routines, part of greater framework...
(defun png-load (s)
(setf s (png-parse s))
(let* ((g nil)
(c 0)
(IHDR (gethash "IHDR" s))
(IDAT (gethash "IDAT" s))
(PLTE (gethash "PLTE" s))
(tRNS (gethash "tRNS" s)))
(unless IHDR (gfx-load-error "Missing IHDR"))
(unless IDAT (gfx-load-error "Missing IDAT"))
(deser IHDR ((width msb 4)
(height msb 4)
(depth 1) ; depth of color channel in bits: 1 2 4 8 16
(type 1)
(enc 1)
(filter 1)
(interlace 1))
(unless (= enc 0) (gfx-load-error "Unsupported encoding (~a)" enc))
(unless (= filter 0) (gfx-load-error "Unsupported filter method (~a)" filter))
(setf c (case type
(0 1) ; grayscale
(2 3) ; truecolor
(3 1) ; indexed
(4 4) ; grayscale with alpha
(6 4) ; truecolor with alpha
(otherwise (gfx-load-error "Invalid color type (~d)" type))))
(case depth
((1 2 4) (when (/= c 1)
(gfx-load-error "Invalid color type (~a) for depth ~a" type depth)))
(8)
(otherwise (gfx-load-error "Unsupported channel-depth (~a)" depth)))
(setf g (gfx width height :c c))
(png-defilter g (zlib:unpack IDAT) depth)
(case interlace
(0 ) ; no interlace
(1 (gfx-load-error "Interlaced PNGs are not supported")) ;(png-deinterlace-adam7 g))
(otherwise (gfx-load-error "Invalid interlace type (~d)" interlace)))
(when (= c 1)
(let ((m (if PLTE
(u1-u4 3 PLTE)
(sc u4 (loop as i below 256 collect (rgb i i i))))))
(when tRNS (times i (length tRNS)
(w/rgb (r g b) (aref m i)
(setf (aref m i) (rgb r g b (- #xFF (aref tRNS i)))))))
(setf (gfx-m g) m)))
g)))
(defun png-make (g)
(bind-struct gfx g (w h c d m)
(let* ((o (%new))
(d (cond ((= c 4) (colors-to-bytes (r g b a) (r g b (u- #xFF a)) d))
((= c 3) (colors-to-bytes (r g b) (r g b) d))
(t (u4-u1 1 d)))))
(ser o (magic arr 1 +png-header+))
(png-chunk o "IHDR"
(ser t
(width msb 4 w)
(height msb 4 h)
(depth 1 8)
(type 1 (case c
(1 3) ; indexed
(3 2) ; truecolor
(4 6) ; truecolor with alpha
(otherwise (error "png-create: cant save this image type"))
))
(enc 1 0) ; compression: 0=zlib
(filter 1 0) ; pre-compression-filter: 0=default
(interlace 1 0)))
(when (= c 1)
(png-chunk o "PLTE" (u4-u1 3 m))
(let ((tRNS (vec 256 u1))
(emit nil))
(times i 256
(w/rgb (_ _ _ a) (aref m i)
(setf (aref tRNS i) (u- #xFF a))
(when (/= a 0) (setf emit t))))
(when emit (png-chunk o "tRNS" tRNS))))
(png-chunk o "IDAT" (zlib:pack (png-filter w h c d)))
(png-chunk o "IEND" #())
(%crop o)
)))
That's called a "honeypot". It already exists.
Also, letting them access the Internet would be a better idea, this way you can get their login/pass/cookies and shit for websites.
Consider using metasploit for the payloads management.
Yeah, >>13-san has a better idea. Just grab their data. You can even use QoS management (flash DD-WRT!) to make sure they don't eat too much of your bandwidth.