View Full Version : dhcp HOSTNAME DETECTIVE
dme1
November 4th, 2005, 05:55 PM
I have recently found a DHCP lease on my home router for a hostname of "detective" with a spoofed MAC address. I do have WLAN with basic WEP (128 bit) and changed very infrequently.
Does any1 know of any viruses, trojans or hacking tools that would obtain a DHCP lease for spoofed MAC address with hostame of detective, cos I'm flummoxed???
CrazyM
November 5th, 2005, 12:31 AM
Hi dme1
... and welcome to Wilders :)
-{ Quote: "I have recently found a DHCP lease on my home router for a hostname of "detective" with a spoofed MAC address. I do have WLAN with basic WEP (128 bit) and changed very infrequently." }-
Is this an unknown system that is connected to your wireless network?
-{ Quote: "Does any1 know of any viruses, trojans or hacking tools that would obtain a DHCP lease for spoofed MAC address with hostame of detective, cos I'm flummoxed" }-
There are tools available that could be used to monitor, crack and access your wireless/WEP.
Reagards,
CrazyM
dme1
November 5th, 2005, 10:42 AM
Hi CrazyM and thx for welcome,
Sorry I didn't explain my question very well :-
Is this an unknown system that is connected to your wireless network?
Yes it is unknown, but after research on google it appears that others have also had a hostname of detective with spoofed mac address in their dhcp lease tables
There are tools available that could be used to monitor, crack and access your wireless/WEP
Yes I realise there are WEP hacking tools, my question was more to do with the DHCP lease to hostname detective with spoofed MAC address.
My dilemma is that I have recently started playing with remote exploit Auditor tools without reading up first (silly me):-[
So, because this DHCP lease issue has been seen elsewhere, my guess is that there is a tool or malware somewhere that has done this. Question is, have I done it inadvertently by playing with Auditor tools on my network (hopefully :) ) or has someone done it over my WLAN which means I have been WEP hacked (hopefully not:-\ )
Hope that makes sense...
dme1
November 6th, 2005, 03:56 PM
thanks to someone from another forum for pointing me towards windows 2003 server. When configuring a server to be the 1st domain controller in a new forest with a dns install w2003 does this dhcp stuff. So there is no malware responsible, unless you class w2003 as malware;D
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums