How to Find Out AP IP?

[MollyH]

Hello!

I use Kali, and the Aircrack-ng suite. This way I can get the ESSID, BSSID but no AP's IP address of the routers I'm testing on.

I'm just learning to hack and I would like to know how to get the victim's router Ip addreess, the goal of this is to get remotely into the router.

Thanks in advice.

[n01xxv]

I think you must find more information about how WLAN works and read some paper about IEEE 802.11x ...
If you are not connect to the network I don't believe you can find private ip address of the router. And in fact even if you find it by any mean you can't connect (so attack) to it because you are not in the same network !

If you want the public address of the router, if it connect to a public network (ie Internet), try SE techniques to force the user to connect to one of your server.

But in fact I think you must learn how networks work before try hacking things or play with hacking tools .

If you are connected to the network so try that to find ip address ranges :
http://www.aircrack-ng.org/doku.php?id=find_ip
or just a traceroute ... you will go through the router for join another network. Or go like a pig and "nmaped" all the ip range

[white-knight]

Correct me if i'm wrong but the only way to get the routers internal IP address to to be connected to the network.( which is why you are trying to  hack the wifi ,so you can get into the network) ..


You can get the *victims External IP by doing more Recon and so on.. But it would be easier to get in through the wifi more than likely .


So continue on with using Aircrack , Reaver or any of the other wifi hacking tools you prefer. then once u get the PASSWORD you can connect to the network via wifi and get both the Internal and External IPs.


Here are some links to help up your game


https://evilzone.org/wiki/index.php/The_big_tutorial_index   <--- bottom of the page


http://www.securitytube.net/groups?operation=view&groupId=9   <-- A free course


Goodluck

[MollyH]

Thank you guys!

I'm gonna learn a bit more on how WLAN works, and continue with the Aircrack approach (Reaver is not an option because the router has WPS locked). I thought that getting the Handshake would be enough to get the public Ip address, just because I see the MAC of my Alfa card as a Station in the victim's AP.

It's a pity, because I already know the User and Password of the victim's router.

 

[MollyH]

Got it.

thanks 0pt1musPr1m3.