Earlier quoted context omitted.
I used to do the same thing at hotels. Still often works. nmap -sn 192.168.0.1-255 To find everyone on the network, then start spoofing each of their MACs until you find one that works
This is what I did about 7-8 years ago on flights when I was still a reckless teenager. Would just wait for people to buy the plan, then spoof their Mac address. There was also a specific airline, although I can't remember which one, which let me in for free without MAC spoofing - by using a Google Cloud VPN I had previously set up. The paywall was essentially blocking all IP ranges except for Google servers for Goog…
I always wondered if there was a way to further exploit that.