Does someone need to have control of the router to do this? Or how could it work otherwise?
It's in the article. He spoofs the MAC address to trick the gateway into thinking the attacker is the victim.
Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
51–56 of 56 posts
Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
#52I've thought about adding something like this to my guest wifi to mine some cryptocurrency - but quickly dismissed it as most guests would need to use a charger soon(ish) and thus using my electricity :P
I wonder how many use ASICs for mining at public power outlets.
In the past, in Bulgaria, gypsies used to illegally connect to the electricity network to avoid paying bills. Nowadays there's a shift in that trend - there are numerous cases of people running mining farms the same way.
Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
#53Https everywhere extension fix it right?
Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
#54Earlier quoted context omitted.
If you control the AP, you should disallow client to client communication. Most AP's and routers allow this and it would mitigate this risk.
But... this doesn't use client to client communication. As far as the AP is concerned there is one client (the attacked). The victim is connected to the attacked believing the attacker is the AP.
To the AP, they are both clients. The attacker (MITM) computer can be accessed by the victim. This would mitigate the attack. It's possible that the arp spoofing would prevent the victim from accessing the internet, but that depends on how the AP institutes it's blocks.
Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
#55Interesting method, but yes; wouldn't HTTPS mitigate this script from being injected? Trying to get awareness for my own original miner written from scratch https://www.sparechange.io/ Interesting learning WASM.
Re: Hacking WiFi to inject cryptocurrency miner to HTML requests (CoffeeMiner)
#56Wow....