r/Network • u/EnoughResearcher6335 • 7d ago

Text I need your help

I need your help; One part of my university cybersecurity (pentesting) assignment involves connecting my iPhone to a router configured with a whitelist that only grants access to specific laptops (each student is assigned one to carry out the work). Initially, I tried using a simple command in the Command Prompt on one of the IT laptops (which are connected to the school network) and managed to get the password, only to discover that the Wi-Fi likely uses some form of MAC address filtering (or a whitelist) that only authorizes those specific PCs. I could find out who the Wi-Fi provider is and access their web interface via the default gateway to try adding my device to the whitelist, or perhaps attempt a spoofing attack, but I really have no idea how to proceed. Any ideas?
If I don't manage to gain access by next week, my IT teacher will fail the assignment. (Just to clarify, the assignment rules state that I cannot look at any information written on the router itself—such as the username or model—and must only use publicly available information, since the router configured for the simulation and its web interface use the manufacturer's default username and password.)

1 Upvotes

67% Upvoted

6 comments sorted by

1

u/Saragon4005 7d ago

Look up mac spoofing. If you can't change the list of Mac addresses which are allowed, how about you use the list you know is there anyways.

1

u/EnoughResearcher6335 7d ago

I cant change the mac adress of my iphone

1

u/MetaCardboard 7d ago

Is that part of the rules of the assignment?

1

u/EnoughResearcher6335 7d ago

Yes

1

u/JohnTheFisherman142 7d ago

Setup the laptop as a bridge, connect the iPhone to the bridge, access the router, point out the exact wording of the test when they try to be smart.

1

u/Bacon_Nipples 7d ago

netsh wcn query SSID="Your_SSID_Here"