Extreme Wireless Hacking
A peer of mine at work Pat Collins sent me this very interesting link today about how with some MAC address spoofing and ICMP tunneling you can hack your way into a wireless network.
To summarize, an HTTP request is sent to to the raw socket which is handled by the linux kernal (Note: can’t do this in windows folks) which is setup to be the the default route to the tunnel which redirects to the ICMP socket (tunnel) and then sent back to the kernal to interpret as an ICMP packet on the real wireless interface. I’ve never seen anything like this. Just another reason to think wireless isn’t as secure as we think it is..