Community discussions

 
R1CH
Forum Veteran
Forum Veteran
Topic Author
Posts: 889
Joined: Sun Oct 01, 2006 11:44 pm

Removing Mikrotik elements from beacons

Sun Apr 15, 2018 6:17 pm

Hello,
Is there a way to prevent RouterOS from advertising itself in the 802.11 beacon frames? It's not so great to publicly broadcast the radio name, model name and RouterOS version to the world. This makes exploiting of Mikrotik networks much easier, since an adversary doesn't even need to break the WPA2 key before knowing if the device is running a vulnerable version of RouterOS. Removing these beacon elements would also help make the beacons smaller and reduce interference.
 
R1CH
Forum Veteran
Forum Veteran
Topic Author
Posts: 889
Joined: Sun Oct 01, 2006 11:44 pm

Re: Removing Mikrotik elements from beacons

Fri Jul 27, 2018 4:56 pm

Bump.. still annoyed by the fact that anyone can see the version numbers.
 
jarda
Forum Guru
Forum Guru
Posts: 7602
Joined: Mon Oct 22, 2012 4:46 pm

Re: Removing Mikrotik elements from beacons

Fri Jul 27, 2018 5:21 pm

Very true. I am with you. Two so far... Not enough. But one parameter for that shouldn't be so big deal...
 
User avatar
Cha0s
Forum Veteran
Forum Veteran
Posts: 898
Joined: Tue Oct 11, 2005 4:53 pm

Re: Removing Mikrotik elements from beacons

Fri Jul 27, 2018 5:24 pm

I agree. +1
 
eXS
newbie
Posts: 42
Joined: Fri Apr 14, 2017 4:01 am

Re: Removing Mikrotik elements from beacons

Fri Jul 27, 2018 6:13 pm

Same here
 
User avatar
juliokato
Member Candidate
Member Candidate
Posts: 229
Joined: Mon Oct 26, 2015 4:27 pm
Location: Brazil

Re: Removing Mikrotik elements from beacons

Fri Jul 27, 2018 7:29 pm

+1,

this should already exist since the moment they implemented this information.
I apologize my grammatical errors, my english not so good, I am not a native speaker.
Wiki is maintained in English. I use Google translator. 8)
 
xt22
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Tue Jul 14, 2015 1:16 pm

Re: Removing Mikrotik elements from beacons

Fri Nov 30, 2018 1:45 am

agree. +1
 
User avatar
Joni
Frequent Visitor
Frequent Visitor
Posts: 75
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: Removing Mikrotik elements from beacons

Fri Nov 30, 2018 4:28 pm

This is a vulnerability +1
 
whatever
Member Candidate
Member Candidate
Posts: 100
Joined: Thu Jun 21, 2018 9:29 pm

Re: Removing Mikrotik elements from beacons

Fri Nov 30, 2018 6:37 pm

Didn't even know they were doing this, that's definitely something I'd like to turn off. +1
 
2jarek
Member Candidate
Member Candidate
Posts: 114
Joined: Thu May 17, 2007 3:28 pm
Location: Poland

Re: Removing Mikrotik elements from beacons

Fri Nov 30, 2018 9:34 pm

+1 good idea
 
Dude2048
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Thu Sep 01, 2016 4:04 pm

Re: Removing Mikrotik elements from beacons

Sat Dec 01, 2018 12:33 am

Agreed
 
meetriks
just joined
Posts: 18
Joined: Sun Apr 27, 2014 9:41 pm

Re: Removing Mikrotik elements from beacons

Wed Jan 02, 2019 12:26 pm

Hi,

Wireshark does not have a decoder for the RouterOs beacon tag. I'm thinking of making one :-)

The field is filled with this:
0000   00 00 00 01 1e 00 00 00 00 0a 66 2a 06 00 00 44  ..........f*...D
0010   34 43 41 36 44 36 37 38 44 37 37 00 00 00 00 00  4CA6D678D77.....
0020   00 00 00 05 02 6c 09                             .....l.
The D4...D77 is the radioname/mac of the wlan interface.

I'm running 6.42.10

DEC to HEX
06 = 06
42 = 2A
10 = 0a

In the code I see: '0a 66 2a 06'. Seems to be in reverse with 66 added.

Any one already figured this out? Or made the dissector?

Cheers,
Harry
 
meetriks
just joined
Posts: 18
Joined: Sun Apr 27, 2014 9:41 pm

Re: Removing Mikrotik elements from beacons

Wed Jan 02, 2019 1:36 pm

Did some test with another board and the patron is as expected

6.42.9:
00 00 00 01 1E 00 10 00 00 09 66 2A 06 00 00 44 34 43 41 36 44 36 37 38 44 36 42 00 00 00 00 00 00 00 00 05 02 6C 09
..........f*...D4CA6D678D6B..........l.

6.40.8:
00 00 00 01 1E 00 10 00 00 08 66 28 06 00 00 44 34 43 41 36 44 36 37 38 44 36 42 00 00 00 00 00 00 00 00 05 02 6C 09
..........f(...D4CA6D678D6B..........l.

6.43.8:
00 00 00 01 1E 00 10 00 00 08 66 2B 06 00 00 44 34 43 41 36 44 36 37 38 44 36 42 00 00 00 00 00 00 00 00 05 02 6C 09
..........f+...D4CA6D678D6B..........l.

:-)
 
muetzekoeln
Member Candidate
Member Candidate
Posts: 141
Joined: Fri Jun 29, 2018 2:34 pm

Re: Removing Mikrotik elements from beacons

Thu Jan 17, 2019 12:27 pm

What about the lastest 6.44beta. Something different in the beacon?
 
irobot
just joined
Posts: 6
Joined: Wed Sep 04, 2019 3:27 pm

Re: Removing Mikrotik elements from beacons

Wed Sep 11, 2019 6:34 pm

+1, I would like to see it as an option to disable to make any mikrotik wifi device as generic wifi device as possible.
 
irobot
just joined
Posts: 6
Joined: Wed Sep 04, 2019 3:27 pm

Re: Removing Mikrotik elements from beacons

Wed Sep 11, 2019 6:35 pm

What about the lastest 6.44beta. Something different in the beacon?
still see this behavior at least in 6.44.3
viewtopic.php?f=2&t=151859&p=749629

Who is online

Users browsing this forum: No registered users and 29 guests