stryngs42

This is my take at creating a software suite designed to simplify the complexities in streaming and receiving a video image.

The RTSP stream is very fast and the ROS2 concepts work.

Yeah. It was a big money grab from years back. Lots of controversy for sure. If I recall Amazon now owns .buy, etc.

I hope others find this useful.

It is worth noting that you do not need to have "control" of the access point in question for this tool to work.

The only thing you need are credentials of the network if it is not an Open Access Point. If you have the credentials you then pop those into airtun-ng and now you'll have a NIC you can sniff on and inject to the network in question at the Monitor Mode level.

No arp-spoofing, DNS poisoning, etc, just straight up good old fashioned Layer 2 hacking and there is nothing the Access Point can do to stop you sans an IDS/IPS.

So yes, you could absolutely do what you described and deauth and hope they join your network, but no need in most cases.

As well the real beauty is that NCSI probing happens every single time the the computer connects to wifi, if edgeDressing catches the probe sequence and wins the race that computer's browser is opening. Broadbrush deauthing and poof, now you have a whole bunch of computers all opening up random pages. Not good.

Take action to remove HTTP from the workflow. There is 0 reason to use HTTP in 2024 for a core OS functionality, let alone one that can knowingly be abused just like edgeDressing does.

If you're running edgeDressing and use it as the payload whenever a user connects to any wifi that you have credentials for to include open wifi as well, that user's browser will open and then you have full control to send their browser to whatever URL you want. In this case we fingerprint to gain insight.

I created the payload to create a stronger case for Microsoft stopping the nonsense that is NCSI probing. There is no reason to use HTTP in 2024 and doing so as a core feature of the Operating System is begging for bad things to happen.

That is a neat idea for another payload =)

It would be cool to see Microsoft finally take action with the release of this.