Kernel way in Wi-Fi securiry

Introduction.

Currently, the topic of security in Wi-Fi networks is extremely popular. There are a lot of HOWTO for break WEP and WPA in the WEB. But there is no article about protecting WI-FI. In this article we will try to share our resech.
Note: Those who do not see anything terrible in that your neighbor will get a few of clips from your WI-FI, please remember such things as snifing, sending spam from you, compromise access point, the creation of fake DNS servers and other fun.

Wardriwer's nightmare.

Imagine that you read all those articles about security. So you want practice. You took kismet, ettercap etc. You find victim, a network of your neighbor John Smith. Everything is on the scenario, you get a key and connect to the network. You can You can ping all nod's in network. And all the wonderful. But you coudnot work with network at else, you can not go on the Internet, you coudn't go to neighbor's share, you coudn't sniff any password. And any else think "What the shit?.."

What was this shit.

There is not only possible but fairly easy, to realise this nightmare. You need to install on al nods in network spesial kernel module, aka stelth-patch, which will intercept packets at the network level, to take data of the package and convert it for you given algorithm. Why the network level? The fact is that at this level checksum considered only for header. (Of course checksum considered CRC32 through which it is possible to break down. But we think that this staet theme of the next article. Until we have enough of that)

Realization.

It describes the creation of a special kernel module for Unix - like operating systems.
Why Linux? Well, in - first because the kernel is based on a modular principle, and these modules will find it easy to apply; in - the second is open source that helped deal with the interaction of the system kernel sockets.
Kernel module is a special way compile program. You can download sources here. Encoding algorithm the easiest, but it certainly can be replaced. For configuring and install module you must write your Wi-Fi device name in /etc/ip_hack.conf and start /etc/init.d/ip_hack. Thats al ;)
We want to note that module must be at the side of the workstation and at the access point. Almost all access points has Unix-like OS as operating system. And you can change firmware with intergated module.

P. S. How to change firmware we tell next time.