Wi-Fi Hunting: Basic Tools and Techniques

by Rick Davis

From war-walking to war-driving the art of finding wireless connections has become a game for a new mix of computer users.

Finding new techniques calls upon knowledge in antenna design and signal theory along with various aspects of computer hardware and software.  Sometimes though these higher level techniques are not reasonably used and for many that have not had experience with them simpler methods need to be employed.  With this in mind the following will explore some of the best methods, in terms of cost and ease, to seek out available wireless connections.

Get Your Gear - Basic Hardware

At the most basic level you need only a laptop or other device that can connect to wireless connections.

I recommend a laptop so that you can use some advanced software and several applications simultaneously (see below).

Also, a Wi-Fi finder is very useful and will make your search quicker, more productive, and much more incognito.  These devices can be found in any major electronics store and range from $10 to $30.  They usually have a few LED lights packaged inside a casing about the size of any other pocket electronic device.  Although they all have different features, they all do about the same thing which is indicate any time a wireless connection is detected by lighting a light.  Some models can also tell you the strength and type of signal but I prefer to use my software for that and save the extra money.

More Gear - Basic Software

Get familiar with your OS's built-in function to connect wirelessly because that can be used in many cases and is usually a quick way to connect.

For example, Windows XP users can simply right-click the icon in the system tray to open the connections window which will display any available networks.

In addition, NetStumbler provides a gold mine of information and in many cases may be the only other application you need.  What this does is gather information from any signal it finds such as SSID, signal strength, security, and encryption being utilized along with many other features.  There are many ways to keep the basic operating system from finding a connection (such as not broadcasting your SSID) however if there is a signal NetStumbler will notify you.

It's also worth noting that some of these programs seek connections actively while others seek passively and depending on your situation this can make a difference.  Actively means that your program is sending information in order to get a response and collect data, while a passive program transmits nothing and only collects what is passing by.

Passive programs can take much more time to locate connections and will usually not detect all available data however it will also not get you logged by any software or data and connection logs.

Are You Secure?

Connecting at random locations, especially schools and cafes, will open your computer to possible attacks by many people.

Most will be just harmless people who click on anything their system may find although some will be far more advanced and able to access your system if you're not protected.  Luckily, some basic steps can be taken to make you less of a target and not worth the trouble among a group of others.

First, firewalls are a must and one from a third party is a good idea to add an extra layer to whatever your operating system may already have running.  Make sure you have them set to ask for authorization for any connection or data transfer and that you have security logs running.

Next, make sure you have all the updates for any operating system you use as well as any software that connects to the Internet or is linked to the OS (such as chat programs).

Finally, it should go without saying but make sure you have a fully updated anti-virus running.

Let's Get Started!

Option 1 - Locating a connection within a specific area:  Whether it's a city block where you have lunch or your school campus, this is a great way to quickly map out connections without drawing any attention.  You can either make a rough drawing of the area you want to search or you can take a notepad to quickly note where you found a signal to look into later.

In either case just take your Wi-Fi finder and start wandering around.  If you are not worried about being seen, or just don't think anyone will care, you can cover the whole area at once.

Otherwise make sure you remember where you have been so your next trip will not duplicate your progress.  Again, there are two options for a thorough search.  Either walk around in a pattern so that all the searchable area is covered or just circle buildings or open areas where you would want to connect or expect to see a connection.

If you want to find everything available you should really walk through the search in a logical progression.  On the other hand, if your needs are more legitimate you may want to narrow your search to places where you can plug something in to charge or have a bathroom or soda machine nearby.

Option 2 - Always on the hunt:  In this case you just want to keep a note of any connection you come across in regular travels or where you have no specific target in mind.  If you're driving or walking you can easily clip your Wi-Fi finder on your belt or car visor and make a note when it goes off.  On the other hand, if you have a reasonable battery or are taking a short trip you can keep your laptop running in a backpack, carrying case, or even folded under your arm.

This can get somewhat cumbersome after a while although once you go through an area you can probably skip it for a few months.  And of course while you are in an area where you know you will not connect, you can either power down your gear or completely ignore it.

Signal Found - Let Me In!

Now that you know where the signals are it's time to connect.

The easiest method will be for an unsecured access point in which case you can click connect and you're online.  Sometimes you can find a signal but cannot connect because you need some information and this is where your software comes in.

NetStumbler will give you the SSID of any connection and sometimes a router is set for open access and is just not broadcasting its ID.  So all you need to do is manually enter it and, once again, you're online.

Now the final piece of data from the Stumbler is the type of router you have accessed.  Connecting to anything other than an unsecured access point is beyond the scope of this article.  Whatever you might want to do however will require information on the type of router.

Closing Tips

Keep in mind that others have probably needed to connect in areas you're interested in as well.

Don't be afraid to ask anyone nearby if they know of an access point.  Also, at a school campus or office building you can always ask security or any computer technician.

You may find out some great information plus if you are really only looking for legitimate access they will be able to warn you about anything that is off limits.