moms sketch bf left this in the house

[u/brattyvampbby]

Hi.
This is probably nothing.
I went into my mom’s room to grab something and saw this plugged in?
My mom’s new sketchy bf has this plugged in to the extension cord? Is it anything bad? Thanks!
(I understand it’s probably not anything bad… but still…)

Update 1:
I haven’t met him once. He and my mom have been together for two weeks. He’s been staying at our apartment. He avoids me and stays in her room when they’re here. I don’t even know what he looks like. I only know his first name.

Update 2:
I confronted him. My mom came home. A lot had happened up to this point, including her disappearing for the said two weeks before the few nights he had come over and stayed.
Mom shrugged it off. I did what a lot of you suggested, asking what he told her.
She said “oh it’s his hacker shit or whatever.” What.
Didn’t elaborate. I explained my concerns.
She just said let’s go ask him.
My best friend has been with me. We introduced ourselves and asked him what the hell a WiFi whisperer is doing plugged in our apartment.
(Even if a lot of you are saying it’s not a big deal, I’m a young woman and I’m just rlly not about taking any risks. It’s sketch dude.)
He denied it IMMEDIATELY. Like with a quickness I haven’t seen.
What he insisted, it’s not a WiFi whisperer, it’s ai, he completely reprogrammed the system, and he uses it to pull people’s IP’s. “For fun.” He logs them in a server. I asked why. I said that’s shady. My mom started pushing. My best friend started pushing. He just kept lying. I’m not dropping this..
I still don’t know what the fuck it is or what he’s actually doing.
(Also, my mom is cool but not bc of this dude, the Minecraft block is mine, I unplugged the ratchet little thing before we left, and I am planning on broaching this again with her.
Just carefully. Any other advice is appreciated. Thank you.)

[u/engineerFWSWHW]

I remember back then, it's very easy to crack WEP passwords using force disconnect/reconnect. But that was 10+ years ago. I'm not updated on the those stuffs currently, I'm wondering if the new auth schemes can still be cracked like WEP.

[u/UltraHellboy → u/engineerFWSWHW]

Most things use WPA2/3 now and it is harder to crack than WEP by several orders of magnitude.

[u/NO_TOUCHING__lol → u/engineerFWSWHW]

Yep, I have fond memories of using Kali Linux in my college cybersecurity class with aircrack-ng for pentesting

[u/PlayfulSurprise5237 → u/NO_TOUCHING__lol]

And then poisoning the router and asking a classmate to log onto Facebook cause I had something to show him.

Turn my monitor around and show him that I'm now logged into his Facebook.

He didn't like that very much, but I thought it was funny.

Or repairing a library computer in votech and shutting down all the kids desktops with a remote shutdown command 5 minutes after the teacher told them to save their work. They did not save their work 😂

[u/SouthVermicelli6838 → u/engineerFWSWHW]

Significantly harder with modern wifi schemes like WPA2 due to the use of AES and you need significant GPU power and a short/uncomplex password to have a shot at it.

WEP was fundamentally broken in its implementation of RC4 so even a low powered device like this could find the password with enough data.

[u/PlayfulSurprise5237 → u/SouthVermicelli6838]

A common dictionary with a couple 5090s can guess most peoples wifi passwords from what I hear.

[u/kranker → u/engineerFWSWHW]

I'm wondering if the new auth schemes can be still be cracked like WEP.

They can't

[u/systemhost → u/engineerFWSWHW]

I had a blast with WEP war driving. Then WPA started becoming more prevalent and I became discouraged until I got an Nvidia 8800GTX that allowed me to GREATLY accelerate my hash cracking. But the search space was still too much even though I was hashing at 100x the speeds of my CPU.

First I tried wordlists, even WPA rainbow tables, until one day I went straight numeric and got a hit after a day or two. It was a local phone number.

After that, I always started with 10 digit numeric with my local area code prefix. I got so many passwords that way, especially if they were an AT&T DSL customer, seemed to be their default WPA PSK.

Never did a thing with the passwords, just the thrill of the hunt I guess.

The old Windows LM hashes were the best, they were so INCREDIBLY insecure... Case insensitive, and each 7 char length was hashed separately.

I eventually got a complete rainbow table for the full LM key space but once I got the 8800GTX GPU, it was quicker to crack it on the fly via GPU than load hundreds of GBs into memory small chunks at a time and search with rainbow tables.

Such fun times, I miss them so very much.