My small office has Netgear Router (N300 DGN2200). I had it secured using "password" . So any computer which needed access had to give the security password. But today a outsider accessed my router for using internet without the password. He even showed me my password required to access network. He used proxifier , freeportscan etc. My question is how he did it and how can i protect my network from such access in future.
closed as not a real question by Terry Chia, Polynomial, Scott Pack, Iszi, Jeff Ferland♦ Dec 3 '12 at 23:57
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.
Did you use WPS to setup your router? If so, it could have been cracked using reaver.
If not, it is possible that you used an easily crackable password (Dictionary word, short character length, non-complex, etc.)
From there, in order to get onto your router itself he would also need the login credentials. Did you change these to be different than the defaults?
The other vectors of attack are either social engineering, getting the password from someone who knows it, or attacking your PC/laptop itself and dumping the hashes/configuration information.
Was the password used to secure your wireless network/router the same password that you use on other accounts? If so, perhaps another account was hacked and they just correctly assumed you used the same password again.
You can either use stronger security protocol , choose a "hard to guess " password and change it frequently , or if you have MAC filter in your router and your network is not very dynamic , you can build a table based on the user's MACs and the router will not accept any connection form outside the table.(of course you can new users to the table when you have new employees )
If he can't reproduce the steps required to "hack into" your wifi, maybe it's a simple as one of the other employees telling him the password. If he had access to one of the company pcs/laptops he could have also used software like WirelessKeyView to get the password from there.
Since your router apparently supports WPS, it the "hacker" might have also used the reaver tool to gain access to the network.