[story] Good Evening Guys, I just got out of a lan house which uses a system named Geto (Geto Lan House Management System 4.0), and I was wondering if it is hackable. [/story]
While searching for possible vulnerabilities, I found out that this system works like a RAT, machines are installed as servers running the software, which connects to the client on lan and receive info such as "unlock" and "lock".
So I was thinking, if the "rat-like system" is configured using a local address, and the main host uses a fixed ip address, can I force a reconnect for everyone on the wired network? If so, I could force my internal address to change and force everyone to reconnect on the same address, but this time I would be the "commander".
[idea] I would connect to the wired local network and search for the possible client (controller) machine, after obtaining the ip address, I would launch a deauth-like attack, forcing everyone to obtain a new ip address, during this time I could force my ip address to be X (Which was the client address before). As soon as it's changed, everyone would be reconnecting to this address, which would be now mine, and I would be running the client on my machine, thus "taking-over" all the machines. [/idea]
So here comes my questions:
1- What are the possible flaws on this?
2- Is there any "deauth-like" attacks for wired connections?
All of this is being done assuming the following:
1- The client (Controller) computer is the only one using a fixed ip address.
2- All other computers (servers) are connecting to the client and they don't use a fixed address.
3- I have a machine of my choice (eg. my computer), with total administrator rights connected to the wired (or wireless, which also exchange ips with wired) network.
Thank you and have a good day. - Fabricio20
Before anyone says I'm asking for a way to hack the lan-house, I'm not, this is just an idea that came to mind while walking home.