First of all Let me mention that this whole experiment is for learning purpose and not intended to cause harm or damage.
I am a novice networking enthusiast.Recently I tried to penetrate a wifi network which is open and has no security but authorization is done through a mikrotik hotspot gateway.When a user is connected to this network it redirects user to the gateway webpage on a server and asks to enter username and password for authentication.I could connect to the network after I managed to monitor devices that connect to this hotspot, record their MAC addresses and spoof my MAC address to impersonate one of the authorized devices.I have three questions;
- Is it possible to access the routers web interface and modify setting if the administrator changed the default password/username of the router?
- Why should a network administrator use this method to secure a network since this can be bypassed by mac spoofing and it is vulnerable compared to a WPA/WPA2 security?
- Is it possible to fix this vulnerability of hotspot gateway?