Skip to main content

How to Wardrive: Know where to go

Inspired by others, and my goal of getting a golden WiGLE badge, I went wardriving for my birthday. I was hoping for 50k, and I ended up with just over 61k. I'm less than 80k away from my goal!

But how do you pick a place to wardrive, and how do you actually do it? The easiest way is to download WiGLE on an android phone, get some transportation, and be set on your way. But if you want more detail or some tips, keep reading. 

Avon Lady Method:

  1. Find a city within reasonable distance of travel
  2. Examine the results for the past few years of the area; do not use the overall coverage of all time. 
  3. Verify if the city is desirable for wardriving
    • Little coverage in the past few years
    • Most residential areas are not covered
  4. Use maps to search and define high density residential areas (i.e. apartments, town homes). 
  5. Create an order that allows for little overlapping and in a convenient driving pattern.
  6. Use landmarks around the city to define the internal roads
  7. Wardrive
  8. Profit ("internet points")
----

Evansville, IN

I picked this location because of its relative distance to me, and the fact it looked like stumblers haven't touched the area recently. Below shows a map of Evansville 2020 - 2023. So for the last two years this is the only progress than Evansville has made. It looks like most of the concentration is on major roads, with only a few residential areas defined.

Figure 1

Residential areas have multiple wifi devices per dwelling, so apartment complexes have a high density of wifi and bluetooth. Those places aren't well defined by the map, so I assumed I would get a lot of results there. 

But you can't just drive around and magically get yourself to where the map is bare. It takes some planning. I call this the Avon Lady Method. Avon ladies may blanket a neighborhood with their brochures, selecting high density areas to get the most clients. Shoutout to my mom. 

I pulled up Evansville on Google Maps and got to work. Printing out a couple of paper maps of Evansville, I matched up the roads to the results on Google Maps searching for apartments. I plotted some areas on the paper map to see where I was going to drive. I then wrote the order of the apartments to the path that I wanted.

Figure 2

The numbers at the top reference a part of the map. They aren't really important. After laying out the order of the results, I broke the lists up into different quadrants of the city. Then we went down the list crossing them off as we blanketed the residentially areas. 

This would get us isolated parts of the map, but what about the center? What about the business part of the city? Using Google Maps again, I zoomed out and picked the businesses than would get the pattern I wanted and put those in order too. I called these landmarks. 

Figure 3
  

The result got me the same amount of networks as all of 2021 and 2021 in Evansville. Removing all results by others, here's what the wardrive worked out to:

Figure 4

There's clumps and clusters on the map from the residential areas. Using the landmarks caused the outlining on the connected streets. Combining the two maps of Evansville yielded this result of total stumblers (including me) in 2020 - 2023:

Figure 5

Comparing this figure to figure 1 shows a significant coverage change and a much more covered city. Overall this was moderately successful. About 14 hours of wardriving yielded 60k-ish results. Evansville is not a big city, and wouldn't hold a candle to large cities like SF or NYC. These areas are well covered my many stumblers; there's less opportunity to find new networks. It's currently January 31st, and here's what's already been covered in the past 31 days: 

Figure 6

It's easy to see where the major cities are and how their coverage for this year has already been explored. That doesn't mean there's not still plenty of wardriving to be had, but it does mean there's less. These numbers could rival the 60k found in Evansville, but it would be a longer, harder trip. Look at SF's coverage, I see you stumblers. 

Next post, I'll talk about the devices I used and their individual results. You'll be shocked on how good cheap, old equipment can be! Thanks for reading; happy wardriving. 

 



Comments

Popular posts from this blog

2023 Resolutions

Welcome to my New Year's Resolutions! I feel a little vulnerable sharing my goals publicly and auditing if I failed or succeeded over the year.  My 2023 Resolutions 1) HACK THE PLANET! 2) Upload to WiGLE every month 3) Post to the blog at least once a month 4) Continue to follow and maintain my vision board. Don't judge me! I thought they were cheesy and weird, but it's been so effective. I made a blog post about it already, but just as a refresher my current board is below. A vision board is almost a resolution list in of itself. These are all the things I want to achieve in the near future.  5) Pass the HAM radio exam 6) Continue in content creation and make articles or a podcast Let's go over what my resolutions where last year: My 2022 Resolutions 1) Make it to 500,000 unique wifi networks I made it in November! I achieved this goal and obtained the gold WiGLE badge.  2) Upload to WiGLE every month I made this most months, but not every month. I will try again! 3) W

Remove data from Data Brokers

 If you have a little change from your tax return, I have a suggestion on where you should spend it this year. This is not sponsored, not an advertisement, and I do not benefit from these companies. I paid for these services out of pocket on my own. Okay. We all know how scary OSINT can be, being able to look up public information such as age and home address. We hand over this information readily when we use certain products and services. Some of this information is also kept at a criminal level, such as criminal record lookups.  That's not the only information we hand over, we are tracked and have our data collected every day through data brokers. They profit off of our identities selling it back to one another constantly.  There are services now that will automate the removal of your data from data brokers. I found Aura and Incogni when promoted online. Both of them had a referral code, but also a standard discount for an annual subscription instead of monthly. At the time of wr

CactusCon 2023 - Surveillance in your Pocket

  CactusCon Track 1 Day 2 Go to 1:10:30 to the start of the talk.