Synopsis: DecaffeinatID is a simple little app that acts as an Intrusion Detection System (more of a log watcher really) to notify the user whenever fellow users at their local WiFi hotspot/ LAN are up to the kind of "reindeer games" that often happen at coffee shops and hacker cons.
When you connect your Laptop to an Open Network at a cafe or a place where you don't know the users connected to the Internet Access Point, this leaves you open to a 'Man in the middle Attack.' Anyone who has any knowledge of the programs that can achieve this will make your laptop believe they are the router and the router that they are your laptop. What happens then is all traffic is monitored via the particular program(s) (I won't name any here,) which can then be searched after the attack for passwords that have been transmitted via http or IM messages you sent (as examples.) So try to use https or a VPN when transmitting important data, though https isn't safe if the user is using a popular Linux distro and your not vigilant of your URL address bar!!
But the brilliance of this application is if the routers MAC address changes it will alert you of the change. Then it's up to you whether you want to stop connecting.
This sudden change could be:
1. The IT Guy decided to give the Router a spoofed MAC address for fun!
2. An Attacker is eavesdropping on your packets. (This is normally the case.)
Writes settings to: Application folder
How to extract: Download the ZIP package and extract to a folder of your choice. Launch DecaffeinatID.exe.
Stealth: Yes
License: Freeware / OpenSource
System Requirements: WinXP / Vista / 7
Download: http://www.irongeek.com/i.php?page=secu ... or-windows
DecaffeinatID
Re: DecaffeinatID
This has only 5 points! It truly is an ideal application to have when travelling and using FREE, OPEN WiFi networks. Because it will warn you when the router's MAC address changes, which normally means that someone is spoofing the MAC address of the router and hijacking your traffic data.
Re: DecaffeinatID
Looks like an inactive project. This beta version is from January 2009. Should it be in the DB?
Re: DecaffeinatID
It's not inactive, there is nothing new to add at this current time. 
The source code is available and the language is AutoIt, so it will always be active, even if the original developer doesn't want to continue.
The source code is available and the language is AutoIt, so it will always be active, even if the original developer doesn't want to continue.