So happy to be here! Paparazzi over IP. Daniel Mende & Pascal Turbing {dmende pturbing}@ernw.de.
|
|
|
- Melanie Dennis
- 8 years ago
- Views:
Transcription
1 So happy to be here! Paparazzi over IP Daniel Mende & Pascal Turbing {dmende
2 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #2 Who we are Old-school network geeks, working as security researchers for Germany based ERNW GmbH Independent Deep technical knowledge Structured (assessment) approach Business reasonable recommendations We understand corporate Blog: Conference:
3 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #3 Agenda Intro Transport Protocols Communication Modes & Attacks Conclusions
4 Intro A number of current high-end cameras have network interfaces. We did some research as for their security and potential attack paths. In the following we focus on Canons new flagship EOS 1D X, but similar problems might be found in other models, of other vendors, too. 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #4
5 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #5 The Camera Canon EOS-1D X
6 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #6 The Camera A Bit of Marketing From Canon USA: A built in Ethernet port allows for fast, easy transfer of images directly to a PC or via a network to clients from live events. The EOS-1D X is compatible with the new WFT-E6A Wireless File Transmitter for wireless LAN transfer with the IEEE a/b/g/n standards.
7 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #7 The Camera The Ethernet Port
8 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #8 The Camera WLAN Adapter
9 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #9 The Target aka. Mr. Reuters
10 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #10 The Target What if One could get the real, unedited images first. One could upload (bad) images. One could turn the camera into a surveillance device.
11 Transport The underlying Protocols
12 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #12 Transport Wired LAN via built-in Ethernet port or Wireless LAN via WFT-E6A. Standard TCP/IP (no IPv6, yet).
13 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #13 Traditional Attacks Layer 2 ARP-spoofing possible. No sticky ARP entries ARP-flooding with ~100 packets per second DoS the network stack.
14 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #14 Traditional Attacks Layer 3/4 TCP/IP is used for all network communication. Established connections can be killed via TCP-RST.
15 Communication Modes
16 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #16 Communication Modes Overview FTP Upload Mode DLNA Built-in webserver EOS Utility
17 FTP Upload Mode
18 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #18 FTP Upload Mode Mode of operation Target server and credentials configured on camera. Photos taken are uploaded to the server immediately.
19 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #19 FTP Upload Mode Downside As FTP is clear text, credentials can be sniffed. As well as the complete data transmission Uploaded pictures can be extracted from network traffic.
20 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #20 FTP Upload Mode
21 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #21 FTP Upload Mode
22 DLNA mode
23 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #23 DLNA mode Overview Digital Living Network Alliance UPnP used for discovery. DLNA guidelines for file formats, encodings, resolutions. HTTP and XML used to access media.
24 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #24 DLNA mode Cons No authentication. No restrictions. Every DLNA client can download _all_ images. Your Browser could be a DLNA client. Or somebody else's browser. For your camera.
25 Built-in webserver Always a good idea
26 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #26 Built-in webserver Canon WFT Server Wireless File Transmitter Server Mode. Canon USA: Use a web browser to capture, view and download images remotely
27 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #27 Built-in webserver Canon WFT Server Browser interface uses AJAX. Embedded webserver only capable of HTTP GET method. Every other request method is answered with a 404.
28 Built-in webserver Authentication Authentication via HTTP Basic (RFC 2617) on login page. Session cookie is used afterwards. Cookie looks like sessionid=40b1 4 (!!!) byte Session ID possible IDs 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #28
29 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #29 Built-in webserver Session ID Brute force implemented in 6 lines of python. To check for all possible IDs takes about 20 minutes. Embedded Webserver is not that responsive.
30 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #30 import requests target_uri = ' target_string = 'SESSION_ERR' for i in xrange(0xffff): if (i!= 0 and i%1000 == 0): print str(i) + 'IDs checked' r = requests.get(target_uri, cookies={'sessionid': '%x' %i}) if r.text.find(target_string) == -1: print 'SessionID is : sessionid=%x' %i break
31 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #31
32 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #32 Built-in webserver recap Full access to Live View, stored photos and camera settings. You surf We brute.
33 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #33 Built-in webserver Requirements Camera in WFT Server mode. Valid session opened by user. Some minutes of time.
34 EOS Utility mode aka. I wanna be root
35 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #35 EOS Utility mode The Utility
36 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #36 EOS Utility mode The Utility
37 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #37 EOS Utility mode Overview Allows remote control of all nonmanual camera functions. Pictures can be up- and downloaded. Possibly even more (sound recording anyone?)
38 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #38 EOS Utility mode Technical SSDP and MDNS used for discovery. PTP/IP used for communication. Needs initial camera <-> software pairing.
39 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #39 EOS Utility mode Pairing At first use, credentials needs to be exchanged between the camera and the client software. Camera must be put into pairing mode via camera menu. Camera signals the need for pairing via MDNS.
40 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #40
41 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #41 EOS Utility mode Pairing
42 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #42 EOS Utility mode Pairing Client software connects to camera via PTP/IP. PTP/IP Authentication is successful regardless of the credentials. Credentials (hostname, GUID) are stored on the camera.
43 PTP/IP Feels like USBoIP )-:
44 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #44 PTP/IP Picture Transfer Protocol over Internet Protocol. ISO Standardized by International Imaging Industry Association
45 PTP/IP Packet format Wrapper for PTP with header: 4 byte length (little endian) 4 byte type (little endian) data 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #45
46 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #46 PTP/IP Layering
47 PTP/IP Authentication PTPIP_INIT_COMMAND_REQUEST Includes authentication data: 16 byte GUID hostname string 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #47
48 PTPIP_INIT_COMMAND_REQUEST 2a eb 7a 78 9d 69 cb 64 4e a3 e0 fc 96 ef Paket length = 42 byte Paket type = 0x01 = PTPIP_INIT_COMMAND_REQUEST GUID Hostname = utf16 Trailer 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #48
49 PTP
50 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #50 PTP Explained Picture Transfer Protocol Standardized by International Imaging Industry Association ISO Lots of proprietary vendor extensions.
51 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #51 PTP Packet format Designed for use over USB Fixed length 2 byte Msg Code 4 byte Session ID 4 byte Transaction ID 5 times 4 byte Parameter or Data
52 PTP Message Codes Lot of standardized codes like: PTP_GetDeviceInfo PTP_OpenSession PTP_CloseSession PTP_GetStorageIDs Also Vendor specific codes like: PTP_CANON_GetCustomizeSpec PTP_CANON_GetCustomizeItemInfo 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #52
53 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #53 PTP Use of Thankfully there are some implementations around. We decided to go with libgphoto2. Basic PTP/IP support is included as well.
54 The Attack aka. gottcha
55 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #55 Attack Getting the Credentials Client Hostname easy discoverable, but not needed. Camera also excepts connections with a different hostname. GUID unknown to client software. Obfuscated GUID is broadcasted by the cam via UPNP.
56 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #56
57 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #57 tmp = mdns_info.getproperties()['tid.canon.com'].split('-') guid = [] l = lambda s: [ s[i:i+2:] for i in xrange(0,len(s),2) ][::-1] for i in xrange(0,3): guid += l(tmp[i]) guid += tmp[3] guid += tmp[4] guid = "".join(guid) guid = eb7a789d69cb644ea3e0fc96ef597942
58 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #58 The Attack Connecting to the Camera Camera only allows one connection. Already connected client needs to be disconnected. TCP-RST the established PTP/IP connection.
59 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #59 Attack Process Listen for the Cam on MDNS. De-obfuscate Authentication data. Disconnect connected Client Software. Connect via PTP/IP. Have Phun (-;
60 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #60
61 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #61 Attack outlined So you can write it down Photograph uses hotel / Starbucks WLAN, which isn t unlikely during events (think of Grammy Awards few days ago). Almost anybody in the same LAN can download the images from the camera (and even more).
62 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #62 Countermeasures Enable network functionality only in trusted Networks. Use WPA and a secure passphrase for (your trusted) WLAN.
63 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #63 Conclusions High-end cameras are yet another daily life item equipped with networking capabilities incl. full-blown IP stacks. Once more, their device-specific network technologies have been designed and implemented without (too much) security in mind. Again, this leads to (classes of) attacks previously unknown to their nonnetworked counterparts.
64 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #64 Next Steps New series of cameras (EOS 6D) Built-in Wireless Access Point New communication protocol for IOS/Android App
65 2/18/2013 ERNW GmbH Carl-Bosch-Str. 4 DE Heidelberg #65 There s never enough time THANK YOU...for yours!
66 ERNW GmbH Breslauer Str. 28 D Questions?
67 Join us for TROOPERS13 Workshops, Conference, Roundtables, PacketWars Hacking Contest, 10k Morning Run, March 11 th -15 th 2013 Heidelberg, Germany
Exploring the world of Canon EOS photography. EOSmagazineQ. from July-September 2009. Wireless world Communication without cables
Exploring the world of Canon EOS photography EOSmagazineQ from July-September 2009 Wireless world Communication without cables Technique Wireless Transmitters DIGITAL 00-00 Wireless world Canon s wireless
SmartTV User Interface Development for SmartTV using Web technology and CEA2014. George Sarosi george.sarosi@twcable.com
SmartTV User Interface Development for SmartTV using Web technology and CEA2014. George Sarosi george.sarosi@twcable.com Abstract Time Warner Cable is the second largest Cable TV operator in North America
BASIC ANALYSIS OF TCP/IP NETWORKS
BASIC ANALYSIS OF TCP/IP NETWORKS INTRODUCTION Communication analysis provides powerful tool for maintenance, performance monitoring, attack detection, and problems fixing in computer networks. Today networks
Step-by-Step Setup Guide Wireless File Transmitter
EOS Step-by-Step Setup Guide Wireless File Transmitter Server Mode Infrastructure & Ad Hoc Networks Macintosh OS X 10.5-10.6 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part
The Ubiquitous Web, UPnP and Smart Homes
The Ubiquitous Web, UPnP and Smart Homes Franklin Reynolds Nokia Research Center, Cambridge franklin.reynolds@nokia.com 1 NOKIA PCG.PPT / 15 6 2004 / Franklin Reynolds Our Vision "The essence of this vision
Step-by-Step Setup Guide Wireless File Transmitter FTP Mode
EOS Step-by-Step Setup Guide Wireless File Transmitter FTP Mode Infrastructure Setup Windows 7 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part without permission is prohibited.
Configuring the WT-4 for ftp (Ad-hoc Mode)
En Configuring the WT-4 for ftp (Ad-hoc Mode) Mac OS X Introduction This document provides basic instructions on configuring the WT-4 wireless transmitter and a Mac OS X (10.5.2) ftp server for transmission
Chapter 3 Management. Remote Management
Chapter 3 Management This chapter describes how to use the management features of your ProSafe 802.11a/g Dual Band Wireless Access Point WAG102. To access these features, connect to the WAG102 as described
Packet Sniffing on Layer 2 Switched Local Area Networks
Packet Sniffing on Layer 2 Switched Local Area Networks Ryan Spangler ryan@packetwatch.net Packetwatch Research http://www.packetwatch.net December 2003 Abstract Packet sniffing is a technique of monitoring
Step-by-Step Setup Guide Wireless File Transmitter FTP Mode
EOS Step-by-Step Setup Guide Wireless File Transmitter FTP Mode Infrastructure & Ad Hoc Networks Mac OS X 10.5-10.6 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part without
Chapter 3 Safeguarding Your Network
Chapter 3 Safeguarding Your Network The RangeMax NEXT Wireless Router WNR834B provides highly effective security features which are covered in detail in this chapter. This chapter includes: Choosing Appropriate
Configuring the WT-4 for ftp (Ad-hoc Mode)
En Configuring the WT-4 for ftp (Ad-hoc Mode) Windows XP Introduction This document provides basic instructions on configuring the WT-4 wireless transmitter and a Windows XP Professional SP2 ftp server
Step-by-Step Setup Guide Wireless File Transmitter FTP Mode
EOS Step-by-Step Setup Guide Wireless File Transmitter FTP Mode Infrastructure Setup Windows XP 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part without permission is prohibited.
Introduction to Network Security Lab 1 - Wireshark
Introduction to Network Security Lab 1 - Wireshark Bridges To Computing 1 Introduction: In our last lecture we discussed the Internet the World Wide Web and the Protocols that are used to facilitate communication
Crestron Electronics, Inc. AirMedia Deployment Guide
Crestron Electronics, Inc. AirMedia Deployment Guide Crestron product development software is licensed to Crestron dealers and Crestron Service Providers (CSPs) under a limited non-exclusive, non transferable
Step-by-Step Setup Guide Wireless File Transmitter FTP Mode
EOS Step-by-Step Setup Guide Wireless File Transmitter FTP Mode Ad Hoc Setup Windows XP 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part without permission is prohibited. 1
Chapter 4 Management. Viewing the Activity Log
Chapter 4 Management This chapter describes how to use the management features of your NETGEAR WG102 ProSafe 802.11g Wireless Access Point. To get to these features, connect to the WG102 as described in
Step-by-Step Setup Guide Wireless File Transmitter FTP Mode
EOS Step-by-Step Setup Guide Wireless File Transmitter FTP Mode Ad Hoc Network Windows 7 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part without permission is prohibited.
What is VLAN Routing?
Application Note #38 February 2004 What is VLAN Routing? This Application Notes relates to the following Dell product(s): 6024 and 6024F 33xx Abstract Virtual LANs (VLANs) offer a method of dividing one
VLANs. Application Note
VLANs Application Note Table of Contents Background... 3 Benefits... 3 Theory of Operation... 4 IEEE 802.1Q Packet... 4 Frame Size... 5 Supported VLAN Modes... 5 Bridged Mode... 5 Static SSID to Static
WiPG Presentation Gateway
WiPG Presentation Gateway Deployment Guide For more information www.wepresentwifi.com Sales: sales@wepresentwifi.com Support: help@wepresentwifi.com wepresent 2015 Contents Introduction 1 User Experience
Model 2120 Single Port RS-232 Terminal Server Frequently Asked Questions
Applications What are some of the applications for the Model 2120 Single Port Terminal Server? The Patton Single Port RS-232 Terminal Server provides the ability to bring virtually any RS-232 device onto
Secure Socket Layer (SSL) Machines included: Contents 1: Basic Overview
Secure Socket Layer (SSL) Machines included: HL-4040CN HL-4050CDN HL-4070CDW DCP-9040CN DCP-9045CDN MFC-9440CN MFC-9840CDW Contents 1) Basic overview 2) Brief history 3) Benefit of using SSL 4) How to
Automatic Configuration and Service Discovery for Networked Smart Devices
Automatic Configuration and Service Discovery for Networked Smart Devices Günter Obiltschnig Applied Informatics Software Engineering GmbH St. Peter 33 9184 St. Jakob im Rosental Austria Tel: +43 4253
Step-by-Step Setup Guide Wireless File Transmitter
EOS Step-by-Step Setup Guide Wireless File Transmitter EOS UTility Mode Infrastructure or Ad Hoc Networks Windows XP / Windows 7 Professional 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in
Wireless Security Overview. Ann Geyer Partner, Tunitas Group Chair, Mobile Healthcare Alliance 209-754-9130 ageyer@tunitas.com
Wireless Security Overview Ann Geyer Partner, Tunitas Group Chair, Mobile Healthcare Alliance 209-754-9130 ageyer@tunitas.com Ground Setting Three Basics Availability Authenticity Confidentiality Challenge
How To Set Up Hopkins Wireless On Windows 7 On A Pc Or Mac Or Ipad (For A Laptop) On A Network Card (For Windows 7) On Your Computer Or Ipa (For Mac Or Mac) On An Ipa Or
Wireless Configuration Guide: Windows 7 Additional hopkins wireless network instructions and requirements for Windows XP, Vista, 8, Mac OS X, Linux, and other Mobile versions can be found at: http://www.it.johnshopkins.edu/services/network/wireless/
Chapter 5. Data Communication And Internet Technology
Chapter 5 Data Communication And Internet Technology Purpose Understand the fundamental networking concepts Agenda Network Concepts Communication Protocol TCP/IP-OSI Architecture Network Types LAN WAN
Firewall. User Manual
Firewall User Manual 1 IX. Firewall This chapter introduces firewall general policy, access rule, and content filter settings to ensure network security. 9.1 General Policy The firewall is enabled by default.
Configuring the WT-4 for ftp (Infrastructure Mode)
Introduction En Configuring the WT-4 for ftp (Infrastructure Mode) This document provides basic instructions on configuring the WT-4 wireless transmitter and a ftp server for transmission over an infrastructure
Funkwerk UTM Release Notes (english)
Funkwerk UTM Release Notes (english) General Hints Please create a backup of your UTM system's configuration (Maintenance > Configuration > Manual Backup) before you start to install the software update.
Configuring the WT-4 for Upload to a Computer (Ad-hoc Mode)
En Configuring the WT-4 for Upload to a Computer (Ad-hoc Mode) This document provides basic instructions on configuring the WT-4 wireless transmitter and a computer for transmission over an ad-hoc (peer-to-peer)
JOB READY ASSESSMENT BLUEPRINT COMPUTER NETWORKING FUNDAMENTALS - PILOT. Test Code: 4514 Version: 01
JOB READY ASSESSMENT BLUEPRINT COMPUTER NETWORKING FUNDAMENTALS - PILOT Test Code: 4514 Version: 01 Specific Competencies and Skills Tested in this Assessment: PC Principles Identify physical and equipment
Nokia E90 Communicator Using WLAN
Using WLAN Nokia E90 Communicator Using WLAN Nokia E90 Communicator Using WLAN Legal Notice Nokia, Nokia Connecting People, Eseries and E90 Communicator are trademarks or registered trademarks of Nokia
Linux Network Security
Linux Network Security Course ID SEC220 Course Description This extremely popular class focuses on network security, and makes an excellent companion class to the GL550: Host Security course. Protocols
USB Functions for Windows 7
USB Functions for Windows 7 Getting Started Position the DSL-2750B in your desired location, and connect the power cable to the rear of the device. From the ADSL micro filter device that provides the separated
2057-15. First Workshop on Open Source and Internet Technology for Scientific Environment: with case studies from Environmental Monitoring
2057-15 First Workshop on Open Source and Internet Technology for Scientific Environment: with case studies from Environmental Monitoring 7-25 September 2009 TCP/IP Networking Abhaya S. Induruwa Department
Quectel Cellular Engine
Cellular Engine GSM FTP AT Commands GSM_FTP_ATC_V1.1 Document Title GSM FTP AT Commands Version 1.1 Date 2010-12-28 Status Document Control ID Release GSM_FTP_ATC_V1.1 General Notes offers this information
Computer Networks and the Internet
? Computer the IMT2431 - Data Communication and Network Security January 7, 2008 ? Teachers are Lasse Øverlier and http://www.hig.no/~erikh Lectures and Lab in A126/A115 Course webpage http://www.hig.no/imt/in/emnesider/imt2431
Procedure: You can find the problem sheet on Drive D: of the lab PCs. 1. IP address for this host computer 2. Subnet mask 3. Default gateway address
Objectives University of Jordan Faculty of Engineering & Technology Computer Engineering Department Computer Networks Laboratory 907528 Lab.4 Basic Network Operation and Troubleshooting 1. To become familiar
OV704WVG Product Specifications
OV704WVG Product s OvisLink (Canada) INC All Rights Reserved. System Spec Chipset Switch Wi-Fi Voice DDR Flash Feature and Technical Spec ADSL Features VDSL Features Wireless Features External Connectors
Lab Module 3 Network Protocol Analysis with Wireshark
Pacific Northwest National Laboratory Lab Module 3 Network Protocol Analysis with Wireshark NATO ASI on Energy Infrastructure Security October 2015 PNNL-##### Lab Module 3 Network Protocol Analysis with
Configuring the WT-4 for Upload to a Computer (Infrastructure Mode)
Introduction En Configuring the WT-4 for Upload to a Computer (Infrastructure Mode) This document provides basic instructions on configuring the WT-4 wireless transmitter and a computer for transmission
Networking Test 4 Study Guide
Networking Test 4 Study Guide True/False Indicate whether the statement is true or false. 1. IPX/SPX is considered the protocol suite of the Internet, and it is the most widely used protocol suite in LANs.
District of Columbia Courts Attachment 1 Video Conference Bridge Infrastructure Equipment Performance Specification
1.1 Multipoint Control Unit (MCU) A. The MCU shall be capable of supporting (20) continuous presence HD Video Ports at 720P/30Hz resolution and (40) continuous presence ports at 480P/30Hz resolution. B.
INFORMATION TECHNOLOGY. Revised May 07. Home Networking Guide
INFORMATION TECHNOLOGY Revised May 07 Home Networking Guide Contents Introduction... 3 Intent... 3 Disclaimer... 3 Rexnord Support limitations... 3 Remotely Connecting to the Rexnord Data Network... 3
WLAN Security Networking with Confidence
WLAN Security Networking with Confidence Introduction So you ve just installed a new wireless local area network (WLAN) in your small business or home. The access point is on and connected, the client
EAGLE EYE IP TAP. 1. Introduction
1. Introduction The Eagle Eye - IP tap is a passive IP network application platform for lawful interception and network monitoring. Designed to be used in distributed surveillance environments, the Eagle
Network Configuration Settings
Network Configuration Settings Many small businesses already have an existing firewall device for their local network when they purchase Microsoft Windows Small Business Server 2003. Often, these devices
SSL Guide. (Secure Socket Layer)
SSL Guide (Secure Socket Layer) To find basic information about network and advanced network features of your Brother machine: uu Network User's Guide. To download the latest manual, please visit the Brother
Zarząd (7 osób) F inanse (13 osób) M arketing (7 osób) S przedaż (16 osób) K adry (15 osób)
QUESTION NO: 8 David, your TestKing trainee, asks you about basic characteristics of switches and hubs for network connectivity. What should you tell him? A. Switches take less time to process frames than
Lab VI Capturing and monitoring the network traffic
Lab VI Capturing and monitoring the network traffic 1. Goals To gain general knowledge about the network analyzers and to understand their utility To learn how to use network traffic analyzer tools (Wireshark)
Configuring the WT-4 for Upload to a Computer (Ad-hoc Mode)
En Configuring the WT-4 for Upload to a Computer (Ad-hoc Mode) Windows XP This document provides basic instructions on configuring the WT-4 wireless transmitter and a Windows XP Professional SP2 computer
WiFi Security Assessments
WiFi Security Assessments Robert Dooling Dooling Information Security Defenders (DISD) December, 2009 This work is licensed under a Creative Commons Attribution 3.0 Unported License. Table of Contents
1. LAB SNIFFING LAB ID: 10
H E R A LAB ID: 10 SNIFFING Sniffing in a switched network ARP Poisoning Analyzing a network traffic Extracting files from a network trace Stealing credentials Mapping/exploring network resources 1. LAB
Network Security. Vorlesung Kommunikation und Netze SS 10 E. Nett
Network Security Internet not originally designed with (much) security in mind original vision: a group of mutually trusting users attached to a transparent network Security considerations in all layers!
Mobile Devices: Server and Management Lesson 05 Service Discovery
Mobile Devices: Server and Management Lesson 05 Service Discovery Oxford University Press 2007. All rights reserved. 1 Service discovery An adaptable middleware in a device (or a mobile computing system)
CT522-128 LANforge WiFIRE Chromebook 802.11a/b/g/n WiFi Traffic Generator with 128 Virtual STA Interfaces
1 of 8 Network Testing and Emulation Solutions http://www.candelatech.com sales@candelatech.com +1 360 380 1618 [PST, GMT -8] CT522-128 LANforge WiFIRE Chromebook 802.11a/b/g/n WiFi Traffic Generator with
Movie Cube. User s Guide to Wireless Function
Movie Cube User s Guide to Wireless Function Table of Contents 1. WLAN USB Adapter Connection...3 2. Wireless Setup...4 2.1 Infrastructure (AP)...5 2.2 Peer to Peer (Ad Hoc)...7 2.3 Settings for PC...8
My FreeScan Vulnerabilities Report
Page 1 of 6 My FreeScan Vulnerabilities Report Print Help For 66.40.6.179 on Feb 07, 008 Thank you for trying FreeScan. Below you'll find the complete results of your scan, including whether or not the
Access the GV-IP Camera through a broadband modem
Access the GV-IP Camera through a broadband modem Applied to All GV-IP Cameras Article ID: GV15-12-03-26 Release Date: 03/26/2012 Introduction The document introduces how to connect your GV-IP Camera to
Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation
Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation Nokia E70 Configuring connection settings Nokia E70 Configuring connection settings Legal Notice Copyright Nokia 2006. All
Chapter 8 Network Security
[Computer networking, 5 th ed., Kurose] Chapter 8 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message integrity 84Securing 8.4 e-mail 8.5 Securing TCP connections: SSL 8.6 Network
Some Notes on Web Application Firewalls
Some Notes on Web Application Firewalls or Why You still Get Owned #whoami Member of Application Security Team, ERNW GmbH Contact: ERNW GmbH Frank Block Breslauer Str. 28 69124 Heidelberg Email: fblock@ernw.de
Lab 9.1.1 Organizing CCENT Objectives by OSI Layer
Lab 9.1.1 Organizing CCENT Objectives by OSI Layer Objectives Organize the CCENT objectives by which layer or layers they address. Background / Preparation In this lab, you associate the objectives of
GW-300NAS. Giga WAN Port. Giga LAN Port. Wireless 2T2R 300Mbps Giga NAS Router 2T2R. Mbps. 802.11 Green Router. IPTV Pass- Through
GW-300NAS Wireless 2T2R 300Mbps NAS Router T he GW-300NAS is the Wireless 2T2R 300Mbps NAS Router. This product is specifically designed for those who need to have the file sharing and P2P download services
Configuring the WT-4 for Upload to a Computer (Infrastructure Mode)
Page 1 of 25 Configuring the WT-4 for Upload to a Computer (Infrastructure Mode) Windows 7 Configuring the WT-4 for Upload to a Computer (Infrastructure Mode) This document provides basic instructions
Chapter 6 Using Network Monitoring Tools
Chapter 6 Using Network Monitoring Tools This chapter describes how to use the maintenance features of your Wireless-G Router Model WGR614v9. You can access these features by selecting the items under
Amcrest 960H DVR Quick Start Guide
Amcrest 960H DVR Quick Start Guide Welcome Thank you for purchasing our Amcrest 960H DVR! This quick start guide will help you become familiar with our DVR in a very short time. Before installation and
Session Hijacking Exploiting TCP, UDP and HTTP Sessions
Session Hijacking Exploiting TCP, UDP and HTTP Sessions Shray Kapoor shray.kapoor@gmail.com Preface With the emerging fields in e-commerce, financial and identity information are at a higher risk of being
Chapter 2 Configuring Your Wireless Network and Security Settings
Chapter 2 Configuring Your Wireless Network and Security Settings This chapter describes how to configure the wireless features of your DG834N RangeMax TM NEXT Wireless ADSL2+ Modem Router. For a wireless
Nokia E61i Configuring connection settings
Nokia E61i Configuring connection settings Nokia E61i Configuring connection settings Legal Notice Copyright Nokia 2007. All rights reserved. Reproduction, transfer, distribution or storage of part or
INTERNATIONAL JOURNAL OF PURE AND APPLIED RESEARCH IN ENGINEERING AND TECHNOLOGY
INTERNATIONAL JOURNAL OF PURE AND APPLIED RESEARCH IN ENGINEERING AND TECHNOLOGY A PATH FOR HORIZING YOUR INNOVATIVE WORK PACKET SNIFFING MS. SONALI A. KARALE 1, MS. PUNAM P. HARKUT 2 HVPM COET Amravati.
Ethernet. Ethernet. Network Devices
Ethernet Babak Kia Adjunct Professor Boston University College of Engineering ENG SC757 - Advanced Microprocessor Design Ethernet Ethernet is a term used to refer to a diverse set of frame based networking
Connecting to and Setting Up a Network
Chapter 9 Connecting to and Setting Up a Network Reviewing the Basics 1. How many bits are in a MAC address? 48 bits 2. How many bits are in an IPv4 IP address? In an IPv6 IP address? 32 bits, 128 bits
A Research Study on Packet Sniffing Tool TCPDUMP
A Research Study on Packet Sniffing Tool TCPDUMP ANSHUL GUPTA SURESH GYAN VIHAR UNIVERSITY, INDIA ABSTRACT Packet sniffer is a technique of monitoring every packet that crosses the network. By using this
VMDK Has Left the Building
VMDK Has Left the Building Attacking Cloud Infrastructures by Malicious VMDK Files Matthias Luft, Daniel Mende, Enno Rey, Pascal Turbing {mluft,dmende,erey,pturbing}@ernw.de 5/25/2012 ERNW GmbH Carl-Bosch-Str.
COPY EOS 70D (W) Wi-Fi Function Instruction Manual INSTRUCTION MANUAL
EOS 70D (W) Wi-Fi Function Instruction Manual E INSTRUCTION MANUAL What You Can Do Using the Wireless LAN Functions This camera s wireless LAN functions let you perform a range of tasks wirelessly, from
1 Introduction: Network Applications
1 Introduction: Network Applications Some Network Apps E-mail Web Instant messaging Remote login P2P file sharing Multi-user network games Streaming stored video clips Internet telephone Real-time video
Wireless File Transmitter WFT-E6 COPY
Wireless File Transmitter WFT-E6 To comply with local radio wave regulations, Canon offers five region-specific versions of the transmitter (WFT-E6A, E6B, E6C, E6D, and E6E) in various areas around the
Step-by-Step Setup Guide Wireless File Transmitter
EOS Step-by-Step Setup Guide Wireless File Transmitter EOS UTility Mode Infrastructure or Ad Hoc Networks Mac OS X 10.5-10.6 2012 Canon U.S.A., Inc. All Rights Reserved. Reproduction in whole or in part
COMPUTER NETWORK TECHNOLOGY (300)
Page 1 of 10 Contestant Number: Time: Rank: COMPUTER NETWORK TECHNOLOGY (300) REGIONAL 2014 TOTAL POINTS (500) Failure to adhere to any of the following rules will result in disqualification: 1. Contestant
ADDENDUM 12 TO APPENDIX 8 TO SCHEDULE 3.3
ADDENDUM 12 TO APPENDIX 8 TO SCHEDULE 3.3 TO THE Overview EXHIBIT T to Amendment No. 60 Secure Wireless Network Services are based on the IEEE 802.11 set of standards and meet the Commonwealth of Virginia
12/3/08. Security in Wireless LANs and Mobile Networks. Wireless Magnifies Exposure Vulnerability. Mobility Makes it Difficult to Establish Trust
Security in Wireless LANs and Mobile Networks Wireless Magnifies Exposure Vulnerability Information going across the wireless link is exposed to anyone within radio range RF may extend beyond a room or
Computer Networks CCNA Module 1
Chapter 1: Quiz 1 Q1: Which statement describes a network that supports QoS? The fewest possible devices are affected by a failure. The network should be able to expand to keep up with user demand. The
Bit Chat: A Peer-to-Peer Instant Messenger
Bit Chat: A Peer-to-Peer Instant Messenger Shreyas Zare shreyas@technitium.com https://technitium.com December 20, 2015 Abstract. Bit Chat is a peer-to-peer instant messaging concept, allowing one-to-one
Chapter 4 Virtual Private Networking
Chapter 4 Virtual Private Networking This chapter describes how to use the virtual private networking (VPN) features of the FVL328 Firewall. VPN tunnels provide secure, encrypted communications between
Product Specifications
Product Specifications IWE1700-A Outdoor Wireless Access Point Pro/Advanced Version: 1.00 Last Updated: 3/11/2005 InterEpoch Technology, Inc. 7F., No.3, Alley 6, Lane 235, Pao-Chiao Rd., Hsin-Tien City,
DATA SECURITY 1/12. Copyright Nokia Corporation 2002. All rights reserved. Ver. 1.0
DATA SECURITY 1/12 Copyright Nokia Corporation 2002. All rights reserved. Ver. 1.0 Contents 1. INTRODUCTION... 3 2. REMOTE ACCESS ARCHITECTURES... 3 2.1 DIAL-UP MODEM ACCESS... 3 2.2 SECURE INTERNET ACCESS
Configuring the WT-4 for Upload to a Computer (Infrastructure Mode)
En Configuring the WT-4 for Upload to a Computer (Infrastructure Mode) Windows XP This document provides basic instructions on configuring the WT-4 wireless transmitter and a Windows XP Professional SP2
CCNA R&S: Introduction to Networks. Chapter 5: Ethernet
CCNA R&S: Introduction to Networks Chapter 5: Ethernet 5.0.1.1 Introduction The OSI physical layer provides the means to transport the bits that make up a data link layer frame across the network media.
Configure WorkGroup Bridge on the WAP131 Access Point
Article ID: 5036 Configure WorkGroup Bridge on the WAP131 Access Point Objective The Workgroup Bridge feature enables the Wireless Access Point (WAP) to bridge traffic between a remote client and the wireless
Amati.linea Desktop Streaming Player with amplifier
Embedded Systems SIA, VAT No LV40003411103 47. Katolu str., Riga, LV 1003, LATVIA Phone: +371 67648888, fax: +371 67205036, e-mail: sales@openrb.com Amati.linea Desktop Streaming Player with amplifier
BASIC INSTRUCTIONS TO CONFIGURE ZYXEL P8701T CPE USING THE WEB INTERFACE
BASIC INSTRUCTIONS TO CONFIGURE ZYXEL P8701T CPE USING THE WEB INTERFACE 12/11/2012 Index 1 INTRODUCTION... 1-1 2 FACTORY DEFAULT SETTINGS... 2-1 3 CPE BASIC OPERATIONS... 3-1 3.1 PASSWORD MODIFICATION...
LESSON 3.6. 98-366 Networking Fundamentals. Understand TCP/IP
Understand TCP/IP Lesson Overview In this lesson, you will learn about: TCP/IP Tracert Telnet Netstat Reserved addresses Local loopback IP Ping Pathping Ipconfig Protocols Anticipatory Set Experiment with
Wireless Robust Security Networks: Keeping the Bad Guys Out with 802.11i (WPA2)
Wireless Robust Security Networks: Keeping the Bad Guys Out with 802.11i (WPA2) SUNY Technology Conference June 21, 2011 Bill Kramp FLCC Network Administrator Copyright 2011 William D. Kramp All Rights
Addonics T E C H N O L O G I E S. NAS Adapter. Model: NASU2. 1.0 Key Features
1.0 Key Features Addonics T E C H N O L O G I E S NAS Adapter Model: NASU2 User Manual Convert any USB 2.0 / 1.1 mass storage device into a Network Attached Storage device Great for adding Addonics Storage
1 Data information is sent onto the network cable using which of the following? A Communication protocol B Data packet
Review questions 1 Data information is sent onto the network cable using which of the following? A Communication protocol B Data packet C Media access method D Packages 2 To which TCP/IP architecture layer
Installing Certificates on Spectralink 8400 Handsets
Introduction For the purposes of this document we will be showing you how to load certificates onto the Spectralink wireless telephone in a couple of different ways. We will start with the preferred method,
Wireless Security: Secure and Public Networks Kory Kirk
Wireless Security: Secure and Public Networks Kory Kirk Villanova University Computer Science kory.kirk@villanova.edu www.korykirk.com/ Abstract Due to the increasing amount of wireless access points that