Introduction to WiFi security and Aircrack-ng. Thomas d Otreppe, Author of Aircrack-ng
|
|
|
- Osborne Goodwin
- 7 years ago
- Views:
Transcription
1 Introduction to WiFi security and Aircrack-ng Thomas d Otreppe, Author of Aircrack-ng 1
2 ~# whoami Author of Aircrack-ng and OpenWIPS-ng Work at NEK Advanced Securities Group 2
3 Agenda IEEE Wifi Networks Wireless Frames Network interaction Choose hardware Aircrack-ng suite 3
4 IEEE Institute of Electrical and Electronics Engineers Leading authority Split in committees and working groups 802 committee: Network related norms.11 working group: Wireless LAN Texts available for download 4
5 Protocols Lots of them Main protocols: a/b/g/n/ac i 5
6 Standard released in 1997 Rates: 1-2Mbit Infrared/Radio (DSSS/FHSS) CSMA/CA 6
7 802.11b Amendment CCK coding New rates: 5.5 and 11Mbit 2.4GHz ISM band 14 overlapping channels 22MHz channels 7
8 b (2)
9 802.11a 5GHz band More expensive => less crowded More than 14 channels (no overlap) OFDM Max rate: 54Mbit 9
10 802.11g ~= a on 2.4GHz Backward compatible with b 10
11 802.11n Work started in 2004 Final: September 2009 Single user MIMO 2.4GHz and 5GHz 40/80MHz channels MCS rates - Greenfield mode 11
12 n (2)
13 802.11ac Ran out of single letters, hence why 2 letters First draft: January GHz only Multi user MIMO Different MCS rates Up to 1Gbit/s+/user 80/160MHz channels 13
14 ac MCS rates 1x1
15 Networks 3 main modes of wireless operations Infrastructure WDS Ad Hoc Monitor Mode 15
16 Networks - Infrastructure
17 Networks - WDS
18 Networks Ad Hoc
19 Frames Frame format 3 Types of frames Management Control Data 19
20 Frame
21 Frame ToDS/FromDS fields ToDS FromDS Address 1 Address 2 Address 3 Address DA SA BSSID 0 1 DA BSSID SA 1 0 BSSID SA DA 1 1 RA TA DA SA DA: Des.na.on Address RA: Recipient Address SA: Source Address TA: Transmi:er Address BSSID: Basic Service Set Iden.fier MAC of the Access Point 21
22 Frames Management Frames Type Subtype Meaning 0 0 Associa.on Request 0 1 Associa.on Response 0 2 Reassocia.on Request 0 3 Reassoca.on Response 0 4 Probe Request 0 5 Probe Response 0 6 Measurement Pilot 0 7 Reserved 22
23 Frames Management Frames (2) Type Subtype Meaning 0 8 Beacon 0 9 ATIM 0 10 Disassocia.on 0 11 Authen.ca.on 0 12 Deauthen.ca.on 0 13 Ac.on 0 14 Ac.on No ACK 0 15 Reserved 23
24 Frames Control Frames Type Subtype Meaning Reserved 1 7 Control Wrapper 1 8 Block ACK request 1 9 Block ACK 1 10 PS Poll 1 11 RTS 1 12 CTS 1 13 ACK 1 14 CF End 1 15 CF End + CF ACK 24
25 Frames Data Frames Type Subtype Meaning 2 0 Data 2 1 Data + CF ACK 2 2 Data + CF Poll 2 3 Data + CF ACK + CF Poll 2 4 Null Func.on (no data) 2 5 CF ACK (no data) 2 6 CF Poll (no data) 2 7 CF ACK + CF Poll (no data) 25
26 Frames Data Frames (2) Type Subtype Meaning 2 8 QoS data 2 9 QoS data + CF ACK 2 10 QoS data + CF Poll 2 11 QoS data + CF ACK + CF Poll 2 12 QoS Null (no data) 2 13 Reserved 2 14 QoS CF Poll (no data) 2 15 QoS CF ACK (no data) 26
27 Network interaction Connection to a network Open networks WEP networks WPA networks 27
28 28 Network interaction
29 Network interaction Open Networks Network_Interaction.pcap 29
30 Network Interaction - WEP Wired Equivalent Privacy RC4 24 bit Initialization Vector Key Scheduling Algorithm Pseudo Random Generation Algorithm CRC32 30
31 31 Network Interaction WEP - Encrypt
32 32 Network Interaction WEP - Decrypt
33 33 Network Interaction WEP
34 Network Interaction WPA IEEE created i working group when WEP flaws discovered 2 Link layer protocols TKIP -> WPA1 CCMP -> WPA2 2 flavors Personal: PSK Enterprise 34
35 Network Interaction WPA WPA 1 Based on 3 rd draft of i Uses TKIP Backward compatible with old hardware WPA i Uses CCMP (AES) Not compatible with old hardware 35
36 36 Network Interaction WPA PSK
37 37 Network Interaction WPA Authentication
38 38 Network Interaction WPA GTK
39 Network Interaction WPA PTK Construction 39
40 Network Interaction WPA Encryption and data integrity TKIP: MIC + ICV CCMP MIC 40
41 Choosing hardware Wireless adapter Antenna Omni vs directional Antenna pattern Some math 41
42 Choose a card Recommended chipsets Atheros (Internal/PCI/Cardbus/Expresscard) Realtek 8187 Ralink (802.11n) Better if with an antenna connector How to find the chipset? Sometimes advertised Run Linux and use airmon-ng/dmesg/lspci/lsusb Through Windows driver 42
43 Choose an antenna Omni/directional Bigger!= Better Different gain = different RF propagation Omnidirectional: Radiate in all directions, like a light bulb Directional: Radiate in a single direction, like a camera zoom 43
44 44 Choose an antenna Omnidirectional
45 45 Choose an antenna Omnidirectional (2)
46 46 Choose an antenna Omnidirectional (3)
47 47 Choose an antenna Directional
48 48 Choose an antenna Directional (2)
49 Choose an antenna - Math db measures signal against normalized value: 1mW db power = 10 * log (signal / reference) How much db is 100mW? 10* log(100mw/1mw) = 20dBm 49
50 Choose an antenna dbm - mw A 3dB increase = 2 times the power dbm mw
51 Choose an antenna Cables/connectors Cables & connectors add loss If broken, even more Adapters: ~0.5db Cables: depends on thickness 51
52 Choose an antenna - Exercise Example with an antenna and then add a cable (real values) Alfa AWUS036H: 500mW Antenna: 5dB Cable: RG58, 2 meters (~1dB/meter) 52
53 Aircrack-ng suite What is it? Different tools Installation Drivers installation 53
54 Aircrack-ng suite What is it? Aircrack-ng is an WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools. In fact, Aircrack-ng is a set of tools for auditing wireless networks. Lots of scripts use it Important to know the tools to correctly use the scripts 54
55 55 Airmon-ng
56 56 Airodump-ng
57 57 Aireplay-ng
58 Packetforge-ng Generates WEP encrypted frame (ping/arp/ ) Requires keystream (XOR file) 58
59 59 Aircrack-ng
60 60 Airbase-ng
61 Airdecap-ng Decrypt captures (WEP/WPA) Confirm key/passphrase 61
62 Other tools Airolib-ng Airtun-ng Ivstools Etc Scripts Airgraph-ng Airoscript-ng Etc 62
63 Aircrack-ng - Installation Compilation of stable or latest devel is the same Requirements: Gcc/make: build-essential OpenSSL development: libssl-dev or openssl-dev Optional: SQLite development package 63
64 Aircrack-ng Installation (2) make && make install Options: unstable: easside-ng, tkiptun-ng, etc: sqlite: Airolib-ng Can be combined: make sqlite=true unstable=true make sqlite=true unstable=true install 64
65 Aircrack-ng Compat-wireless Up to date wireless drivers for stable kernels No need to patch it anymore Most cases: Latest version I ve heard funny names for it ;) Compact wireless Combat wireless 65
66 Aircrack-ng Compat-wireless (2) Requires Kernel headers/sources Gcc/make Download latest stable Two step installation process 1. make 2. make install Sometimes install firmware 66
67 Break 15 minutes break 67
68 Exercises WEP With client Without client WPA With client Without AP 68
69 Exercises Important notes Kill network managers/other software using the card to avoid issues Target: ESSID: aircrackng 69
70 Exercise WEP Cracking With client 1. Put the card in monitor mode 2. Identify network 3. Record traffic on fixed channel 4. Deauth client Will generate ARP ARP will be replayed 5. Crack capture file 70
71 Exercise WEP Cracking Without client 1. Put the card in monitor mode 2. Identify network 3. Record traffic on fixed channel 4. Fake client Fake authentication Several options ARP Replay Interactive frame replay Chopchop Fragmentation 5. Crack capture file 71
72 Exercise WPA Cracking Hard and easy to crack Easy: just get the handshake Hard: Need to be close to target(s) Passphrase length: 8-63 chars No real client => No handshake => No cracking 72
73 Exercise WPA Cracking With AP 1. Put the card in monitor mode 2. Identify network 3. Deauth client or wait for connection 4. Crack the capture 73
74 Exercise WPA Cracking Without AP 1. Put the card in monitor mode 2. Identify client through probes 3. Start airbase-ng in WPA mode 4. Crack capture file 74
75 75
76 Links - Contact Learn more: day DerbyCon: Wireless Networks, Matthew Gast Contact: tdotreppe@aircrack-ng.org thomas.dotreppe@nekasg.com Business cards are on the desk 76
WEP Overview 1/2. and encryption mechanisms Now deprecated. Shared key Open key (the client will authenticate always) Shared key authentication
WLAN Security WEP Overview 1/2 WEP, Wired Equivalent Privacy Introduced in 1999 to provide confidentiality, authentication and integrity Includes weak authentication Shared key Open key (the client will
Wifi Penetration. Wireless Communication and Computer/Network Forensics
Wifi Penetration Wireless Communication and Computer/Network Forensics Terms Skiddy(Derogatory): Variant of "Script Kiddy". Hacker(Derogatory):One who builds something. Cracker(Derogatory):One who breaks
MITM Man in the Middle
MITM Man in the Middle Wifi Packet Capturing and Session Hijacking using Wireshark Introduction The main Objective of this Attack is to make a Fake Access point and send the fake ARP Packets on same Wi-Fi
Wireless LAN Pen-Testing. Part I
Wireless LAN Pen-Testing Part I To know your Enemy, you must become your Enemy (Sun Tzu, 600 BC) Georg Penn 23.03.2012 Motivation Read manuals, documentation, standards Check sources for their reliability,
Offensive Security. Wireless Attacks - WiFu
Offensive Security Wireless Attacks - WiFu v. 3.0 Mati Aharoni Devon Kearns Thomas d Otreppe de Bouvette Course Overview The wireless industry continues to grow in leaps and bounds with more and more gadgets
WEP WPA WPS :: INDEX : Introduction :
WEP WPA WPS With clients Without clients :: INDEX : Introduction > Overview > Terms & Definitions [ Step 1 ] : Configuring the network interface [ Step 2 ] : Collecting the network info [ Step 3 ] : Capturing
Security+ Guide to Network Security Fundamentals, Third Edition. Chapter 6. Wireless Network Security
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 6 Wireless Network Security Objectives Overview of IEEE 802.11 wireless security Define vulnerabilities of Open System Authentication,
Chapter 6 CDMA/802.11i
Chapter 6 CDMA/802.11i IC322 Fall 2014 Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 Some material copyright 1996-2012 J.F Kurose and K.W. Ross,
802.11 Security (WEP, WPA\WPA2) 19/05/2009. Giulio Rossetti Unipi Giulio.Rossetti@gmail.com
802.11 Security (WEP, WPA\WPA2) 19/05/2009 Giulio Rossetti Unipi Giulio.Rossetti@gmail.com 802.11 Security Standard: WEP Wired Equivalent Privacy The packets are encrypted, before sent, with a Secret Key
ALEXANDRE BORGES BLOG
Cracking WEP Networks Author: Alexandre Borges Date: FEB/20/2014 Revision: 1.0 ALEXANDRE BORGES BLOG When I ve published the first document about Cracking Wireless Networks (http://alexandreborgesbrazil.files.wordpress.com/2014/02/cracking_wireless.pdf)
WiFi. Is for Wireless Fidelity Or IEEE 802.11 Standard By Greg Goldman. WiFi 1
WiFi Is for Wireless Fidelity Or IEEE 802.11 Standard By Greg Goldman WiFi 1 What is the goal of 802.11 standard? To develop a Medium Access Control (MAC) and Physical Layer (PHY) specification for wireless
Vulnerabilities of Wireless Security protocols (WEP and WPA2)
Vulnerabilities of Wireless Security protocols (WEP and WPA2) Vishal Kumkar, Akhil Tiwari, Pawan Tiwari, Ashish Gupta, Seema Shrawne Abstract - Wirelesses Local Area Networks (WLANs) have become more prevalent
Introduction to WiFi Security. Frank Sweetser WPI Network Operations and Security fs@wpi.edu
Introduction to WiFi Security Frank Sweetser WPI Network Operations and Security fs@wpi.edu Why should I care? Or, more formally what are the risks? Unauthorized connections Stealing bandwidth Attacks
WEP WPA WPS :: INDEX : Introduction :
WEP WPA WPS With clients Without clients :: INDEX : Introduction > Overview > Terms & Definitions [ Step 1 ] : Configuring the network interface [ Step 2 ] : Collecting the network info [ Step 3 ] : Capturing
IEEE 802.11 Technical Tutorial. Introduction. IEEE 802.11 Architecture
IEEE 802.11 Technical Tutorial Introduction The purpose of this document is to give technical readers a basic overview of the new 802.11 Standard, enabling them to understand the basic concepts, principle
ECB3500 2.4GHz Super G 108Mbps Access Point/Client Bridge/Repeater/WDS AP/
Wireless Long Range Multi-function 7+1 AP ECB3500 2.4GHz Super G 108Mbps Access Point/Client Bridge/Repeater/WDS AP/ EIRP up to 2000mW WDS Bridge/Client Router/AP Router ECB3500 is a powerful, enhanced,
Chapter 2 Wireless Networking Basics
Chapter 2 Wireless Networking Basics Wireless Networking Overview Some NETGEAR products conform to the Institute of Electrical and Electronics Engineers (IEEE) 802.11g standard for wireless LANs (WLANs).
EAP9550 11N Wall Mount Access Point / WDS AP / Universal Repeater
EAP9550 is a powerful and multi-functioned 11n Access Point and it can act three modes AP/WDS/Universal Repeater. Smoke detector appearance will minimize visibility. So this model can work properly at
ENHWI-N3. 802.11n Wireless Router
ENHWI-N3 802.11n Wireless Router Product Description Encore s ENHWI-N3 802.11n Wireless Router s 1T1R Wireless single chip can deliver up to 3x faster speed than of 802.11g devices. ENHWI-N3 supports home
CS 336/536 Computer Network Security. Summer Term 2010. Wi-Fi Protected Access (WPA) compiled by Anthony Barnard
CS 336/536 Computer Network Security Summer Term 2010 Wi-Fi Protected Access (WPA) compiled by Anthony Barnard 2 Wi-Fi Protected Access (WPA) These notes, intended to follow the previous handout IEEE802.11
Lab Exercise 802.11. Objective. Requirements. Step 1: Fetch a Trace
Lab Exercise 802.11 Objective To explore the physical layer, link layer, and management functions of 802.11. It is widely used to wireless connect mobile devices to the Internet, and covered in 4.4 of
A SURVEY OF WIRELESS NETWORK SECURITY PROTOCOLS
A SURVEY OF WIRELESS NETWORK SECURITY PROTOCOLS Jose Perez Texas A&M University Corpus Christi Email: jluisperez16@gmail.com Fax Number: (361) 825-2795 Faculty Advisor: Dr. Ahmed Mahdy, Texas A&M University
Symm ym e m t e r t ic i c cr c yptogr ypt aphy a Ex: RC4, AES 2
Wi-Fi Security FEUP>MIEIC>Mobile Communications Jaime Dias Symmetric cryptography Ex: RC4, AES 2 Digest (hash) Cryptography Input: variable length message Output: a fixed-length bit
LevelOne User Manual WPC-0600 N_One Wireless CardBus Adapter
LevelOne User Manual WPC-0600 N_One Wireless CardBus Adapter V2.0.0-0712 Safety FCC WARNING This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
Table of Contents. Cisco Wi Fi Protected Access 2 (WPA 2) Configuration Example
Table of Contents Wi Fi Protected Access 2 (WPA 2) Configuration Example...1 Document ID: 67134...1 Introduction...1 Prerequisites...1 Requirements...1 Components Used...2 Conventions...2 Background Information...2
White paper. Testing for Wi-Fi Protected Access (WPA) in WLAN Access Points. http://www.veryxtech.com
White paper Testing for Wi-Fi Protected Access (WPA) in WLAN Access Points http://www.veryxtech.com White Paper Abstract Background The vulnerabilities spotted in the Wired Equivalent Privacy (WEP) algorithm
UNIK4250 Security in Distributed Systems University of Oslo Spring 2012. Part 7 Wireless Network Security
UNIK4250 Security in Distributed Systems University of Oslo Spring 2012 Part 7 Wireless Network Security IEEE 802.11 IEEE 802 committee for LAN standards IEEE 802.11 formed in 1990 s charter to develop
Basic processes in IEEE802.11 networks
Module contents IEEE 802.11 Terminology IEEE 802.11 MAC Frames Basic processes in IEEE802.11 networks Configuration parameters.11 Architect. 1 IEEE 802.11 Terminology Station (STA) Architecture: Device
Lecture 17: 802.11 Wireless Networking"
Lecture 17: 802.11 Wireless Networking" CSE 222A: Computer Communication Networks Alex C. Snoeren Thanks: Lili Qiu, Nitin Vaidya Lecture 17 Overview" Project discussion Intro to 802.11 WiFi Jigsaw discussion
Cisco Aironet Wireless Bridges FAQ
Cisco Aironet Wireless Bridges FAQ Document ID: 16041 Contents Introduction What is the Cisco Aironet Wireless Bridge? What are the different platforms of wireless bridges that Cisco offers? Where can
Wireless security. Any station within range of the RF receives data Two security mechanism
802.11 Security Wireless security Any station within range of the RF receives data Two security mechanism A means to decide who or what can use a WLAN authentication A means to provide privacy for the
Wireless Networks. Welcome to Wireless
Wireless Networks 11/1/2010 Wireless Networks 1 Welcome to Wireless Radio waves No need to be physically plugged into the network Remote access Coverage Personal Area Network (PAN) Local Area Network (LAN)
The next generation of knowledge and expertise Wireless Security Basics
The next generation of knowledge and expertise Wireless Security Basics HTA Technology Security Consulting., 30 S. Wacker Dr, 22 nd Floor, Chicago, IL 60606, 708-862-6348 (voice), 708-868-2404 (fax), www.hta-inc.com
CS549: Cryptography and Network Security
CS549: Cryptography and Network Security by Xiang-Yang Li Department of Computer Science, IIT Cryptography and Network Security 1 Notice This lecture note (Cryptography and Network Security) is prepared
Security in IEEE 802.11 WLANs
Security in IEEE 802.11 WLANs 1 IEEE 802.11 Architecture Extended Service Set (ESS) Distribution System LAN Segment AP 3 AP 1 AP 2 MS MS Basic Service Set (BSS) Courtesy: Prashant Krishnamurthy, Univ Pittsburgh
Self Help Guide IMPORTANT! Securing Your Wireless Network. This Guide refers to the following Products: Please read the following carefully; Synopsis:
IMPORTANT! This Guide refers to the following Products: Securing Your Wireless Network Please read the following carefully; Synopsis: This Guide is designed to help you if you have a Wireless Network that
CS 356 Lecture 29 Wireless Security. Spring 2013
CS 356 Lecture 29 Wireless Security Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists Chapter
Wireless 802.11g CF Card User Manual
Wireless 802.11g CF Card User Manual Version 1.0 Copyright statement No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic,
CWNA Instructor Led Course Outline
CWNA Instructor Led Course Outline Enterprise Wi-Fi Administration, Outline v7.0 Introduction The Enterprise Wireless LAN Administration 7.1 course (which prepares students for the CWNA-106 exam), whether
An Experimental Study Analysis of Security Attacks at IEEE 802.11 Wireless Local Area Network
, pp. 9-18 http://dx.doi.org/10.14257/ijfgcn.2015.8.1.02 An Experimental Study Analysis of Security Attacks at IEEE 802.11 Wireless Local Area Network 1 Md Waliullah, 2 A B M Moniruzzaman and 3 Md. Sadekur
WiFi Security Assessments
WiFi Security Assessments Robert Dooling Dooling Information Security Defenders (DISD) December, 2009 This work is licensed under a Creative Commons Attribution 3.0 Unported License. Table of Contents
PENETRATION TESTING ON A WIRELESS NETWORK.
Bachelor s Thesis (TUAS) Degree Program: Information Technology Specialization: Internet Technology 2013 Gbolahan Ola PENETRATION TESTING ON A WIRELESS NETWORK. USING BACKTRACK 5 BACHELOR S THESIS ABSTRACT
IEEE 802 Protocol Layers. IEEE 802.11 Wireless LAN Standard. Protocol Architecture. Protocol Architecture. Separation of LLC and MAC.
IEEE 802.11 Wireless LAN Standard IEEE 802 Protocol Layers Chapter 14 Protocol Architecture Functions of physical layer: Encoding/decoding of signals Preamble generation/removal (for synchronization) Bit
Wiereless LAN 802.11
Tomasz Kurzawa Wiereless LAN 802.11 Introduction The 802.11 Architecture Channels and Associations The 802.11 MAC Protocol The 802.11 Frame Introduction Wireless LANs are most important access networks
The Wireless Network Road Trip
The Wireless Network Road Trip The Association Process To begin, you need a network. This lecture uses the common logical topology seen in Figure 9-1. As you can see, multiple wireless clients are in
Advanced Security Issues in Wireless Networks
Advanced Security Issues in Wireless Networks Seminar aus Netzwerke und Sicherheit Security Considerations in Interconnected Networks Alexander Krenhuber Andreas Niederschick 9. Januar 2009 Advanced Security
12/3/08. Security in Wireless LANs and Mobile Networks. Wireless Magnifies Exposure Vulnerability. Mobility Makes it Difficult to Establish Trust
Security in Wireless LANs and Mobile Networks Wireless Magnifies Exposure Vulnerability Information going across the wireless link is exposed to anyone within radio range RF may extend beyond a room or
2.4GHz 802.11n Outdoor CPE Model:WLAN-LCCPE28-1
2.4GHz 802.11n Outdoor CPE Model:WLAN-LCCPE28-1 Features IP55 Rated Enclosure IEEE 802.11b/g/n Compliant Low Power Consumption Access Point, Client, PxP Modes Selectable Bandwidth Settings: 20/40MHz Applications
Key Features. EnGenius Outdoor Base Station designs High Power, High Sensitivity and Strong Reliability Solutions under Harsh Environment.
802.11 b/g/n N300 Access Point Key Features IEEE 802.11 b/g/n compliant Up to 300Mbps (2.4GHz) Complaint with IEEE 802.3 at for PoE supported PoE injector with reset from remote-end Two Gigabit Ethernet
Diploma thesis Fachgebiet Theoretische Informatik
Diploma thesis Fachgebiet Theoretische Informatik Summer term 2007 Fachbereich Informatik TU Darmstadt Attacks on the WEP protocol Erik Tews e tews@cdc.informatik.tu-darmstadt.de Supervisor: Prof. Dr.
How To Analyze The Security On An Ipa Wireless Sensor Network
Throughput Analysis of WEP Security in Ad Hoc Sensor Networks Mohammad Saleh and Iyad Al Khatib iitc Stockholm, Sweden {mohsaleh, iyad}@iitc.se ABSTRACT This paper presents a performance investigation
Tube-U(G) Long-Range Outdoor IEEE 802.11g USB Adapter User s Guide
Tube-U(G) Long-Range Outdoor IEEE 802.11g USB Adapter User s Guide Alfa Network, Inc. Page 1 Table of Content Over view... 3 Unpacking information... 3 Introduction to the Tube-U(G) outdoor USB Adapter...
Authentication in WLAN
Authentication in WLAN Flaws in WEP (Wired Equivalent Privacy) Wi-Fi Protected Access (WPA) Based on draft 3 of the IEEE 802.11i. Provides stronger data encryption and user authentication (largely missing
Long-Range 500mW IEEE 802.11g Wireless USB Adapter. User's Guide
Long-Range 500mW IEEE 802.11g Wireless USB Adapter User's Guide TABLE OF CONTENTS OVERVIEW... 4 UNPACKING INFORMATION... 4 INTRODUCTION TO THE IEEE 802.11G WIRELESS USB ADAPTER... 5 Key Features...5 INSTALLATION
Chapter 7 Low-Speed Wireless Local Area Networks
Wireless# Guide to Wireless Communications 7-1 Chapter 7 Low-Speed Wireless Local Area Networks At a Glance Instructor s Manual Table of Contents Overview Objectives s Quick Quizzes Class Discussion Topics
Wireless Hacking Haifux. Wireless Hacking. Edri Guy. Mar 04,2013. See-Security. Mar 04 2013 Wireless Hacking - Haifux
Wireless Hacking Edri Guy Mar 04,2013 DISCLAIMER 1 The following discussion is for informational and education purpose only. 2 Hacking into private network without the written permission from the owner
WI-FI SECURITY: A LITERATURE REVIEW OF SECURITY IN WIRELESS NETWORK
IMPACT: International Journal of Research in Engineering & Technology (IMPACT: IJRET) ISSN(E): 2321-8843; ISSN(P): 2347-4599 Vol. 3, Issue 5, May 2015, 23-30 Impact Journals WI-FI SECURITY: A LITERATURE
Wireless Network Security. Pat Wilbur Wireless Networks March 30, 2007
Wireless Network Security Pat Wilbur Wireless Networks March 30, 2007 Types of Attacks Intrusion gain unauthorized access to a network in order to use the network or Internet connection Types of Attacks
WUA-0605 300Mbps Wireless USB Network Adapter
WUA-0605 300Mbps Wireless USB Network Adapter User Manual V1.0 Certification FCC CE FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
A Technical Tutorial on the IEEE 802.11 Protocol
A Technical Tutorial on the IEEE 802.11 Protocol By Pablo Brenner Director of Engineering copyright BreezeCOM 1997 Introduction The purpose of this document is to give technical readers a basic overview
Chapter 2 Wireless Settings and Security
Chapter 2 Wireless Settings and Security This chapter describes how to set up the wireless features of your WGT624 v4 wireless router. In planning your wireless network, select a location for the wireless
Wireless Networking Basics. NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA
Wireless Networking Basics NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA n/a October 2005 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR and Auto Uplink are trademarks
EWLEA92 802.11a/b/g/n WLAN MiniPCI Express card
Chipset Atheros AR9280 (Merlin) Standards IEEE 802.11a/b/g/n Draft 2.0 Dimensions Tx/Rx 29,9 x 26,7 x 4,4mm 2T2R MIMO Interface PCI Express mini card rev. 1.2 Europe: 2.4~2.483GHz,5.15~5.35, 5.47~5.725GHz
Lecture Objectives. Lecture 8 Mobile Networks: Security in Wireless LANs and Mobile Networks. Agenda. References
Lecture Objectives Wireless Networks and Mobile Systems Lecture 8 Mobile Networks: Security in Wireless LANs and Mobile Networks Introduce security vulnerabilities and defenses Describe security functions
... neither PCF nor CA used in practice
IEEE 802.11 MAC CSMA/CA with exponential backoff almost like CSMA/CD drop CD CSMA with explicit ACK frame added optional feature: CA (collision avoidance) Two modes for MAC operation: Distributed coordination
Wireless LAN Security Mechanisms
Wireless LAN Security Mechanisms Jingan Xu, Andreas Mitschele-Thiel Technical University of Ilmenau, Integrated Hard- and Software Systems Group jingan.xu@tu-ilmenau.de, mitsch@tu-ilmenau.de Abstract.
A6210 WiFi USB Adapter 802.11ac USB 3.0 Dual Band User Manual
802.11ac USB 3.0 Dual Band User Manual August 2014 202-11373-01 350 East Plumeria Drive San Jose, CA 95134 USA Support Thank you for selecting NETGEAR products. After installing your device, locate the
Journal of Mobile, Embedded and Distributed Systems, vol. I, no. 1, 2009 ISSN 2067 4074
Issues in WiFi Networks Nicolae TOMAI Faculty of Economic Informatics Department of IT&C Technologies Babes Bolyai Cluj-Napoca University, Romania tomai@econ.ubbcluj.ro Abstract: The paper has four sections.
Wireless Network Risks and Controls
Wireless Network Risks and Controls Offensive Security Tools, Techniques, and Defenses 22 January 2015 ISACA Phoenix Chapter Phoenix, AZ Presented by: Ruihai Fang Dan Petro Bishop Fox www.bishopfox.com
WPA Migration Mode: WEP is back to haunt you...
WPA Migration Mode: WEP is back to haunt you... Leandro Meiners (lmeiners@coresecurity / lmeiners@gmail.com) Diego Sor (dsor@coresecurity.com / diegos@gmail.com) July 2010 Abstract Cisco access points
802.11n a/b/g wifi 3x3 mini-pci module, MB82/AR9160+AR9106. Model: DNMA-83
802.11n a/b/g wifi 3x3 mini-pci module, MB82/AR9160+AR9106 Model: DNMA-83 DNMA-83 is a 802.11n a/b/g wifi 3x3 mini-pci module designed specifically to enable high-performance 3x3 MIMO access point (AP)
Cloud-based Wireless LAN for Enterprise, SMB, IT Service Providers and Carriers. Product Highlights. Relay2 Enterprise Access Point RA100 Datasheet
Cloud-based Wireless LAN for Enterprise, SMB, IT Service Providers and Carriers The Relay2 Smart Access Point (RA100) is an enterprise-class access point designed for deployment in high-density environments
HIGH POWER WIRELESS N MINI USB ADAPTER K-300MWUN USER S MANUAL
HIGH POWER WIRELESS N MINI USB ADAPTER K-300MWUN USER S MANUAL Introduction Thank you for your purchase of the Kozumi K-300MWUN High Power Wireless N Mini USB Adapter. Featuring wireless technology, this
Cryptanalysis of IEEE 802.11i TKIP
Cryptanalysis of IEEE 802.11i TKIP Finn Michael Halvorsen Olav Haugen Master of Science in Communication Technology Submission date: June 2009 Supervisor: Stig Frode Mjølsnes, ITEM Co-supervisor: Martin
USER GUIDE Cisco Small Business
USER GUIDE Cisco Small Business WBPN Wireless-N Bridge for Phone Adapters December 2011 Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries.
Wireless Technology Seminar
Wireless Technology Seminar Introduction Adam Worthington Network Consultant Adam.Worthington@euroele.com Wireless LAN Why? Flexible network access for your users? Guest internet access? VoWIP? RFID? Available
GTER 26 tudo o que você. quer saber sobre 802.11n
GTER 26 tudo o que você (não) quer saber sobre 802.11n Luiz Eduardo Dos Santos CISSP CWNE CEH GISP GCIH Sr. Systems & Security Engineer Americas hello agenda evolution of wi-fi what makes 11n what actually
running operation mode painless TECHNICAL SPECIFICATION WAN/LAN: One 10/100 Fast Ethernet RJ-45 WPS (WiFi Protected Setup) WAN (Internet connection)
PRODUCT DESCRIPTION ETR9350 is a 2T2R Wireless Single chip 11N Travel AP/Router that delivers up to 6x faster speeds than 802.11g devices. ETR9350 drives superior performance and unparalleled wireless
750Mbps 802.11ac Wireless Broadband Router
750Mbps 802.11ac Wireless Broadband Router IEEE Compliant Wireless LA & Wired LA Compliant with IEEE 802.11a/b/g/n/ac dual band (2.4G & 5G) wireless technology capable of up to 300 + 433Mbps data rate
802.11. Markku Renfors. Partly based on student presentation by: Lukasz Kondrad Tomasz Augustynowicz Jaroslaw Lacki Jakub Jakubiak
802.11 Markku Renfors Partly based on student presentation by: Lukasz Kondrad Tomasz Augustynowicz Jaroslaw Lacki Jakub Jakubiak Contents 802.11 Overview & Architecture 802.11 MAC 802.11 Overview and Architecture
Huawei WLAN Authentication and Encryption
Huawei WLAN Authentication and Encryption The Huawei integrated Wireless Local Area Network (WLAN) solution can provide all-round services for municipalities at various levels and enterprises and institutions
User s Manual. Wireless LAN Access Point. Model No.: SP918GK http://www.micronet.info
User s Manual Wireless LAN Access Point Model No.: SP918GK http://www.micronet.info Table of Contents Chapter 1 Introduction... 1 1.1 Package Contents... 2 1.2 Features... 2 1.3 Specifications... 2 1.4
Golden N Wireless Mini USB Adapter. Model # AWLL6075 User s Manual. Rev. 1.2
Golden N Wireless Mini USB Adapter Model # AWLL6075 User s Manual Rev. 1.2 Table of Contents 1. Introduction...2 1.1 Package Contents...2 1.2 Features...2 2. Install the Wireless Adapter...3 3. Connect
SSI. Commons Wireless Protocols WEP and WPA2. Bertil Maria Pires Marques. E-mail: pro09020@fe.up.pt Dez 2009. Dez 2009 1
SSI Commons Wireless Protocols WEP and WPA2 Bertil Maria Pires Marques E-mail: pro09020@fe.up.pt Dez 2009 Dez 2009 1 WEP -Wired Equivalent Privacy WEPisasecurityprotocol,specifiedintheIEEEWireless Fidelity
CSC574: Computer and Network Security
CSC574: Computer and Network Security Lecture 21 Prof. William Enck Spring 2016 (Derived from slides by Micah Sherr) Wireless Security Wireless makes network security much more difficult Wired: If Alice
Wireless Troubleshooting
Wireless Troubleshooting Applicable Version: 10.00 onwards Applicable Models: All WiFi Models - CR15wi, CR15wiNG, CR25wi, CR25wiNG, CR35wi, CR35wiNG Connectivity Issues with Cyberoam Inbuilt Access points
Concurrent 2.4 and 5 GHz Performance. Backward Compatible. Fast Roaming through 802.1X PMK Caching. Power over Ethernet Port. Secure Communications
High-Power Ceiling Mount Wireless AC1200 Dual-Band Gigabit PoE Access Point 300 Mbps Wireless N (2.4 GHz) + 867 Mbps Wireless AC (5 GHz), WDS, Wireless client isolation, 26 dbm Part No.: 525688 Add performance
IEEE 802.11a/ac/n/b/g Enterprise Access Points ECW5320 ECWO5320. Management Guide. www.edge-core.com. Software Release v2.0.0.1
IEEE 802.11a/ac/n/b/g Enterprise Access Points ECW5320 ECWO5320 Management Guide Software Release v2.0.0.1 www.edge-core.com Management Guide ECW5320 Indoor Enterprise Access Point IEEE 802.11a/ac/n/b/g
Multiple WiFi Clients on a Single Wireless Card
Multiple WiFi Clients on a Single Wireless Card Juan M Torrescusa Supervisor: Andrea Bittau April 27, 2006 This report is submitted as part requirement for the BSc Degree in Computer Science at University
Attacks against the WiFi protocols WEP and WPA
Attacks against the WiFi protocols WEP and WPA Matthieu Caneill Jean-Loup Gilis October - December 2010 Abstract Wireless networks are today an entire part of the Internet, and are often used by companies
S-38.2131/3133 Networking Technology, laboratory course A/B
A! Aalto University School of Electrical Engineering Department of Communications and Networking S-38.2131/3133 Networking Technology, laboratory course A/B Student edition Anni Matinlauri, 3.1.2007 Tuomas
Cisco Aironet 1130G Series IEEE 802.11g Access Point
Cisco Aironet 1130G Series IEEE 802.11g Access Point Low-profile business-class access point with integrated antennas for easy deployment in offices and similar RF environments Product Overview The Cisco
Wireless Network Standard and Guidelines
Wireless Network Standard and Guidelines Purpose The standard and guidelines listed in this document will ensure the uniformity of wireless network access points and provide guidance for monitoring, maintaining
Wi-Fish Finder: Who will bite the bait?
Wi-Fish Finder: Who will bite the bait? There is >50 % chance that your laptop will! Md Sohail Ahmad Prabhash Dhyani AirTight Networks www.airtightnetworks.com About the Speaker Last year brought to you
Section 1 Wireless Packet Captures & Connection Analysis- A Review
Section 1 Wireless Packet Captures & Connection Analysis- A Review Many of you will have already used many of these tools, or at least had some experience with them in previous CWNP or vendor Wireless
802.11 Wireless LAN Protocol CS 571 Fall 2006. 2006 Kenneth L. Calvert All rights reserved
802.11 Wireless LAN Protocol CS 571 Fall 2006 2006 Kenneth L. Calvert All rights reserved Wireless Channel Considerations Stations may move Changing propagation delays, signal strengths, etc. "Non-transitive"
OpenWIPS-ng A modular and Open source WIPS. Thomas d Otreppe, Author of Aircrack-ng
OpenWIPS-ng A modular and Open source WIPS Thomas d Otreppe, Author of Aircrack-ng 1 Agenda What is OpenWIPS-ng? Origin Architecture Internal design Release plan Demo ~# whoami Author of Aircrack-ng and
Attacking Automatic Wireless Network Selection. Dino A. Dai Zovi and Shane A. Macaulay {ddaizovi,smacaulay1}@bloomberg.com
Attacking Automatic Wireless Network Selection Dino A. Dai Zovi and Shane A. Macaulay {ddaizovi,smacaulay1}@bloomberg.com We made Slashdot! Hackers, Meet Microsoft "The random chatter of several hundred
TL-WN310G 54M Wireless CardBus Adapter
54M Wireless CardBus Adapter Rev: 1.0.1 1910010042 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and