Wireless Hacking

1
Wireless Hacking
State of the Art Wireless Hacking Workshop

• Joffrey Czarny, SRC TELiNDUS
• jczarny_at_src.telindus.com

2
Agenda
gt Wireless toolsgt LIVE Demos gt Questions
Answers
3
Wireless tools

• Wardriving tools
• Traffic analyzer
• WEP keys cracker
• WPA Pre-shared keys cracker

4
Wireless tools

• Wardriving tools
• Active Detection Netstumbler
• Passive Detection Kismet Dstumbler Airsnort
• Traffic analyzer Airtraf
• WEP keys cracker Airsnort Aircrack wepcrack
  Dwepcrack
• WPA Pre-shared keys cracker cowpatty, Aircrack

5
Wardriving tools
6
Wardriving tools

• Passive detection Listening to all wireless
  traffic and extract information from packets
  obtained.
• Active detection Sending wireless probe requests
  and analyze the network answers.

7
Network Stumbler
ACTIVE DETECTION
8
Kismet
PASSIVE DETECTION
9
Dstumbler BSD_airtools
PASSIVE DETECTION
10
Traffic analyzer
11
Traffic analyzer

• Airtraf is a Wireless traffic analyzer
• It is possible to
• Detect Wireless networks
• Identify Access Points and clients
• Analyze TCP connections
• Generate statistics from protocol and users
• Bandwidth use

12
Airtraf
13
WEP keys cracker
14
WEP keys cracker

• Statistic attacks on weak initialization vector
  value (IV )
• Airsnort
• Aircrack
• Wepcrack ( perl script )
• Dwepdump Dwepcrack bsd_airtools

15
WEP keys cracker

• Bruteforce or dictionary attacks
• weplab
• wepdecrypt

16
WPA Pre-shared keys cracker
17
WPA Pre-shared keys cracker

• Dictionary attacks
• Aircrack (release 2.2)
• Cowpatty

18
LIVE Demos

• Wardriving
• WEP keys cracker
• WPA Pre-shared keys cracker
• FakeAP Bluetooth attack (if enough time)

ltlt
gtgt
gt
19
Questions Answers
20
Additional Resources

• NetStumbler gt www.netstumbler.com
• Kismet gt www.kismetwireless.net
• Bsd_airtools gt www.dachb0den.com/projects/bsd-airt
  ools.html
• Airtraf gt airtraf.sourceforge.net
• Airsnort gt airsnort.shmoo.com
• Aircrack gt www.cr0.net8040/code/network/aircrack
  /
• Weplab gt weplab.sourceforge.net
• Wepdecrypt gt wepdecrypt.sourceforge.net
• Cowpatty gt new.remote-exploit.org/index.php/Codes_
  main
• Void11 gt www.wlsec.net/void11

21
Thank you for your attention
Joffrey Czarny jczarny_at_src.telindus.com