1. 1 Wireless Hacking Joffrey Czarny, SRC TELiNDUS jczarny@src.telindus.com State of the Art Wireless Hacking Workshop

2. 2 State of the Art Wireless Hacking 14/15.10.2005 Agenda > Wireless tools > LIVE Demos > Questions & Answers

3. 3 State of the Art Wireless Hacking 14/15.10.2005 Wireless tools >Wardriving tools >Traffic analyzer >WEP keys cracker >WPA Pre-shared keys cracker

4. 4 State of the Art Wireless Hacking 14/15.10.2005 Wireless tools > Wardriving tools: >Active Detection : Netstumbler >Passive Detection : Kismet; Dstumbler; Airsnort… > Traffic analyzer: Airtraf >WEP keys cracker: Airsnort; Aircrack; wepcrack Dwepcrack… >WPA Pre-shared keys cracker : cowpatty, Aircrack

5. 5 State of the Art Wireless Hacking 14/15.10.2005 Wardriving tools

6. 6 State of the Art Wireless Hacking 14/15.10.2005 Wardriving tools >Passive detection: Listening to all wireless traffic and extract information from packets obtained. >Active detection: Sending wireless probe requests and analyze the network answers.

7. 7 State of the Art Wireless Hacking 14/15.10.2005 Network Stumbler ACTIVE DETECTION

8. 8 State of the Art Wireless Hacking 14/15.10.2005 Kismet PASSIVE DETECTION

9. 9 State of the Art Wireless Hacking 14/15.10.2005 Dstumbler BSD_airtools PASSIVE DETECTION

10. 10 State of the Art Wireless Hacking 14/15.10.2005 Traffic analyzer

11. 11 State of the Art Wireless Hacking 14/15.10.2005 Traffic analyzer >Airtraf is a Wireless traffic analyzer >It is possible to: >Detect Wireless networks >Identify Access Points and clients >Analyze TCP connections >Generate statistics from protocol and users >Bandwidth use

12. 12 State of the Art Wireless Hacking 14/15.10.2005 Airtraf

13. 13 State of the Art Wireless Hacking 14/15.10.2005 WEP keys cracker

14. 14 State of the Art Wireless Hacking 14/15.10.2005 WEP keys cracker > Statistic attacks on weak initialization vector value (IV ) >Airsnort >Aircrack >Wepcrack ( perl script ) >Dwepdump & Dwepcrack bsd_airtools

15. 15 State of the Art Wireless Hacking 14/15.10.2005 WEP keys cracker >Bruteforce or dictionary attacks: >weplab >wepdecrypt

16. 16 State of the Art Wireless Hacking 14/15.10.2005 WPA Pre-shared keys cracker

17. 17 State of the Art Wireless Hacking 14/15.10.2005 WPA Pre-shared keys cracker >Dictionary attacks >Aircrack (release 2.2) >Cowpatty

18. 18 State of the Art Wireless Hacking 14/15.10.2005 LIVE Demos  Wardriving Wardriving  WEP keys cracker WEP keys cracker  WPA Pre-shared keys cracker WPA Pre-shared keys cracker  FakeAP & Bluetooth attack (if enough time) FakeAP & Bluetooth attack (if enough time) > << >>

19. 19 State of the Art Wireless Hacking 14/15.10.2005 Questions & Answers

20. 20 State of the Art Wireless Hacking 14/15.10.2005 Additional Resources >NetStumbler > www.netstumbler.comwww.netstumbler.com >Kismet > www.kismetwireless.net www.kismetwireless.net >Bsd_airtools > www.dachb0den.com/projects/bsd-airtools.html www.dachb0den.com/projects/bsd-airtools.html >Airtraf > airtraf.sourceforge.net airtraf.sourceforge.net >Airsnort > airsnort.shmoo.com airsnort.shmoo.com >Aircrack > www.cr0.net:8040/code/network/aircrack/www.cr0.net:8040/code/network/aircrack/ >Weplab > weplab.sourceforge.netweplab.sourceforge.net >Wepdecrypt > wepdecrypt.sourceforge.netwepdecrypt.sourceforge.net >Cowpatty > new.remote-exploit.org/index.php/Codes_mainnew.remote-exploit.org/index.php/Codes_main >Void11 > www.wlsec.net/void11www.wlsec.net/void11

21. 21 Thank you for your attention Joffrey Czarny jczarny@src.telindus.com