Wireless Network
Wi-Fi ==> Wireless Fidelity
1
| Made up of the word 'wireless' which means the use of waves instead of 'cables' for signal transfer.
|
Wi-Fi Direct
A peer-to-peer
is a wireless connections that allow two devices to establish a direct Wi-Fi connection without an intermediary wireless access point, router, or internet connection.
Wireless Network Security
- To protects a wireless network from unauthorized and malicious access attempts.
Wireless Security Protocol.
There are four wireless security protocols currently available.
1
2
3
4
| 1. Wired Equivalent Privacy (WEP)
2. Wi-Fi Protected Access (WPA)
3. Wi-Fi Protected Access 2 (WPA 2)
4. Wi-Fi Protected Access 3 (WPA 3) latest => with
|
Secure your organization wireless Network
1
2
3
4
| 1. Changing Default `password` and `SSID`
2. Enable the router’s firewall
3. Enable MAC address filtering
4. Disable remote administration
|
Wi-Fi Vulnerability.
The Ten Most Critical Wireless and Mobile Security Vulnerabilities
- Default Wi-Fi routers ==>
- Rogue Access Points ==> Fake Access Point
- Wireless Zero Configuration ==> Auto authentication to pre authenticted Wi-Fi network. Attacker can intrecept the SSID values
- Bluetooth exploits ==> BlueSnarfing: Secretry access pictures, calenders, Phone contacts lists. ==> BlueBugging: send SMS messages from a remote vulnerable phone spoofing the sender. ==> BlueJacking: By renaming the name of phone, the hacker can trick victims into accepting bluetooth connections. ==> BlueTooth DoS attack: Invalid Bluetooth request to a mobile device phone can take a whole channel.
- WEP Weaknesses: ==> Passwords can easily be cracked using Airsnort.
Hacking Wi-Fi.
i. To addjust transimision power in Wi-Fi
Network
1
| iwconfig wlan0 txpower 30
|
ii. set wlan0
in monitor mode
iii. To view wireless traffic in your network Then. Scan for available Wi-Fi
.
1
2
| # airodump-ng mon0
sudo airodump-ng wlan0mon
|
iv. Capturing PMKID (Pair wise Master key ID)
1
| sudo hcxdumptool -i wlan0mon -o Hackers-ArisePMKID --enable_status=1 --filterlist_ap=BE:91:B5:7E:51:79 --filtermode=2
|
Fern WIFI cracker
=> scanns for available Network and attempts to hack itWifite
=> Wireless Auditor
1
2
3
| apt install hcxdumptool
apt install hcxtools
sudo wifite => then CTRL+C and put number `CH`
|
1
2
| git clone https://github.com/souravbaghz/RadareEye
./radare <mac_addr><option>
|
Options are
1
2
3
| - blue Bluetooth RadareEye
- ble BLE radareEye
- wifi Wifi AP radareEye
|
References.
- Wireless Vulns
- Wireless Vulns2
- Wireless Vulns3