Chapter 2, WLAN and its Inherent Insecurities
by Vivek Ramachandran, Cameron Buchanan
Kali Linux Wireless Penetration Testing : Beginner's Guide
- Kali Linux Wireless Penetration Testing Beginner's Guide
- Table of Contents
- Kali Linux Wireless Penetration Testing Beginner's Guide
- Credits
- About the Authors
- About the Reviewer
- www.PacktPub.com
- Disclaimer
- Preface
- 1. Wireless Lab Setup
- Hardware requirements
- Software requirements
- Installing Kali
- Time for action – installing Kali
- Setting up the access point
- Time for action – configuring the access point
- Setting up the wireless card
- Time for action – configuring your wireless card
- Connecting to the access point
- Time for action – configuring your wireless card
- Summary
- 2. WLAN and its Inherent Insecurities
- Revisiting WLAN frames
- Time for action – creating a monitor mode interface
- Time for action – sniffing wireless packets
- Time for action – viewing management, control, and data frames
- Time for action – sniffing data packets for our network
- Time for action – packet injection
- Important note on WLAN sniffing and injection
- Time for action – experimenting with your adapter
- The role of regulatory domains in wireless
- Time for action – experimenting with your adapter
- Summary
- 3. Bypassing WLAN Authentication
- 4. WLAN Encryption Flaws
- WLAN encryption
- WEP encryption
- Time for action – cracking WEP
- WPA/WPA2
- Time for action – cracking WPA-PSK weak passphrases
- Speeding up WPA/WPA2 PSK cracking
- Time for action – speeding up the cracking process
- Decrypting WEP and WPA packets
- Time for action – decrypting WEP and WPA packets
- Connecting to WEP and WPA networks
- Time for action – connecting to a WEP network
- Time for action – connecting to a WPA network
- Summary
- 5. Attacks on the WLAN Infrastructure
- Default accounts and credentials on the access point
- Time for action – cracking default accounts on the access points
- Denial of service attacks
- Time for action – deauthentication DoS attacks
- Evil twin and access point MAC spoofing
- Time for action – evil twins and MAC spoofing
- A rogue access point
- Time for action – cracking WEP
- Summary
- 6. Attacking the Client
- Honeypot and Mis-Association attacks
- Time for action – orchestrating a Mis-Association attack
- The Caffe Latte attack
- Time for action – conducting a Caffe Latte attack
- Deauthentication and disassociation attacks
- Time for action – deauthenticating the client
- The Hirte attack
- Time for action – cracking WEP with the Hirte attack
- AP-less WPA-Personal cracking
- Time for action – AP-less WPA cracking
- Summary
- 7. Advanced WLAN Attacks
- A man-in-the-middle attack
- Time for action – man-in-the-middle attack
- Wireless Eavesdropping using MITM
- Time for action – Wireless Eavesdropping
- Session hijacking over wireless
- Time for action – session hijacking over wireless
- Finding security configurations on the client
- Time for action – deauthentication attacks on the client
- Summary
- 8. Attacking WPA-Enterprise and RADIUS
- 9. WLAN Penetration Testing Methodology
- 10. WPS and Probes
- A. Pop Quiz Answers
- Chapter 1, Wireless Lab Setup
- Chapter 2, WLAN and its Inherent Insecurities
- Chapter 3, Bypassing WLAN Authentication
- Chapter 4, WLAN Encryption Flaws
- Chapter 5, Attacks on the WLAN Infrastructure
- Chapter 6, Attacking the Client
- Chapter 7, Advanced WLAN Attacks
- Chapter 8, Attacking WPA-Enterprise and RADIUS
- Index
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.