Short presentation I did at BrainTank 2012 in Providence RI. The focus was on issues surrounding wireless security at the small business level and how there is not enough being done to address it.

1. So you want to be a wireless hacker…
Casey Dunham
Gnosis Consulting
BrainTank 2012
Providence RI

2. Background
• B.S. Computer Science – Univ. Southern Maine
• Active
– DC207 (dc207.org) Portland, ME DEF CON Group
– PWM TOOOL (toool.us)
– Have you been by the Lockpick Village?
• Gnosis – Security Consulting for Small Biz

3. WiFi Everywhere

5. Issues
Broken encryption
Confusing Administration Interfaces
Rogue Access Points
Man In the Middle Attacks
Lack of visibility (who / what / when)
WPS (WiFi Protected Setup)

6. WHERE’S THE EASY BUTTON?

7. Firesheep

8. Pineapple
Nothing to see here.
Just a plastic pineapple.
http://hakshop.myshopify.com/products/wifi-pineapple

9. Why YOU should care
“… FBI special agents drove past the home
and noted the existence of two WiFi networks
reachable from the property. One used WEP
encryption, the other had the more robust
WPA2, but the key point from the FBI's
perspective was that neither network was
unsecured. A search thus seemed much
more likely to find its proper target.”
http://arstechnica.com/tech-policy/2012/06/swat-team-throws-flashbangs-raids-wrong-home-due-to-open-wifi-network/

10. “…they used
sophisticated electronic equipment
to break through networks”
http://www.seattlepi.com/local/article/Feds-Wi-Fi-hacking-burglars-targeted-dozens-of-2178421.php

11. sophisticated electronic equipment
http://www.backtrack-linux.org/
Alfa-AWUS036NHR

12. Aircrack-ng
 Set of tools for auditing wireless
 packet sniffer
 WEP and WPA/WPA2-PSK cracker / analyzer
 Can also use airbase-ng to attack clients
 Included with BackTrack Linux
 Works out of the box with Alfa cards

13. Antennae

14. Making it Better (sort of)
Disable remote management
Only allow management via HTTPS
Disable WPS
Use WPA2 + AES + Really Good Key!
Don’t Use WiFi

15. Which one is stronger?
A. P4ssw0rd
B. MH0hzFt4ZMgRgCbt2ibq
C. dinosaursarereallyveryexcitingcreatures
D. r;IX&15z[&Kf+0aM4fi

16. Questions / Feedback?
@CaseyDunham
casey@dc207.org

17. Resources
http://www.backtrack-linux.org
http://www.securitytube.net/
 BackTrack 5 Wireless Penetration Testing Beginner's Guide
 http://www.aircrack-ng.org/
 http://hak5.org/
 https://www.cloudcracker.com/

18. DEMO