This document discusses protecting wireless networks from hacking. It describes how wireless networks are less secure than wired networks because wireless signals can be easily intercepted. It explains different types of wireless networks and authentication methods like WEP, WPA, and WPA2. It provides details on how to attack a wireless network by scanning for access points, collecting initialization vectors, and using cracking tools. Finally, it recommends using the strongest encryption like WPA2 and changing keys frequently to better secure wireless networks.

1. Protecting Wireless Networks
aka Hacking Wireless
Saptha Wanniarachchi MBCS,MCSE,MCITP
Twitter @saptha
saptha.com

2. Wired Vs Wireless Hacking
r i m e i s a l l a r o u n d u s .C
In theory, wireless LANs are less secure than
wired LANs, because wireless communication
signals travel through the air and can easily be
intercepted.

3. Types Of Wireless Networks

4. Unfortunately, turning off the broadcast of the
SSID may lead to a false sense of security. The
method discourages only casual wireless
snooping, but does not stop a person trying to
attack the network.
Scanning for Access Points
• Access points periodically transmit beacon
frames (SSID, data rate, etc.)
• Client scans frequencies and picks an access
point based on SSID, signal strength, ...
• Client switches to assigned channel and
establishes an association

5. How dose the war diving looks

6. WIFI Authentication

7. WEP

8. WPA

9. WPA
1. Pre-Shared Key
2. Enterprise

10. Summary of authentication
Open Network
WEP
WPA

11. How to Attack
Scan -> Test Injection Capability
Use sniffing tools and collect IV’s
Try Fake authentication and MAC spoofing
When you have enough IV’s use cracking tool
to extract password
Or try MIM Attack and inject packets

12. Source: Consumer Reports
MisconfigurationMisconfiguration possibilitiespossibilities
•• no encryption usedno encryption used
•• weak (guessable) passwordweak (guessable) password
used to generate keyused to generate key
•• weak protection of encryptionweak protection of encryption
key on client machinekey on client machine
•• weak protection ofweak protection of
management interface formanagement interface for
access pointaccess point

13. Tools

14. Tools

15. Tools

16. Tools

17. Tools

18. Tools

19. Tools

20. Tools

22. Recommendations: WLAN Security
• WEP (fair)
• enable wireless frame encryption
• use longest key
• change the WEP key regularly (manually)
• 802.1X and WPA (user authentication + dynamic
keys) (better)
• use as soon as practical and stable
• set rekeying to occur every few hours
• 802.11i (best)
• upgrade / use when available and supported

25. Q&A