Affichage des articles dont le libellé est Kismet. Afficher tous les articles
Affichage des articles dont le libellé est Kismet. Afficher tous les articles

Wardriving with Kismet and WAPMap

What is WAPMap?

I have written this Python script to parse .netxml files output by Kismet and then return a CSV file that can be uploaded to Google Mapping Engine.  This will simplify war driving campaigns by allowing vulnerable networks (WEP or Open) to be easily mapped on Google Maps.  The WAPMap Github repository can be found here

To use this tool, you will need to have Kismet working with a GPS device connected to your Kali Linux host.  I have provided an explanation on how to do that here

How it Works?


First, you will need to clone the Github WAPMap repository.  This can be done with the following command:

# git clone https://github/hack1thu7ch/WAPMap.git


When the script is run without any arguments, it returns the usage description.  To run this script, you will need to supply three (3) arguments. These include the Kismet.netxml file of the Kismet scan from which you want to generate your map, the mapping mode (includes -wep and -open) and the name of the output CSV file that will be used to generate the map.



In the example provided below, I have used a .netxml file from a scan I performed around my apartment complex.  I have used the -wep argument to map out WEP encrypted networks.  And I have used wep_upload.csv as the output file name (this name is arbitrary, and you can use anything as long as you append a .csv to the end).


Once run, the script will output a tab delimited table showing the detected vulnerable networks of the specified encryption level.  Additionally, it will also output the CSV file that is highlighted above.  This is the one you will upload to Google.  Once you have this file, open your web browser and go to:


Once the page loads, click the “Create a New Map” button.

Next, you will need to click the “Import” link in the menu in the top-left corner of the map.



This will bring up a screen that will allow you to choose the input file.  Here, you can either drag-n-drop the CSV file or you can click “Select a file from your computer” and browse to it in the file tree.

Once you choose your file, the menu below will pop up.  It will ask you to specify the columns for latitude and longitude.  I have designed the CSV in such a way that these check boxes will auto populate.  All you have to do is click “Continue”.


Next, select the “Name” radio button, displayed below, and then click “Finish”.

Your map will now generate.  Finally, to add the SSID network names to the map markers, click the “Labels” drop-down on the left side of the screen and select “name”, as seen below.



And there you have it…a completed map with all of the nearby WEP networks, clearly isolated.



Source
Source Justin Hutchens wrote this outstanding article on his blog. - See more at: http://www.ehacking.net/2014/08/kismet-with-gps-in-kali-linux-tutorial.html#sthash.kNeu1NBo.dpuf

Source Justin Hutchens wrote this outstanding article on his blog. - See more at: http://www.ehacking.net/2014/08/kismet-with-gps-in-kali-linux-tutorial.html#sthash.kNeu1NBo.dpuf
Source Justin Hutchens wrote this outstanding article on his blog. - See more at: http://www.ehacking.net/2014/08/kismet-with-gps-in-kali-linux-tutorial.html#sthash.kNeu1NBo.dpuf

~ mardi 16 septembre 2014 0 commentaires

Kismet with GPS in Kali Linux Tutorial

I recently ran into a situation where I needed to use Kismet with GPS support.  This was extremely difficult to accomplish, not because the installation is difficult (its actually fairly simple when you know the steps) but because there was absolutely NO decent documentation on this. Hopefully this will change that.

What You Need?


This header for this section should perhaps be “What I Used.”  Because I’ve only tested my only hardware, its the only thing I can say for certain will work.  I used the ALFA AWUS036NH external wireless adapter, found here:

http://www.amazon.com/gp/product/B003YIFHJY?ref_=pe_527950_33920250







And I used the GlobalSat ND-100S USB GPS Dongle, found here:
http://www.amazon.com/dp/B003WNHGAO/ref=pe_385040_30332190_TE_dp_1


How to Install in Kali???

First we need to install a few packages in Kali Linux to get this thing to work.  First, the GPS daemon.

# sudo apt-get install gpsd




Then GPSd-clients package:

# sudo apt-get install gpsd-clients

Now, you can plug in your hardware.  If you are using a VM, make sure you pass it across.  You can verify that the GPS dongle is there by using the following command:

# lsusb

Then verify that your wireless adapter is there, and get the interface name.
# ifconfig

Next, make sure that your GPS adapter is showing up in the /dev/ directory.  To do this, use the command:

# ls /dev/gps*

This should also help you identify the name.  Once you have identified the path in /dev/, pass that as an argument to gpsd.

# gpsd /dev/gps[x]


Did it Work???

To verify that this worked, we obviously want to boot up Kismet.  Kinda the point…right?  Once Kismet has been booted, use the backtick/accent button ( ` ) to access the Kismet menu at the top.  Scroll right to the Windows menu, then select “GPS Details.”



Assuming you have signal, you should see the number of satellites connected and the signal strength corresponding to each.  In the example provided below, I have signal from 4 different satellites.  Alternatively, you may see a message indicating that you have no satellite signal.  If this is the case…keep walking/driving around.  It’ll happen.  Otherwise, if you are receiving a message that says no GPS device is connected, time to scrub the whole process and start over again.



Finally, you can verify that GPS data is being written to the output by examining the contents.  In the .nettxt file below, you can see that their are coordinate values for minimum position, maximum position and peak position.


Source

Justin Hutchens wrote this outstanding article on his blog.


~ lundi 4 août 2014 0 commentaires

Kismet- A Wireless Sniffer

kismet
Wardriving a act for searching and locating the access points (APs), as discussed on the wardriving article about the importance of wireless sniffer. These tools use to find out the wireless network, just like netstumbler for windows and Kismac for MAC, there is a Kismet for Linux. Purpose is same to sniff the wireless LAN and try to get maximum information about that network.

Kismet is a wireless network detector and sniffer and it works with any wireless card (NIC card) which supports raw monitoring mode. 
Kismet identifies networks by passively collecting packets and detecting networks, which allows it to detect (and given time, expose the names of) hidden networks and the presence of non-beaconing networks via data traffic.

Download


The single need to run Kismet is Linux OS, this may be a Ubuntu, backtrack or any other, however it can be applicable on windows but this time we consider only Linux, you can get Kismet from here and the second way is via terminal, open terminal and type,
 sudo apt-get install kismet
Kismet Tutorial 

After installation you need to configure Kismet now open terminal and type exactly.
 sudo gedit /etc/kismet/kismet.conf 
Now create the username for login to Kismet window,
suiduser=your_username_here
Now at this stage you have to tell the kismet about the source of wireless adapter to use. The command is
source=type,interface,name
and in my case
source=prism,wlan0,hostap
If you don’t know your relevant network driver, view the Kismet Readme and scroll down to the section “12. Capture Sources”.
Now start Kismet by the following command.
sudo kismet
kismet-text1

~ vendredi 19 août 2011 0 commentaires

inSSIDer-Wi-Fi Network Scanner

Wireless is now become a need of human, if you are in education place or in work place you can find a wi-fi (wireless) network around yours. There is a different between Wi-Fi and Wimax but this is not a actual topic of discussion, you cannot see the RF (wireless) signal but there is different tools available that can detect the RF signal and can manipulate it.  


As discussed before about Netstumbler (A WLAN scanner), KisMAC (For MAC OS) and Kismet (For Linux) this artcile will discuss about inSSIDer.


inSSIDer is a award winning Wi-Fi network scanner that can be used for multiple purposes like to find out the intruder on the network, for troubleshooting the network and for hacking. It is an open source tools that previously available for Windows like OS only but now it is available for Linux too. It is a best alternative of Netstumbler.

What Can inSSIDer Do?
  • Inspect your WLAN and surrounding networks to troubleshoot competing access points
  • Track the strength of received signal in dBm over time
  • Filter access points in an easy-to-use format
  • Highlight access points for areas with high Wi-Fi concentration
  • Export Wi-Fi and GPS data to a KML file to view in Google Earth.
  • Filter through hundreds of scanned access points


This is a smart tool that can help you on wardriving, if you are a network engineer than you can use it for maintaining the Wi-Fi network and for administrative task. It is freely available for your OS.


Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ samedi 23 juillet 2011 0 commentaires

Top 6 Ethical Hacking Tools

Automatic tools has changed the world of penetration testing/ethical hacking, IT security researcher has been developed and currently developing different tools to make the test fast, reliable and easy.
Just consider the world without automatic tools, you can easily say that the hacking process is slow and time consuming.
We have discussed different tools before but in this article we summarise the best tools that are widely used in the world of hacking.

No words for the Nmap, Nmap is a best tool ever that are used in the second phase of ethical hacking means port scanning, Nmap was originally command line tool that has been developed for only Unix/Linux based operating system but now its windows version is also available and ease to use. It is use for Operating system fingerprinting too for more information click here to learn.



Nessus is the world most famous vulnerability scanner, Nessus has been developed by Tenable network security, it is available for free of cost for non-enterprise environment means for home user. It is a network vulnerability scanner and use for finding the critical bugs on a system. Click here to learn more about Nessus.


Nikto is a free and open source tool, It checks for outdated versions of over 1000 servers, and version specific problems on over 270 servers, It find out the default files and programs. It is a best tool for web server penetration testing. Click here to learn more about Nikto.



Now a days Wardriving or Wireless LAN(WLAN) hacking is in market and different companies hire penetration tester for doing test on wireless network, this test requires some tools, so Kismet is a best choice for do this. Kismet identifies networks by passively collecting packets and detecting networks, which allows it to detect (and given time, expose the names of) hidden networks and the presence of non-beaconing networks via data traffic.


The best tool ever, Metasploit contain a database that has a list of available exploit and it is easy to use and best tool for doing penetration testing, Metasploit framework is a sub project and is use to execute exploit code against a machine and get the desire task done. Click here to learn more.



Once again for wardriving, well netstumbler are available for windows based operating system, it works on windows based operating system.It can detect WiFi that is IEEE 802.11b, 802.11g and 802.11a networks. MiniStumbler is also available and works on Windows CE based system.

Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ samedi 4 juin 2011 0 commentaires

Kismet- A Wireless Sniffer

Wardriving a act for searching and locating the access points (APs), as discussed on the wardriving article about the importance of wireless sniffer. These tools use to find out the wireless network, just like netstumbler for windows and Kismac for MAC, there is a Kismet for Linux. Purpose is same to sniff the wireless LAN and try to get maximum information about that network.

Kismet is a wireless network detector and sniffer and it works with any wireless card (NIC card) which supports raw monitoring mode. 
Kismet identifies networks by passively collecting packets and detecting networks, which allows it to detect (and given time, expose the names of) hidden networks and the presence of non-beaconing networks via data traffic.

Download

The single need to run Kismet is Linux OS, this may be a Ubuntu, backtrack or any other, however it can be applicable on windows but this time we consider only Linux, you can get Kismet from here and the second way is via terminal, open terminal and type,
 sudo apt-get install kismet
Kismet Tutorial 

After installation you need to configure Kismet now open terminal and type exactly.
 sudo gedit /etc/kismet/kismet.conf 
Now create the username for login to Kismet window,
suiduser=your_username_here
Now at this stage you have to tell the kismet about the source of wireless adapter to use. The command is
source=type,interface,name
and in my case
source=prism,wlan0,hostap
If you don’t know your relevant network driver, view the Kismet Readme and scroll down to the section “12. Capture Sources”.
Now start Kismet by the following command.
sudo kismet
Special thanks for wi-fiplanet, learn about netstumbler

Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ mardi 31 mai 2011 0 commentaires