Affichage des articles dont le libellé est wardriving. Afficher tous les articles
Affichage des articles dont le libellé est wardriving. Afficher tous les articles

Wardriving with Kismet and WAPMap

What is WAPMap?

I have written this Python script to parse .netxml files output by Kismet and then return a CSV file that can be uploaded to Google Mapping Engine.  This will simplify war driving campaigns by allowing vulnerable networks (WEP or Open) to be easily mapped on Google Maps.  The WAPMap Github repository can be found here

To use this tool, you will need to have Kismet working with a GPS device connected to your Kali Linux host.  I have provided an explanation on how to do that here

How it Works?


First, you will need to clone the Github WAPMap repository.  This can be done with the following command:

# git clone https://github/hack1thu7ch/WAPMap.git


When the script is run without any arguments, it returns the usage description.  To run this script, you will need to supply three (3) arguments. These include the Kismet.netxml file of the Kismet scan from which you want to generate your map, the mapping mode (includes -wep and -open) and the name of the output CSV file that will be used to generate the map.



In the example provided below, I have used a .netxml file from a scan I performed around my apartment complex.  I have used the -wep argument to map out WEP encrypted networks.  And I have used wep_upload.csv as the output file name (this name is arbitrary, and you can use anything as long as you append a .csv to the end).


Once run, the script will output a tab delimited table showing the detected vulnerable networks of the specified encryption level.  Additionally, it will also output the CSV file that is highlighted above.  This is the one you will upload to Google.  Once you have this file, open your web browser and go to:


Once the page loads, click the “Create a New Map” button.

Next, you will need to click the “Import” link in the menu in the top-left corner of the map.



This will bring up a screen that will allow you to choose the input file.  Here, you can either drag-n-drop the CSV file or you can click “Select a file from your computer” and browse to it in the file tree.

Once you choose your file, the menu below will pop up.  It will ask you to specify the columns for latitude and longitude.  I have designed the CSV in such a way that these check boxes will auto populate.  All you have to do is click “Continue”.


Next, select the “Name” radio button, displayed below, and then click “Finish”.

Your map will now generate.  Finally, to add the SSID network names to the map markers, click the “Labels” drop-down on the left side of the screen and select “name”, as seen below.



And there you have it…a completed map with all of the nearby WEP networks, clearly isolated.



Source
Source Justin Hutchens wrote this outstanding article on his blog. - See more at: http://www.ehacking.net/2014/08/kismet-with-gps-in-kali-linux-tutorial.html#sthash.kNeu1NBo.dpuf

Source Justin Hutchens wrote this outstanding article on his blog. - See more at: http://www.ehacking.net/2014/08/kismet-with-gps-in-kali-linux-tutorial.html#sthash.kNeu1NBo.dpuf
Source Justin Hutchens wrote this outstanding article on his blog. - See more at: http://www.ehacking.net/2014/08/kismet-with-gps-in-kali-linux-tutorial.html#sthash.kNeu1NBo.dpuf

~ mardi 16 septembre 2014 0 commentaires

Kismet with GPS in Kali Linux Tutorial

I recently ran into a situation where I needed to use Kismet with GPS support.  This was extremely difficult to accomplish, not because the installation is difficult (its actually fairly simple when you know the steps) but because there was absolutely NO decent documentation on this. Hopefully this will change that.

What You Need?


This header for this section should perhaps be “What I Used.”  Because I’ve only tested my only hardware, its the only thing I can say for certain will work.  I used the ALFA AWUS036NH external wireless adapter, found here:

http://www.amazon.com/gp/product/B003YIFHJY?ref_=pe_527950_33920250







And I used the GlobalSat ND-100S USB GPS Dongle, found here:
http://www.amazon.com/dp/B003WNHGAO/ref=pe_385040_30332190_TE_dp_1


How to Install in Kali???

First we need to install a few packages in Kali Linux to get this thing to work.  First, the GPS daemon.

# sudo apt-get install gpsd




Then GPSd-clients package:

# sudo apt-get install gpsd-clients

Now, you can plug in your hardware.  If you are using a VM, make sure you pass it across.  You can verify that the GPS dongle is there by using the following command:

# lsusb

Then verify that your wireless adapter is there, and get the interface name.
# ifconfig

Next, make sure that your GPS adapter is showing up in the /dev/ directory.  To do this, use the command:

# ls /dev/gps*

This should also help you identify the name.  Once you have identified the path in /dev/, pass that as an argument to gpsd.

# gpsd /dev/gps[x]


Did it Work???

To verify that this worked, we obviously want to boot up Kismet.  Kinda the point…right?  Once Kismet has been booted, use the backtick/accent button ( ` ) to access the Kismet menu at the top.  Scroll right to the Windows menu, then select “GPS Details.”



Assuming you have signal, you should see the number of satellites connected and the signal strength corresponding to each.  In the example provided below, I have signal from 4 different satellites.  Alternatively, you may see a message indicating that you have no satellite signal.  If this is the case…keep walking/driving around.  It’ll happen.  Otherwise, if you are receiving a message that says no GPS device is connected, time to scrub the whole process and start over again.



Finally, you can verify that GPS data is being written to the output by examining the contents.  In the .nettxt file below, you can see that their are coordinate values for minimum position, maximum position and peak position.


Source

Justin Hutchens wrote this outstanding article on his blog.


~ lundi 4 août 2014 0 commentaires

War Driving | An Act of Wireless Hacking

How to map a wireless network and how to exploit by finding vulnerabilities of a wireless network this is called wireless hacking but when the hacker (attacker) is continuously moving and try to map as much wireless network as he/she can this is called war driving. We have previously discussed war driving | Wireless LAN hacking and in this article we will share a presentation on war driving that a member of ehacking.net has presented before.






Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ lundi 20 août 2012 0 commentaires

Fern wifi Cracker- A Wireless Penetration Testing Tool

WiFi is now become the way for short distance Internet, for long distance we have WiMAX standard but WiFi is very important because you can find WiFi hot-spot everywhere like at the airport, coffee shop and at the educational places. There are so many people out there who are using WiFi at there home and at offices. Cracking a WiFi connection is a essential part of wardriving but for a penetration tester and a ethical hacker WiFi or wireless network security is an important part. 

If you are doing a job as a IT security engineer and your task is to do a pen test on the wifi network. What tools are you going to use?

Operating system for this case is usually Linux or specially Ubuntu or backtrack, backtrack 5 contain different tools for WiFi cracking like aircrack-ng but in this article I will discuss something about Fern WiFi Cracker.

What Is Fern WiFi Cracker ?

Fern wifi cracker is a wireless security auditing application that is written in python and uses python-qt4. This application uses the aircrack-ng suite of tools. It can be run on any linux distribution like Fern wifi cracker is use in ubuntu or even you can use fern wifi cracker in windows but you must have some dependencies to run fern wifi cracker on windows.
Requirements of Fern wifi Cracker:
  • python
  • python-qt4
  • macchanger
  • aircrack-ng
  • xterm
  • subversion

Download Fern Wifi Cracker

 Fern wifi cracker can easily be install on ubuntu and backtrack, backbox,gnackbox and other distribution.

Fern wifi Cracker Tutorial

After downloading the file locate the directory and type.

root@host:~# dpkg -i Fern-Wifi-Cracker_1.2_all.deb
Click the refresh button to display monitor interfaces:
Please Note, the scan button is a dual button, meaning, by clicking it the first time it scans for networks,then by clicking the button again, it stops any scan that was initialized (vise versa).

Fern wifi is a GUI and it can crack WEP and WPA as well.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ jeudi 6 octobre 2011 0 commentaires

inSSIDer-Wi-Fi Network Scanner

Wireless is now become a need of human, if you are in education place or in work place you can find a wi-fi (wireless) network around yours. There is a different between Wi-Fi and Wimax but this is not a actual topic of discussion, you cannot see the RF (wireless) signal but there is different tools available that can detect the RF signal and can manipulate it.  


As discussed before about Netstumbler (A WLAN scanner), KisMAC (For MAC OS) and Kismet (For Linux) this artcile will discuss about inSSIDer.


inSSIDer is a award winning Wi-Fi network scanner that can be used for multiple purposes like to find out the intruder on the network, for troubleshooting the network and for hacking. It is an open source tools that previously available for Windows like OS only but now it is available for Linux too. It is a best alternative of Netstumbler.

What Can inSSIDer Do?
  • Inspect your WLAN and surrounding networks to troubleshoot competing access points
  • Track the strength of received signal in dBm over time
  • Filter access points in an easy-to-use format
  • Highlight access points for areas with high Wi-Fi concentration
  • Export Wi-Fi and GPS data to a KML file to view in Google Earth.
  • Filter through hundreds of scanned access points


This is a smart tool that can help you on wardriving, if you are a network engineer than you can use it for maintaining the Wi-Fi network and for administrative task. It is freely available for your OS.


Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ samedi 23 juillet 2011 0 commentaires

Airsnarf - Rogue Access Point

Access points are those points that has router to spread the radio signals of a network, these type of router have antenna(s) (smart or omni directional), the main aim of using these access point is to establish a wireless (Wi-Fi) network. Wireless networks are the rising network that are currently using by the organizations, for public places and for home usage.    


Wi-Fi network has different vulnerabilities that can be exploit, as discussed before about wardriving. In wardriving you are searching for an access point to exploit but what if an access point is searching for you to exploit, strange but true and the term can be called an Inverse wardriving.


In inverse wardriving an attacker has to create a rogue access point, so the question is what is rogue access point? A rogue access point is a access point that has been installed without the permission of legitimate user (Administrator), rogue access point is a biggest threat for wireless network for large organization because it is open a way to launch man-in-the-middle attack, and it is a backdoor to enter into an Enterprise network.


It is a layer 2 attack that can be turn into layer 3 attack, here is the video demonstration that will better explain rogue access point. Thanks to the AirTightNetworks for the wonderful video.





There is another awesome video that explain rouge access point and available on securitytube.


I hope after this you have an idea about rogue access point, Airsnarf is a simple rogue wireless access point setup utility designed to demonstrate how a rogue AP can steal usernames and passwords from public wireless hotspots.  Airsnarf was developed and released to demonstrate an inherent vulnerability of public 802.11b hotspots--snarfing usernames and passwords by confusing users with DNS and HTTP redirects from a competing AP. Follow the link to learn more about Airsnarf.


Note: If you want to learn more about Linux(Backtrack 5) and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ vendredi 22 juillet 2011 0 commentaires

Kismet- A Wireless Sniffer

Wardriving a act for searching and locating the access points (APs), as discussed on the wardriving article about the importance of wireless sniffer. These tools use to find out the wireless network, just like netstumbler for windows and Kismac for MAC, there is a Kismet for Linux. Purpose is same to sniff the wireless LAN and try to get maximum information about that network.

Kismet is a wireless network detector and sniffer and it works with any wireless card (NIC card) which supports raw monitoring mode. 
Kismet identifies networks by passively collecting packets and detecting networks, which allows it to detect (and given time, expose the names of) hidden networks and the presence of non-beaconing networks via data traffic.

Download

The single need to run Kismet is Linux OS, this may be a Ubuntu, backtrack or any other, however it can be applicable on windows but this time we consider only Linux, you can get Kismet from here and the second way is via terminal, open terminal and type,
 sudo apt-get install kismet
Kismet Tutorial 

After installation you need to configure Kismet now open terminal and type exactly.
 sudo gedit /etc/kismet/kismet.conf 
Now create the username for login to Kismet window,
suiduser=your_username_here
Now at this stage you have to tell the kismet about the source of wireless adapter to use. The command is
source=type,interface,name
and in my case
source=prism,wlan0,hostap
If you don’t know your relevant network driver, view the Kismet Readme and scroll down to the section “12. Capture Sources”.
Now start Kismet by the following command.
sudo kismet
Special thanks for wi-fiplanet, learn about netstumbler

Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ mardi 31 mai 2011 0 commentaires

KisMAC- Wireless Security Tool For MAC OS

As discussed so many topics for both Linux and Windows operating system, now this article will talk about the Wireless LAN (WLAN) security tool that are available for MAC operating system. This article is linked with the series article of Wardriving. Wardriving a act of searching/locating and exploit a access point.

If you are a close user of MAC operating system so this tool is for you, KisMAC is a free, open source wireless stumbling and security tool for Mac OS X. Kismac is a replica of netstumbler for windows and Kismet for Linux, the overall idea of wardriving is same click here to learn.

You can get and install Kismac on your MACbook and start driving the concept of gpsd is same. 
It has an advantage over MacStumbler / iStumbler / NetStumbler in that it uses monitor mode and passive scanning.
KisMAC supports many third party USB devices: Intersil Prism2, Ralink rt2570, rt73, and Realtek rtl8187 chipsets. All of the internal AirPort hardware is supported for scanning. 



Key Features
  • Reveals hidden / cloaked / closed SSIDs
  • Shows logged in clients (with MAC Addresses, IP addresses and signal strengths)
  • Mapping and GPS support
  • Can draw area maps of network coverage
  • PCAP import and export
  • Support for 802.11b/g
  • Different attacks against encrypted networks
  • Deauthentication attacks
  • AppleScript-able
  • Kismet drone support (capture from a Kismet drone)
Cracking Support 
  • Bruteforce attacks against LEAP, WPA and WEP
  • Weak scheduling attack against WEP
  • Newsham 21-bit attack against WEP
Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ dimanche 15 mai 2011 0 commentaires

Wardriving- Wireless LAN Hacking

Wireless networking is the most popular and fast growing technology, from home networking to the enterprise networking, wireless network now become a way of life and way of networking. As more wireless network are deployed, the need to secure them increase. 

 
This article will discuss about mapping a wireless network and exploit it.
Wardriving also known as access point mapping, is a act for searching, locating and possibly exploit the Wireless LAN while driving on a vehicle.

Requirement
The requirement for effective wardriving is based on both hardware and software.

 Hardware:  
  • Portable Computer (Laptop and Netbook etc.) or PDA (Personal digital assistance) 
  • A Wireless NIC card
  • An Antenna 
  • A handheld GPS unit (Optional)
  • GPS data Cable (Optional) 
  • A pigtail to connect NIC to external antenna
Software: 
  • A software program for wardriving is freely available on Internet.
  • NetStumbler or inSSIDer for Windows
  • Kismet for Linux, FreeBSD, NetBSD, OpenBSD, DragonFly BSD 
This is not enough there is need to discuss on how to choose wireless NIC and antenna for wardriving. The IEEE 802.11 is a family of standards, each one defining and specifying parts of the standard.
  • 802.11b, using the 2.4 GHz radio spectrum and 11 Mbps max data rate.
  • 802.11a, using the 5 GHz radio spectrum and 54 Mbps max data rate. 
  • 802.11g, using the 2.4 GHz radio spectrum and 54 Mbps max data rate.
802.11b cards are the most easiest to install and it supported by most wardriving tools (software's).
A typical Laptop wardriving set up
This is not the end actually it is going to be a series article and for windows based tool netstumbler click here to learn with video tutorial. Linux version will coming soon.




Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

~ mardi 3 mai 2011 0 commentaires