1. Wireless Security A lab that actually works! Anne Hewitt Oscar Salazar A lab that actually works! Anne Hewitt Oscar Salazar

2. Comparison  Monitor unencrypted traffic  Spoof a MAC address  Crack WEP  Decrypt encrypted packets  Time: 5-7 hours  Monitor unencrypted traffic  Spoof a MAC address  Crack WEP  Decrypt encrypted packets  Time: 5-7 hours  Discover wireless network & clients  Crack WEP  Spoof a MAC address  Man in the Middle Attack  Time: 1 hour  Discover wireless network & clients  Crack WEP  Spoof a MAC address  Man in the Middle Attack  Time: 1 hour

3. Lab Setup

4. Reconnaissance  Setup wireless cards on attackers  Have Attacker 2 run Kismet to get information on our wireless network  Setup wireless cards on attackers  Have Attacker 2 run Kismet to get information on our wireless network

6. Cracking the WEP  Attacker 2 runs Airodump to collect packets  Attacker 1 injects packets and replays them to generate a lot of packets using Aireply  Attacker 2 runs Aircrack-ptw to crack the WEP  Attacker 2 runs Airodump to collect packets  Attacker 1 injects packets and replays them to generate a lot of packets using Aireply  Attacker 2 runs Aircrack-ptw to crack the WEP

9. MAC Address Spoofing  Attack MACs are blocked due to previous suspicious activity. Must change to get access to the network

10. Man in the Middle Attack  Attacker 1 uses Ettercap to perform a Man in the Middle attack  WireShark is used to snoop traffic  Attacker 1 uses Ettercap to perform a Man in the Middle attack  WireShark is used to snoop traffic

12. Defenses  Use WPA password with a long, complex password.  Use with a combination of other security measure with WPA  Change default router login and password  Disable remote login to router  Use WPA password with a long, complex password.  Use with a combination of other security measure with WPA  Change default router login and password  Disable remote login to router