Thank you to all you Aucklanders who turned up for my humble presentation last night. I presented a few slides on the theory of wireless cracking, and then we jumped right into a practical demonstration. We failed to crack a WEP key with 400,000 IVs the traditional way (I suspect the firmware outsmarted us), but succeeded using PTW to crack WEP ARP data with 45,000 packets.
We moved onto a wordlist attack on a WPA network, which worked exactly as expected, kicking clients off the network with deauthentication injections, and snagging their WPA handshakes. It took less than a second to wordlist the WPA password, but the wordlist was rigged with only about 8 entries, one of which was correct
We finished off the evening by exploring OpenWRT, and flashing my WRT54GL back to Linksys firmware, and then back to OpenWRT again.
It was great to meet you all, and it’s my observation that Linux communities around the world share common traits - friendliness, geekiness (the good kind), and an excitement for technology
I’ve put the slides for last night’s presentation here
Below is a list of links for some of the software we discussed last night:
- OpenWRT (Alternative Open Source Router Firmware)
- BackTrack2 (Forensic Analysis Live CD)
- Aircrack-ng (Suite of wireless hacking tools)
- HostAP (Run a software access point with your Prism2 card)
- IPTables “Recent” (Glen Ogilvie introduced us to this - implements some “temporary blacklisting” functions in iptables rules without any additional software)
No Comments on "AuckLUG wireless penetration and defence presentation a success"