Book Image

Kali Linux Wireless Penetration Testing Cookbook

By : Sean-Philip Oriyano
Book Image

Kali Linux Wireless Penetration Testing Cookbook

By: Sean-Philip Oriyano

Overview of this book

More and more organizations are moving towards wireless networks, and Wi-Fi is a popular choice. The security of wireless networks is more important than ever before due to the widespread usage of Wi-Fi networks. This book contains recipes that will enable you to maximize the success of your wireless network testing using the advanced ethical hacking features of Kali Linux. This book will go through techniques associated with a wide range of wireless penetration tasks, including WLAN discovery scanning, WEP cracking, WPA/WPA2 cracking, attacking access point systems, operating system identification, vulnerability mapping, and validation of results. You will learn how to utilize the arsenal of tools available in Kali Linux to penetrate any wireless networking environment. You will also be shown how to identify remote services, how to assess security risks, and how various attacks are performed. By finishing the recipes, you will feel confident conducting wireless penetration tests and will be able to protect yourself or your organization from wireless security threats.
Table of Contents (8 chapters)

Introduction

When working with wireless networks, one of the categories of attacks that may be used is that of access control attacks. Attacks put into this category aim to penetrate and compromise a wireless network by evading access control measures. These types of access control measures include items such as MAC filtering, misconfiguration, rogue access points, and other items we will discuss within this chapter.

Before we go too far, let's take a more detailed look at access control in order to understand more clearly what it is that we are attacking in this particular chapter.

The access control process is one that involves identification of syndication and authorization. Any attack against access control is going seek to steal credentials, or impersonate a user or system with the intention of gaining access and performing unauthorized or outright malicious activities...