Book Image

Kali Linux Wireless Penetration Testing Cookbook

By : Sean-Philip Oriyano
Book Image

Kali Linux Wireless Penetration Testing Cookbook

By: Sean-Philip Oriyano

Overview of this book

More and more organizations are moving towards wireless networks, and Wi-Fi is a popular choice. The security of wireless networks is more important than ever before due to the widespread usage of Wi-Fi networks. This book contains recipes that will enable you to maximize the success of your wireless network testing using the advanced ethical hacking features of Kali Linux. This book will go through techniques associated with a wide range of wireless penetration tasks, including WLAN discovery scanning, WEP cracking, WPA/WPA2 cracking, attacking access point systems, operating system identification, vulnerability mapping, and validation of results. You will learn how to utilize the arsenal of tools available in Kali Linux to penetrate any wireless networking environment. You will also be shown how to identify remote services, how to assess security risks, and how various attacks are performed. By finishing the recipes, you will feel confident conducting wireless penetration tests and will be able to protect yourself or your organization from wireless security threats.
Table of Contents (8 chapters)

Bluesnarfing

Bluesnarfing is an interesting and very powerful attack that can be employed against vulnerable devices. In a nutshell, Bluesnarfing is the unauthorized access of device through a Bluetooth connection, often between phones, laptops, and similar types of devices. This attack provides access to various types of data and resources on the target, and on some phones users can copy pictures and private videos.

This type of attack targets any Bluetooth capable device that has its connection turned on and is discoverable by a scanning party. Turning off Bluetooth as well as keeping a device from being discoverable is a workaround for this problem.

For a device to be targeted, the attacker must guess the device's MAC address via a brute force attack. As is normal with brute force attacks, guessing the right MAC address is only a matter of time.

Bluetooth uses a 48-bit...