Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Kali Linux: Wireless Penetration Testing Beginner's Guide, Second Edition
  • Table Of Contents Toc
Kali Linux: Wireless Penetration Testing Beginner's Guide, Second Edition

Kali Linux: Wireless Penetration Testing Beginner's Guide, Second Edition - Second Edition

By : Cameron Buchanan, Vivek Ramachandran
4.6 (12)
Buy this Book
close
close
Kali Linux: Wireless Penetration Testing Beginner's Guide, Second Edition

Kali Linux: Wireless Penetration Testing Beginner's Guide, Second Edition

4.6 (12)
By: Cameron Buchanan, Vivek Ramachandran
Buy this Book

Overview of this book

If you are a security professional, pentester, or anyone interested in getting to grips with wireless penetration testing, this is the book for you. Some familiarity with Kali Linux and wireless concepts is beneficial.
Table of Contents (14 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Sections
Icon
Time for action – heading
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Wireless Lab Setup
Icon
1. Wireless Lab Setup
Icon
Hardware requirements
Icon
Software requirements
Icon
Installing Kali
Icon
Time for action – installing Kali
Icon
Setting up the access point
Icon
Time for action – configuring the access point
Icon
Setting up the wireless card
Icon
Time for action – configuring your wireless card
Icon
Connecting to the access point
Icon
Time for action – configuring your wireless card
Icon
Summary
2
2. WLAN and Its Inherent Insecurities
chevron up
Icon
2. WLAN and Its Inherent Insecurities
Icon
Revisiting WLAN frames
Icon
Time for action – creating a monitor mode interface
Icon
Time for action – sniffing wireless packets
Icon
Time for action – viewing management, control, and data frames
Icon
Time for action – sniffing data packets for our network
Icon
Time for action – packet injection
Icon
Important note on WLAN sniffing and injection
Icon
Time for action – experimenting with your adapter
Icon
Summary
3
3. Bypassing WLAN Authentication
Icon
3. Bypassing WLAN Authentication
Icon
Hidden SSIDs
Icon
Time for action – uncovering hidden SSIDs
Icon
MAC filters
Icon
Time for action – beating MAC filters
Icon
Open Authentication
Icon
Time for action – bypassing Open Authentication
Icon
Shared Key Authentication
Icon
Time for action – bypassing shared authentication
Icon
Summary
4
4. WLAN Encryption Flaws
Icon
4. WLAN Encryption Flaws
Icon
WLAN encryption
Icon
WEP encryption
Icon
Time for action – cracking WEP
Icon
WPA/WPA2
Icon
Time for action – cracking WPA-PSK weak passphrase
Icon
Speeding up WPA/WPA2 PSK cracking
Icon
Time for action – speeding up the cracking process
Icon
Decrypting WEP and WPA packets
Icon
Time for action – decrypting WEP and WPA packets
Icon
Connecting to WEP and WPA networks
Icon
Time for action – connecting to a WEP network
Icon
Time for action – connecting to a WPA network
Icon
Summary
5
5. Attacks on the WLAN Infrastructure
Icon
5. Attacks on the WLAN Infrastructure
Icon
Default accounts and credentials on the access point
Icon
Time for action – cracking default accounts on the access points
Icon
Denial of service attacks
Icon
Time for action – deauthentication DoS attack
Icon
Evil twin and access point MAC spoofing
Icon
Time for action – evil twin with MAC spoofing
Icon
A rogue access point
Icon
Time for action – Setting up a rogue access point
Icon
Summary
6
6. Attacking the Client
Icon
6. Attacking the Client
Icon
Honeypot and Misassociation attacks
Icon
Time for action – orchestrating a Misassociation attack
Icon
The Caffe Latte attack
Icon
Time for action – conducting the Caffe Latte attack
Icon
Deauthentication and disassociation attacks
Icon
Time for action – deauthenticating the client
Icon
The Hirte attack
Icon
Time for action – cracking WEP with the Hirte attack
Icon
AP-less WPA-Personal cracking
Icon
Time for action – AP-less WPA cracking
Icon
Summary
7
7. Advanced WLAN Attacks
Icon
7. Advanced WLAN Attacks
Icon
A Man-in-the-Middle attack
Icon
Time for action – Man-in-the-Middle attack
Icon
Wireless eavesdropping using MITM
Icon
Time for action – wireless eavesdropping
Icon
Session hijacking over wireless
Icon
Time for action – session hijacking over wireless
Icon
Finding security configurations on the client
Icon
Time for action – deauthentication attack on the client
Icon
Summary
8
8. KRACK Attacks
Icon
8. KRACK Attacks
Icon
KRACK attack overview
Icon
The four-way handshake KRACK attack
Icon
Time for action – getting KRACKing
Icon
Summary
9
9. Attacking WPA-Enterprise and RADIUS
Icon
9. Attacking WPA-Enterprise and RADIUS
Icon
Setting up FreeRADIUS-WPE
Icon
Time for action – setting up the AP with FreeRADIUS-WPE
Icon
Attacking PEAP
Icon
Time for action – cracking PEAP
Icon
EAP-TTLS
Icon
Security best practices for enterprises
Icon
Summary
10
10. WLAN Penetration Testing Methodology
Icon
10. WLAN Penetration Testing Methodology
Icon
Wireless penetration testing
Icon
Planning
Icon
Discovery
Icon
Attack
Icon
Reporting
Icon
Summary
11
11. WPS and Probes
Icon
11. WPS and Probes
Icon
WPS attacks
Icon
Time for action – WPS attack
Icon
Probe sniffing
Icon
Time for action – collecting data
Icon
Summary
12
A. Pop Quiz Answers
Icon
Chapter 1, Wireless Lab Setup
Icon
Chapter 2, WLAN and Its Inherent Insecurities
Icon
Chapter 3, Bypassing WLAN Authentication
Icon
Chapter 4, WLAN Encryption Flaws
Icon
Chapter 5, Attacks on the WLAN Infrastructure
Icon
Chapter 6, Attacking the Client
Icon
Chapter 7, Advanced WLAN Attacks
Icon
Chapter 9, Attacking WPA-Enterprise and RADIUS
13
Index
Icon
Index

Chapter 2. WLAN and its Inherent Insecurities

 

"The loftier the building, the deeper the foundation must be laid."

 
 --Thomas Kempis

Nothing great can be built on a weak foundation, and in our context, nothing secure can be built on something that is inherently insecure.

WLANs, by design, have certain insecurities that are relatively easy to exploit, for example, by packet spoofing, packet injection, and sniffing (this could even happen from far away). We will explore these flaws in this chapter.

In this chapter, we shall look at the following:

  • Revisiting WLAN frames
  • Different frame types and subtypes
  • Using Wireshark to sniff management, control, and data frames
  • Sniffing data packets for a given wireless network
  • Injecting packets into a given wireless network

Let's get started!

Visually different images
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Kali Linux: Wireless Penetration Testing Beginner's Guide, Second Edition
End of Section 2
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options
font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon