Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 42 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Wirelessarrow Wireless Pen Testing Cards
EH-Net
May 21, 2013, 08:52:57 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: Wireless Pen Testing Cards  (Read 34840 times)
0 Members and 1 Guest are viewing this topic.
det_security08
Newbie
*
Offline Offline

Posts: 8


View Profile
« on: October 14, 2008, 10:34:57 AM »

Can anyone suggest a wireless network card for a mobile laptop for wireless pen testing (including capture and cracking)?  There are several chipsets/cards available that work with most of the free tools out there, but just curious if a few stood above the rest?

Logged
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #1 on: October 14, 2008, 11:23:04 AM »

I'd personally go with the Alfa AWUS036H as suggested below:
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,2649.0/

I managed to purchase it a few months and the range on this bad boy is mad bitchen.
Logged

eCPPT, GCIH, OSCP, OSWP
joswr1ght
Newbie
*
Offline Offline

Posts: 11


View Profile
« Reply #2 on: October 15, 2008, 02:39:13 PM »

I'd personally go with the Alfa AWUS036H as suggested below:
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,2649.0/

I second that recommendation, also available at http://www.netgate.com/product_info.php?products_id=665 (no affiliation).

-Josh
Logged
izman
Newbie
*
Offline Offline

Posts: 8


View Profile
« Reply #3 on: January 06, 2009, 10:32:52 AM »

I ve used the Proxim Orinoco Gold b/g cards with the external pigtail connection which was good for its time. But I totally recommend the Ubiquiti SRC 300mW 802.11 a/b/g MMCX. Its a little pricey but none the less I believe the best card I ve used so far.

www.ubnt.com

Thanks
Logged
izman
Newbie
*
Offline Offline

Posts: 8


View Profile
« Reply #4 on: January 06, 2009, 10:36:26 AM »

One more note...I have to say...I do like the Alpha...I ve used it too but I hate trying to wardrive with that clunker sticking from the side of my laptop...but I have used it for wireless pentesting in a VM... but thats another thread!! Long story short... they are both very good cards...depends on what you want to use them for.
Logged
charlottebandit
Newbie
*
Offline Offline

Posts: 49


View Profile
« Reply #5 on: January 07, 2009, 01:02:03 PM »

Not to say that wlan pen-testing is a dead subject however the enterprise-class wireless manufacturers have already migrated to 802.11n (draft-n) over G-networks.  For the most part, b-band is rarely seen because of the security implications.

Having said that, more 802.11n enterprise-class APs are integrating security features to provide an incredible amount of security that wasn't seen in the past two years.  You have APs that do:

- onboard Layer 1/2 IPS
- integration with Layer 3-7 network IPS
- AAA backend authentication
- integration with Network Admission Control (NAC) for posture assessment and compliance
- rogue AP detection
- management frame protection (beacon frame integrity)
- AES encryption to the AP (client association)
- and much, much more

Many customers are buying APs solely for their ability to detect (and mitigate) rogue APs either by careless individuals violating the security policy or by malicious attackers.  Now wireless network analysis is a growing field with tons of potential and part of the new CCIE Wireless roadmap. 


Logged

MS, CCSP, CCNP, CCDP, CEH, CHFI, CPTS
jason
Hero Member
*****
Offline Offline

Posts: 1012



View Profile WWW
« Reply #6 on: January 07, 2009, 11:25:01 PM »

Yup, and gobs of outdated and insecure equipment still in use. Just take a look at TJX.
Logged
Vertigo
Newbie
*
Offline Offline

Posts: 13


View Profile
« Reply #7 on: January 12, 2009, 04:23:51 AM »

I'm using high power 500mW Alfa AWUS036H  card with 5dB omni-directional antena for pentesting and Linksys WPC55AG pcmcia card (a+b+g standards support) with atheros chipset for research and studying purposes - due great wirelesss extensions support. Unfortunately, BT3F dosn't support AWUS036H  wireless driver for wpa/wpa2 supplicant , for this I'm using Windows XP driver. How to emulate windows drivers http://forums.remote-exploit.org/showthread.php?t=15497
Logged
jakx
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #8 on: January 15, 2009, 11:18:14 PM »

I am going to have to agree. I just got the Alfa about a week ago and it amazing. Fully supports injection, monitor mode, etc.. Highly recommended!
Logged
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #9 on: April 12, 2009, 11:42:33 AM »

Sorry to all for re-opening an old post.

I've had my eye on one of the Alfas for a whilst thanks to this and other positive reviews on EH-net. Someone was smiling on me when my new toys arrived the day before the holiday weekend, perfect timing Cheesy.

First off I'll agree with everyone else, the Alfa AWUS036H is a wonderful bit of kit. It's handled everything I've thrown at it so far with exceptional results, equally effective under either Windows (Vista) or 'nix (Kubuntu and Backtrack).

I got the wireless bug after reading through the CWNA resources (thanks again Don) and I'm now looking to beef up my wireless arsenal with a GPS receiver. I've looked at the TripNav TN-200 devices and they seem to do what I require, but I've got little to no experience in this area so was hoping I could enlist the collective insights of EH-net to point me in the right direction.

Thanks in advance.
Logged

Otter
Newbie
*
Offline Offline

Posts: 41


View Profile
« Reply #10 on: April 19, 2009, 03:05:32 AM »

I got the wireless bug after reading through the CWNA resources (thanks again Don) and I'm now looking to beef up my wireless arsenal with a GPS receiver. I've looked at the TripNav TN-200 devices and they seem to do what I require, but I've got little to no experience in this area so was hoping I could enlist the collective insights of EH-net to point me in the right direction.

Thanks in advance.


I have a Garmin GPS18 usb puck.   It works very well with gpsd with BAcktrack 3.  OWSA Assistant identifies it just fine, though for some mystifying reason, that live distro seems to lack gpsd.     This unit, however is borked under Backtrack 4 beta, as that distro (and its parent distro, apparently) have omitted the garmin_gps kernel driver from the distro due to some concerns over the security by which that driver leverages the USB bus, or some such.   

Edit:   It's in there.  you just need to do the following post-insertion:
modprobe garmin_gps
mount -t usbfs none /proc/bus/usb


If you're buying a new GPS receiver for your laptop, one that connects via bluetooth might be worth considering, as with wireless testing, you seem to be plenty tethered already between antennae and power cords for the laptop.  One less just makes it easier to be nimble, or less of a pain in the butt working in the confines of a car.  I can get a specific recommendation out of a coworker who has a deliciously small bluetooth gps receiver that reportedly works well with gpsd under Linux. 

As for my rig, I have a ubiquity SRC http://ubnt.com/products/src.php  (300mW, b/g/a, dual mmcx connectors with diversity tuners) but that Alfa  usb card looks like something to have for sure.  500mW plus the ability to run under vmware is certainly handy.   I have an Elcom 15dbi radome enclosed yaggi that fits in checked luggage easily, and as an 18" white cylinder is not terribly suspicious looking in a car (particularly in the cardboard box it comes in) versus something that looks very plainly like an antenna.  Elcom also has a 15dBi omni that's worth considering. 

One other neat idea for wireless pentesting I recently picked up was to have a trio of identitical USB connected cards tuned to channels 1, 6, and 11.    This makes channel hopping largely something you don't have to deal with, as with the overlapping of other channels, you pick up the stuff in the middle, yet converge faster in a drive around since you're not having to hop.  kismet has no trouble keeping up with the 3 sources.   Hawking makes a USB card that uses ralink drivers and has an external antenna (rp-sma I think), costs about $40 and is sold at Microcenter.    You'd still want, however, a high powered card for injection and deauth attacking, but a trio of those low costs things does make the passive sniffing part a bit quicker if you like.   

 
« Last Edit: May 12, 2009, 03:16:22 AM by Otter » Logged
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #11 on: April 19, 2009, 04:13:19 AM »

Thanks for the advice Otter, that Garmin unit looks rather nice, but the lack of BT4 support may be a deal-breaker (although as BT4 is ubuntu based I would expect it wouldn't take too much work to get the required drivers integrated).

From my (currently limited) wardriving experience I haven't had too much of an issue with getting tied into a knot too many cables, but I take your meaning with bluetooth connections, should hopefully reduce some of the eye-brow raising as a connect and dismantle my car rig Smiley If you're able to get a part/model number for the device I'll give it a look, still doing my homework for a couple of weeks before making a purchase.

I actually tried playing with the multi-card split capabilities within Kismet yesterday. So far I've found I gain better performance running with a single card, but this is likely due to my limited kit meaning I'm mixing an internal card with my Alfa rig. If you manage to have better success with multiple higher-end interfaces I'd be interested in your results as the costs of the Hawking card you reference makes a multi card rig quite affordable.
Logged

Kev
Sr. Member
****
Offline Offline

Posts: 428


View Profile
« Reply #12 on: April 19, 2009, 10:55:18 AM »

but the lack of BT4 support may be a deal-breaker

I am writing an article that I hope will change that. Believe it or not most "advanced" hackers I talk to don't even use Backtrack. 
Logged
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #13 on: April 19, 2009, 01:38:45 PM »

Kev,

I know this seems to be a familiar theme and bugbear on the forum when ever BackTrack is discussed. For the most part I agree with the sentiment, but the ability for hardware and tools to 'just work' under a live boot environment can be invaluable, especially when used under incident response engagement. Look forward to reading the article, shout when it's ready for public consumption.
« Last Edit: April 19, 2009, 01:40:41 PM by RoleReversal » Logged

TTewell
Newbie
*
Offline Offline

Posts: 21


View Profile
« Reply #14 on: April 22, 2009, 07:50:40 AM »

I'd personally go with the Alfa AWUS036H as suggested below:
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,2649.0/

I managed to purchase it a few months and the range on this bad boy is mad bitchen.
I know Cain & Abel suggest AirPcap but can this device be used with it as well?
Logged
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.073 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.