Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 34 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Wirelessarrow BackTrack VM
EH-Net
May 21, 2013, 07:09:56 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: BackTrack VM  (Read 13550 times)
0 Members and 1 Guest are viewing this topic.
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« on: May 25, 2010, 03:12:06 PM »

Hello all, long time reader but never posted before.

I'm in the process of trying to prove a colleague that WEP is about the worst business risk in history, but I ran into a problem trying to crack a WEP key using a BackTrack VM.

Is it possible to access the wlan device from within the VM?  From what I can tell, the VM tools act kind of like an adapter and only contain an interface to a physical ethernet device.  Mapping the wireless device to a VM adapter shows up only as standard ethernet (ie. no monitor mode...).

I've tried this on VirtualPC, VMware and VirtualBox.

Thanks!
yatz
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
hayabusa
Hero Member
*****
Offline Offline

Posts: 1632



View Profile
« Reply #1 on: May 25, 2010, 03:41:09 PM »

VM's and wireless often don't mix properly, because the VM's treat network interfaces as generic ethernet ones.  Once upon a time, quite some time back, I think I managed to get a USB wireless working under a VM (VMWare) but decided it wasn't worth the trouble to keep fighting with it, so instead, I booted the laptop to the BackTrack bootable cd, and loaded my wireless there, instead of inside a VM.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #2 on: May 25, 2010, 04:44:04 PM »

I definitely had a wifi USB dongle working in VmWare at one point.   I was still using VmWare Server 1.x then.   I don't believe that you will have much luck with built-in adapters in VmWare though.
Logged

~~~~~~~~~~~~~~
Ketchup
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #3 on: May 25, 2010, 10:29:43 PM »

Virtualiztion doesn't care what kind of network card it is, it only cares that it's a network card. So it passes it through that way.

BillV and I have bought different versions of these: http://www.amazon.com/802-11b-Wireless-Original-Alfa-Strongest/dp/B002BFMZR8. I know it works with the Live CD. From what I understand I should be able to get it to work with the Virtual. I'm not sure how Billv got his working. (We had an off forum conversation about them).

Dale Pearson got the same device to work with a Bootable Backtrack USB stick.
Logged

OSWP, Sec+
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #4 on: May 25, 2010, 10:44:18 PM »

I'm not sure what virtualization packages you're having problems with, but USB pass-through works very well in VMware Workstation 7.

Here's the new revision of that adapter that some of us have been purchasing (I haven't really had a chance to play with it yet): http://www.amazon.com/High-Gain-Long-Rang-Alfa-9dBi-Mount/dp/B0038Q4AIG/ref=wl_it_dp_o?ie=UTF8&coliid=I3LTWBRPXRYBBQ&colid=BQRJ4R1QKAS2

If you're just looking for network connectivity, the physical hardware won't matter for a VM. However, if you're trying to work specifically with wireless (i.e. injection), you're going to need to have the adapter appear as a wireless connection in the VM.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
mambru
Jr. Member
**
Offline Offline

Posts: 98


View Profile
« Reply #5 on: May 25, 2010, 11:51:32 PM »

We conduct our wireless pentests using Backtrack 4 running on VMWare Workstation 7 and the wireless adapter that chrisj and dynamik mention, and we have no problems at all with them, it runs smoothly.
Logged
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #6 on: May 26, 2010, 07:47:04 AM »

If you're just looking for network connectivity, the physical hardware won't matter for a VM. However, if you're trying to work specifically with wireless (i.e. injection), you're going to need to have the adapter appear as a wireless connection in the VM.

Yeah, that's what I think my problem is.  Right now I'm just trying to crack a WEP key, which will require having the adapter show up as a wireless device in the VM, as you say.  If I can get this working, then I won't need another computer and can set up a mini lab on my primary box.

I have tested other network-based exploits like MS08-067 and a few browser-based ones, but the wireless attacks are more challenging (if not impossible) if you can't switch to monitor mode.


We conduct our wireless pentests using Backtrack 4 running on VMWare Workstation 7 and the wireless adapter that chrisj and dynamik mention, and we have no problems at all with them, it runs smoothly.

This looks promising, but I don't know why a specific wireless device should matter since the VM layer sits in between.  I suppose as a USB device the association can be directed strictly to the VM which can't be done with integrated or PCMCIA cards... Does this sound right?  If so, then any USB wireless card should work, so long as you have the right driver and the hypervisor supports USB passthrough.


it wasn't worth the trouble to keep fighting with it

I may want a dedicated box anyway for the reason you say, hayabusa.  I was trying to avoid scrounging one up though since the ones we have lying around are lying around for a reason...
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #7 on: May 26, 2010, 09:18:10 AM »

Here's the new revision of that adapter that some of us have been purchasing (I haven't really had a chance to play with it yet): http://www.amazon.com/High-Gain-Long-Rang-Alfa-9dBi-Mount/dp/B0038Q4AIG/ref=wl_it_dp_o?ie=UTF8&coliid=I3LTWBRPXRYBBQ&colid=BQRJ4R1QKAS2

from what I've read, the 2000mw one is using a different chip set, and I don't think it supports injection yet. I was going to get that one, until I heard it had a new chip set, and if I recall, it wasn't on aircrack's list of good chip sets. (I could be wrong).

EDIT:
I did a quick look, looks like it's a mixed bag on injection. They're seems to be some instructions out there that will get it to work.
« Last Edit: May 26, 2010, 09:23:49 AM by chrisj » Logged

OSWP, Sec+
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #8 on: May 26, 2010, 10:21:41 AM »

This might be a good time to ask what exactly you mean by "injection."  Is this referring to a MITM scenario or something more basic?
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #9 on: May 26, 2010, 10:53:27 AM »

This might be a good time to ask what exactly you mean by "injection."  Is this referring to a MITM scenario or something more basic?

Packet injection, and I maybe wrong since I'm just learning about it, is injecting packets into a wifi connection. Usually used to cause de-authentication so you can generate the right kind of traffic needed to break the keys.

This link should give you a rough idea.
http://en.wikipedia.org/wiki/Wireless_security#Network_injection

This link gives a description and how to do it (with the card I have in my laptop)
http://www.ubuntugeek.com/how-to-enable-packet-injection-on-a-intel-prowireless-3945abg-wireless-card.html
« Last Edit: May 26, 2010, 10:55:36 AM by chrisj » Logged

OSWP, Sec+
lifestorie1
Newbie
*
Offline Offline

Posts: 19



View Profile
« Reply #10 on: May 26, 2010, 12:37:18 PM »

I am working on trying to get my usb wireless card to show up in vmware.  Actually I have tried other usb devices and have not been successful with any devices and as far as I know the settings are right to detect usb. Any help would be greatly appreciated as this is keeping me from learning different pen-testing things I need to know.  I am running the latest vmware server (http://www.vmware.com/products/server/).  Ideas???
Logged

Security+
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #11 on: May 26, 2010, 01:31:57 PM »

What is the guest OS you are using?
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
lifestorie1
Newbie
*
Offline Offline

Posts: 19



View Profile
« Reply #12 on: May 26, 2010, 01:53:50 PM »

What is the guest OS you are using?

I am using BT4
Logged

Security+
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #13 on: May 26, 2010, 01:57:16 PM »

I am working on trying to get my usb wireless card to show up in vmware.  Actually I have tried other usb devices and have not been successful with any devices and as far as I know the settings are right to detect usb. Any help would be greatly appreciated as this is keeping me from learning different pen-testing things I need to know.  I am running the latest vmware server (http://www.vmware.com/products/server/).  Ideas???

Just to dot all the I's. did you install the vwmare tools for the guest?
Logged

OSWP, Sec+
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #14 on: May 26, 2010, 03:05:42 PM »

Oh and one other thing, the USB device can only associate to one device at a time, so it cannot be active in the host if you want it to be used in the guest.  It may be a minor point, but something to keep in mind.
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.079 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.