.

Wireless Pentesting Framework

<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Wed Nov 04, 2009 12:06 pm

Wireless Pentesting Framework

Hey guys. I'm going to be performing a rush wireless pentest next week, and I was wondering if anyone had a framework for how to go about that. I'm a CWNA and will take the CWSP in a few weeks, and I've toyed around with this stuff for years. I'm not too worried about my technical abilities, but I just want to make sure I cover all the bases and provide them with a quality report. I'm going to try to sneak into the OS WiFu course over the weekend as well.

TIA.

Edit: I am looking currently looking at my search results for wireless pentesting framework, so I'm doing alright without the smart-ass answers ;)

If anyone does have any personal experience with any of these, I would love to hear it. Thanks again.
Last edited by dynamik on Wed Nov 04, 2009 12:09 pm, edited 1 time in total.
The day you stop learning is the day you start becoming obsolete.
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Wed Nov 04, 2009 5:18 pm

Re: Wireless Pentesting Framework

Ok, things have completely changed. These are proprietary 5.8Ghz point-to-point links that connect several remote offices. Any ideas how to go about testing something like this!?
The day you stop learning is the day you start becoming obsolete.
<<

impelse

Hero Member
Hero Member

Posts: 585

Joined: Mon Feb 16, 2009 3:40 pm

Post Thu Nov 05, 2009 11:11 am

Re: Wireless Pentesting Framework

That's difficult, just beginning: normally they use spread spectrum and the same brand with some security feasures (some equipment just understand their equipment) plust because is point to point they atenas sending the signal directly, so you need to be next to one ot the antenas, jajajaaja

I do not think how you can do it
CCNA, Security+, 70-290, 70-291
CCNA Security
Taking Hackingdojo training

Website: http://blog.thehost1.com/
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Thu Nov 05, 2009 12:28 pm

Re: Wireless Pentesting Framework

There was a presentation, maybe at Defcon, a year or so ago.  It explained how to unlock certain wireless cards to be able to listen on frequencies outside of the supported manufacturer's ranges.  Obviously there are issues with bricking and FCC, but it could be worth investigating.   

I am not an expert on this, but I think that 802.11a is the closest thing to that spectrum that is readily available.  I think 802.11a operates at 5.75 and 5.85 GHz ranges.  I am not sure if you can match the frequency of the point to point connections, but it's worth a shot. 

I don't know if this is within your scope though.  Unless your point to point connections are using 802.11a or 802.11n, I don't know what hacking your wireless card would prove.  This may be a shortcut, but my approach to these types of proprietary networks is usually to go over the AP and antennae settings to make sure properly authentication, encryption, etc are used.

Again, I am not a wireless expert, but these are my two cents.
~~~~~~~~~~~~~~
Ketchup
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Thu Nov 05, 2009 8:02 pm

Re: Wireless Pentesting Framework

Thanks for the responses everyone. Unfortunately, this just isn't going to happen because it's in no way feasible.

However, I was able to speak with an engineer at that company, and I learned that they use proprietary L2 Framing and proprietary encryption (which is scary).

http://www.trangobroadband.com/wireless ... ridge.aspx is what they are using.

Oh well, I managed to score the OffSec WiFu course out of the deal (before we knew what equipment they were using), so it wasn't a total loss :D
The day you stop learning is the day you start becoming obsolete.

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software