Hacking Wireless Networks For Dummies

, by Beaver, Kevin; Davis, Peter T.; Akin, Devin K.

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780764597305 | 0764597302
Cover: Paperback
Copyright: 9/13/2005

Buy New

Print on Demand: 2-4 Weeks. This item cannot be cancelled or returned.

$33.60

Become a cyber-hero - know the common wireless weaknesses "Reading a book like this one is a worthy endeavor toward becoming an experienced wireless security professional." --Devin Akin - CTO, The Certified Wireless Network Professional (CWNP) Program Wireless networks are so convenient - not only for you, but also for those nefarious types who'd like to invade them. The only way to know if your system can be penetrated is to simulate an attack. This book shows you how, along with how to strengthen any weak spots you find in your network's armor. Discover how to: Perform ethical hacks without compromising a system Combat denial of service and WEP attacks Understand how invaders think Recognize the effects of different hacks Protect against war drivers and rogue devices

Foreword

xvii

Introduction

(1)

Who Should Read This Book?

(1)

About This Book

(1)

How to Use This Book

(1)

Foolish Assumptions

(1)

How This Book Is Organized

(2)

Part I: Building the Foundation for Testing Wireless Networks

(1)

Part II: Getting Rolling with Common Wi-Fi Hacks

(1)

Part III: Advanced Wi-Fi Hacks

(1)

Part IV: The Part of Tens

(1)

Part V: Appendixes

(1)

Icons Used in This Book

(1)

Where to Go from Here

(1)

Part I: Building the Foundation for Testing Wireless Networks

(58)

Introduction to Wireless Hacking

(10)

Why You Need to Test Your Wireless Systems

(5)

Knowing the dangers your systems face

(1)

Understanding the enemy

(2)

Wireless-network complexities

(1)

Getting Your Ducks in a Row

(1)

Gathering the Right Tools

(1)

To Protect, You Must Inspect

(2)

Non-technical attacks

(1)

Network attacks

(1)

Software attacks

(1)

The Wireless Hacking Process

(12)

Obeying the Ten Commandments of Ethical Hacking

(7)

Thou shalt set thy goals

(1)

Thou shalt plan thy work, lest thou go off course

(1)

Thou shalt obtain permission

(1)

Thou shalt work ethically

(1)

Thou shalt keep records

(1)

Thou shalt respect the privacy of others

(1)

Thou shalt do no harm

(1)

Thou shalt use a ``scientific'' process

(1)

Thou shalt not covet thy neighbor's tools

(1)

Thou shalt report all thy findings

(1)

Understanding Standards

(5)

Using ISO 17799

(1)

Using CobiT

(1)

Using SSE-CMM

(1)

Using ISSAF

(1)

Using OSSTMM

(3)

Implementing a Testing Methodology

(12)

Determining What Others Know

(3)

What you should look for

(1)

Footprinting: Gathering what's in the public eye

(2)

Mapping Your Network

(2)

Scanning Your Systems

(2)

Determining More about What's Running

(1)

Performing a Vulnerability Assessment

(2)

Manual assessment

(1)

Automatic assessment

(1)

Finding more information

(1)

Penetrating the System

(2)

Amassing Your War Chest

(22)

Choosing Your Hardware

(1)

The personal digital assistant

(1)

The portable or laptop

(1)

Hacking Software

(12)

Using software emulators

(10)

Linux distributions on CD

(1)

Stumbling tools

(1)

You got the sniffers?

(1)

Picking Your Transceiver

(2)

Determining your chipset

(2)

Buying a wireless NIC

(1)

Extending Your Range

(3)

Using GPS

(1)

Signal Jamming

(2)

Part II: Getting Rolling with Common Wi-Fi Hacks

(88)

Human (In)Security

(14)

What Can Happen

(1)

Ignoring the Issues

(1)

Social Engineering

(4)

Passive tests

(2)

Active tests

(1)

Unauthorized Equipment

(2)

Default Settings

(1)

Weak Passwords

(1)

Human (In)Security Countermeasures

(3)

Enforce a wireless security policy

(1)

Train and educate

(1)

Keep people in the know

(1)

Scan for unauthorized equipment

(1)

Secure your systems from the start

(1)

Containing the Airwaves

(16)

Signal Strength

(9)

Using Linux Wireless Extension and Wireless Tools

(6)

Using Wavemon

(1)

Using Wscan

(1)

Using Wmap

(1)

Using XNetworkStrength

(1)

Using Wimon

(1)

Other WEP Problems to Look For

261

(2)

Attacking WEP

263

(1)

Active traffic injection

263

(1)

Active attack from both sides

263

(1)

Table-based attack

264

(1)

Passive attack decryption

264

(1)

Cracking Keys

264

(10)

Using WEPcrack

265

(2)

Using AirSnort

267

(2)

Using aircrack

269

(4)

Using WepLab

273

(1)

Finding other tools

274

(1)

Countermeasures Against Home Network-Encryption Attacks

274

(3)

Rotating keys

275

(1)

Using WPA

275

(2)

Organization Encryption Attack Countermeasures

277

(4)

Using WPA2

278

(1)

Using a VPN

278

(3)

Authenticating Users

281

(20)

Three States of Authentication

281

(2)

Authentication according to IEEE 802.11

282

(1)

I Know Your Secret

283

(1)

Have We Got EAP?

284

(4)

This method seems easy to digest

285

(1)

Not another PEAP out of you

286

(1)

Another big LEAP for mankind

286

(1)

That was EAP-FAST

287

(1)

Beam me up, EAP-TLS

287

(1)

EAP-TTLS: That's funky software

288

(1)

Implementing 802.1X

288

(2)

Cracking LEAP

290

(3)

Using asleap

291

(1)

Using THC-LEAPcracker

292

(1)

Using anwrap

293

(1)

Network Authentication Countermeasures

293

(8)

WPA improves the 8021.1 picture

293

(1)

Using WPA2

294

(1)

Using a VPN

295

(1)

WIDS

296

(1)

Use the right EAP

297

(1)

Setting up a WDMZ

297

(1)

Using the Auditor Collection

297

(4)

Part IV: The Part of Tens

301

(24)

Ten Essential Tools for Hacking Wireless Networks

303

(4)

Laptop Computer

303

(1)

Wireless Network Card

304

(1)

Antennas and Connecting Cables

304

(1)

GPS Receiver

304

(1)

Stumbling Software

304

(1)

Wireless Network Analyzer

305

(1)

Port Scanner

305

(1)

Vulnerability Assessment Tool

305

(1)

Google

305

(1)

An 802.11 Reference Guide

305

(2)

Ten Wireless Security-Testing Mistakes

307

(14)

Skipping the Planning Process

307

(1)

Not Involving Others in Testing

308

(1)

Not Using a Methodology

308

(1)

Forgetting to Unbind the NIC When Wardriving

309

(3)

Failing to Get Written Permission to Test

312

(1)

Failing to Equip Yourself with the Proper Tools

313

(1)

Over-Penetrating Live Networks

314

(1)

Using Data Improperly

314

(1)

Failing to Report Results or Follow Up

314

(2)

Breaking the Law

316

(5)

Ten Tips for Following Up after Your Testing

321

(4)

Organize and Prioritize Your Results

321

(1)

Prepare a Professional Report

322

(1)

Retest If Necessary

322

(1)

Obtain Sign-Off

322

(1)

Plug the Holes You Find

323

(1)

Document the Lessons Learned

323

(1)

Repeat Your Tests

323

(1)

Monitor Your Airwaves

324

(1)

Practice Using Your Wireless Tools

324

(1)

Keep Up with Wireless Security Issues

324

(1)

Part V: Appendixes

325

(2)

Appendix A: Wireless Hacking Resources

327

(14)

Certifications

327

(1)

General Resources

327

(1)

Hacker Stuff

328

(1)

Wireless Organizations

328

(1)

Institute of Electrical and Electronics Engineers (IEEE): www.ieee.org

328

(1)

Wi-Fi Alliance (formerly WECA): www.wifialliance.com

329

(1)

Local Wireless Groups

329

(2)

Security Awareness and Training

331

(1)

Wireless Tools

331

(10)

General tools

331

(1)

Vulnerability databases

332

(1)

Linux distributions

332

(1)

Software emulators

333

(1)

RF prediction software

333

(1)

RF monitoring

333

(2)

Antennae

335

(1)

Wardriving

335

(1)

Wireless IDS/IPS vendors

336

(1)

Wireless sniffers

337

(1)

WEP/WPA cracking

338

(1)

Cracking passwords

338

(1)

Dictionary files and word lists

339

(1)

Gathering IP addresses and SSIDs

339

(1)

LEAP crackers

340

(1)

Network mapping

340

(1)

Network scanners

340

(1)

Appendix B: Glossary of Acronyms

341

(6)

Index

347

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Hacking Wireless Networks For Dummies

Summary

Author Biography

Table of Contents

Supplemental Materials