timisoara wireless survey
Post on 12-Apr-2017
260 Views
Preview:
TRANSCRIPT
Encryption• Open is Open
• WEP is broken since a long time, yet still somewhat used
• WPS is usually broken
WPA/WPA2 saves us ?• Algorithm is sound• Still could be bad implementations• PSK is widest used, same problem as with any password:
• Dictionaries• Bruteforce
• Just capture one 4-way handshake passively• Everything else offline• No forward secrecy
Economics of GPU-based cracking• DEFCON19, Robert "Hackajar" Imhoff-Dousharm, SanDisk Corporation,
“Economics of Password Cracking in the GPU Era”• Personal benchmarks:
• old MacBook Pro i7: 3700 hashes/s (on all 4 cores)• old GPU Nvidia GeForce GTX 560: 29K hashes/s• new GPU Nvidia GeForce GTX 980 Ti: 265K hashes/s
• With recently released oclHashCat2: 282K hashes/s
• Or you can use online services...
10 characters minimum• On my personal consumer GPU:
• 8 characters lower-case: 8.5 days• 10 characters lower-case: 15.8 years
Secure but leaking information• Phones• Mobile hotspots• *-PC_Network• Printers• TVs (who thought this was a good idea?)
• Where can I find myself a nice 40” Samsung TV?
HP Printers, oh my• Saw 156 HP Printers with wireless enabled.
• 93 of them had completely open wireless networks. That’s 60% completely open.• But it’s just a printer.
• No. It’s a linux device on or near your network.• Print/Scan/Fax logs• Maybe joined to your domain• It can probably run DOOM• DEFCON 19: From Printer To Pwnd: Leveraging Multifunction Printers During
Penetration Testing
Warwalking in 2015• Hardware needed: Android phone• Software needed: there are lots of apps for that• Wigle:
• https://wigle.net/• https://play.google.com/store/apps/details?id=net.wigle.wigleandroid• Website and android app. • Website currently holds 227,870,055 networks• Global stats: https://wigle.net/stats• Android app saves to a SQLite database
Data set• Gathered almost only in Timisoara during 2015• Wireless Networks (APs) seen: 36 184• Location database records: 170 712
• BSSID, SSID, GPS coordinates (best and all), signal strength, network advertised capabilities
• Have good ideas? Talk to me.
Current Stats
•https://maiebanatulfruncea.com/TimisoaraWirelessSurvey/
top related