1 / 72

War Driving

War Driving. Tuesday 11/16, 2PM-3:30PM. Lee Barken, CISSP, MCP, CCNA, CPA Co-Director, STAR Center, San Diego State University http://starcenter.sdsu.edu. President, SoCalFreeNet.org http://www.SoCalFreeNet.org E-mail: barken@mail.com. War Driving. Tuesday 11/16, 2PM-3:30PM.

herrod-merritt
Download Presentation

War Driving

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. War Driving Tuesday 11/16, 2PM-3:30PM Lee Barken, CISSP, MCP, CCNA, CPA Co-Director, STAR Center, San Diego State University http://starcenter.sdsu.edu President, SoCalFreeNet.org http://www.SoCalFreeNet.org E-mail: barken@mail.com

  2. War Driving Tuesday 11/16, 2PM-3:30PM Lee Barken, CISSP, MCP, CCNA, CPA Co-Director, STAR Center, San Diego State University http://starcenter.sdsu.edu President, SoCalFreeNet.org http://www.SoCalFreeNet.org E-mail: barken@mail.com

  3. War Driving Tuesday 11/16, 2PM-3:30PM Lee Barken, CISSP, MCP, CCNA, CPA Co-Director, STAR Center, San Diego State University http://starcenter.sdsu.edu President, SoCalFreeNet.org http://www.SoCalFreeNet.org E-mail: barken@mail.com

  4. Why are we here? You are here

  5. Why are we here? • Why Do People War Drive? • Antenna Basics • Understanding the Protocol • Wardriving Tools & Techniques You are here

  6. Code of Ethics for Security Professionals • Act with honesty, integrity and professionalism at all times. • Personal curiosity is not an excuse to break the law. • Respect the power of information and be willing to share your knowledge for the advancement of the security field and the protection of society. • Honor and maintain the confidentiality of all client information that may be discovered during the course of an engagement. • Remember that even the smallest appearance of impropriety may result in damage to your reputation and the credibility of our profession. • If a little voice in your head tells you that you might not be doing the right thing—listen to that voice.

  7. Why Do People War Drive? “Good guys and not so good guys” • Because it’s fun • To learn about wireless technology • Looking for a place to check e-mail • Defending our network/Look for rogue APs • To gain unauthorized access / launch attacks / other criminal activity

  8. Why Do People War Drive? World Wide War Drive 4 • W W W D 4 June 12-19, 2004 • Total APs found: 228,537 • No WEP: 140,890 (61.6%) • Default SSID: 71,805 (31.4%)

  9. Why Do People War Drive? World Wide War Drive 4 • In San Diego……. 2 people • Total APs found: 19,148 • No WEP: 11,962 (62.47%) • Default SSID: 7,769 (40.57%)

  10. Antenna Basics Antennas do not “amplify” the signal– they merely “focus” the energy in a particular direction. Images courtesy:”Designing a Wireless Network”, Syngress Publishing.

  11. Antenna Basics Antennas - Isotropic Isotropic antenna: A hypothetical antenna that radiates or receives equally in all directions. Note: Isotropic antennas do not exist physically but represent convenient reference antennas for expressing directional properties of physical antennas.

  12. Antenna Basics Antennas - Omni 5 dBi “Magnetic Mount” 9 dBi 20 inches long 15.4 dBi 70 inches long

  13. Antenna Basics Antennas – Patch, Panel, Sector 19 dBi 15.5 inches square, 1.25 inches thick, 18 degree beam width 9.3 dBi 4.5 inches square, 60 degree beam width 16.5 dBi Beam Width: 95 Degrees (H), 7 Degrees (V)

  14. Antenna Basics Antennas – Parabolic Grid 24 dBi 8 degree beam width, 42” X 24”

  15. Antenna Basics Antennas – Yagi 14.5 dBi 18 inches long 12 dBi 16 inches long 14 dBi

  16. Antenna Basics Antennas – Phased Array

  17. Antenna Basics Antennas – Pringles Can

  18. Antenna Basics Antennas – Pringles Can

  19. Understanding the Protocol Association • “Open Network” • “Closed Network” (For simplification, I’m leaving out the “authentication” step in this presentation)

  20. Client Access Point Management Beacon Client Association Request Access Point Client Access Point Association Response Understanding the Protocol “Open Network”

  21. Client Access Point Probe Response Client Client Association Request Probe Request Access Point Access Point Client Access Point Association Response Understanding the Protocol “Closed Network”

  22. What’s the problem with RF? • Wireless signals don’t STOP at your walls. • Wi-Fi is like putting an Ethernet jack in your parking lot. San Francisco – Peter Shipley http://www.dis.org/filez/openlans.pdf Image courtesy: Computerworld

  23. What’s the problem with RF?

  24. What’s the problem with RF? http://www.dis.org/filez/openlans.pdf

  25. What’s the problem with RF? http://www.dis.org/filez/openlans.pdf

  26. Wardriving: Tools & Techniques Wardriving Trivia • “Wardriving” • “Access Point Discovery” • “Lan Jacking” • “WLAN Mapping” • etc. • War Games, 1983 movie introduced “War Dialing”.

  27. Wardriving: Tools & Techniques WarChalking Images Courtesy: http://www.warchalking.org

  28. Wardriving: Tools & Techniques WarFlying? Images Courtesy: http://www.arstechnica.com/wankerdesk/3q02/warflying-1.html

  29. Wardriving: Tools & Techniques WarStrollering? Images Courtesy: http://208.151.246.210/pictures/PersonalTelco/

  30. Wardriving: Tools & Techniques WarStrollering? Images Courtesy: http://208.151.246.210/pictures/PersonalTelco/

  31. Wardriving: Tools & Techniques WarSailing? Image courtesy: http://www.catalina42.org/war-sail/

  32. Wardriving: Tools & Techniques Image courtesy: http://www.catalina42.org/war-sail/

  33. Wardriving: Tools & Techniques Image courtesy: http://www.catalina42.org/war-sail/

  34. Wardriving: Tools & Techniques Image courtesy: http://www.catalina42.org/war-sail/

  35. Wardriving: Tools & Techniques What’s next?

  36. Discovering Wireless Networks “Open Network” • Easy! Just listen for Management Beacons. • (or send probe requests with SSID set to the word “any”) Management Beacon

  37. Discovering Wireless Networks “Closed Network” • You must get “lucky” and catch a legitimate association. Probe Request Probe Response Association Request Association Response

  38. Discovering Wireless Networks “Closed Network” • or… if you get impatient… spoof a disassociate frame Associated Disassociate

  39. Discovering Wireless Networks “Closed Network” • or… if you get impatient… spoof a disassociate frame Probe Request Probe Response Association Request Association Response

  40. Wardriving: Tools & Techniques Hardware – Wireless NIC Chipsets ADMtek • Abocom • Accton • Addtron • Belkin • D-Link • Hawking Tech • SMC • 3Com • Trendware • Xterasys Aironet (Cisco) • Cisco • Xircom Atheros • Accton • Actiontec • D-Link • Enterasys • GemTek • IBM Atheros (cont.) • Intel • Linksys • Netgear • Philips • Proxim • Senao/Engenius • SMC • 3Com • Z-com Atmel • Accton • Actiontec • Dell • Belkin • Cnet • Compaq • D-Link • GemTek • Hawking Tech • Intel Atmel (cont.) • Intel • Linksys • Netgear • SMC • 3Com • Trendware • Z-com Broadcom • Apple • Belkin • Buffalo • Dell • GemTek • Linksys • Microsoft • Motorola • Trendware Orinoco • Apple • Buffalo Orinoco (cont.) • Compaq • D-Link • Dell • Enterasys • HP • Lucent/Agere • Proxim • Sony • 2Wire Prism • Abocom • Accton • Actiontec • Belkin • Buffalo • Compaq • D-Link • Dell • Gateway • GemTek Prism (cont.) • Hawking Tech • Intel • Linksys • Netgear • Proxim • Senao/Engenius • SMC • 3Com • Trendware • US Robotics • Z-com Realtek • Abocom • Accton • Belkin • Bromax • D-Link • Linksys • Netgear • Zonet A very complete list: http://www.linux-wlan.org/docs/wlan_adapters.html.gz

  41. Wardriving: Tools & Techniques Hardware – Wireless NIC Chipsets Hermes (Lucent) • Orinoco • Toshiba • Cabletron • Dell • Compaq WL110 • IBM • Apple Prism (Intersil) • Dlink • Linksys • SMC • Addtron • Compaq WL100 • Netgear • Gemtek • Zoom • Samsung • Senao Airo (Cisco) • Cisco • Xircom • Dell

  42. Wardriving: Tools & Techniques Hardware – Pigtails

  43. Wardriving: Tools & Techniques Hardware – Pigtails

  44. Wardriving: Tools & Techniques Hardware – Pigtails

  45. Wardriving: Tools & Techniques Hardware – Antennas

  46. Wardriving: Tools & Techniques Hardware – GPS

  47. Wardriving: Tools & Techniques Software – Netstumbler • http://www.netstumbler.com • FREE • Notebook & PDA Version • Windows 2000, XP • Orinoco, Prism Chipset • “Most” Cards Work w/XP (YMMV) • GPS Support

  48. Wardriving: Tools & Techniques Software – APSniff • http://www.bretmounet.com/apsniff • FREE • Notebook Version • Windows 2000 Only • Prism Chipset

  49. Wardriving: Tools & Techniques Software – Aerosol • http://www.stolenshoes.net/sniph/aerosol.html • FREE • Notebook Version • Windows • Prism & Hermes Chipset

More Related