Wireless Reconnaissance in Penetration Testing

Wireless Reconnaissance in Penetration Testing

Matthew Neely

Language: English

Pages: 226

ISBN: 1597497312

Format: PDF / Kindle (mobi) / ePub


In many penetration tests, there is a lot of useful information to be gathered from the radios used by organizations. These radios can include two-way radios used by guards, wireless headsets, cordless phones and wireless cameras. Wireless Reconnaissance in Penetration Testing describes the many ways that a penetration tester can gather and apply the information available from radio traffic. Stopping attacks means thinking like an attacker, and understanding all the ways that attackers gather information, or in industry terms profile, specific targets. With information from what equipment to use and how to find frequency information, to tips for reducing radio information leakage, to actual case studies describing how this information can be used to attack computer systems, this book is the go-to resource for penetration testing and radio profiling.

  • Author Matthew Neely is a respected and well-known expert and speaker on radio reconnaissance and penetration testing
  • Includes real-world case studies of actual penetration tests using radio profiling
  • Covers data leakage, frequency, attacks, and information gathering

Governing Insecurity in Japan: The Domestic Discourse and Policy Response

Mobile Phone Security and Forensics: A Practical Approach

Social Engineering: The Art of Human Hacking

Network Know-How: An Essential Guide for the Accidental Admin

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Wireless headsets if in scope, and any other radio traffic that may emanate from the target organization. This profiling does not require a special trip; it should be included in the normal onsite profiling that is part of any physical penetration test. Initial Onsite Reconnaissance With any reconnaissance, it is essential to have an idea of what to look for. There are several things that you should keep an eye out for on any onsite reconnaissance mission. Be sure to determine the number.

Special VLAN and therefore the radio dispatch system. These special network jacks were also placed in secure locations where not anyone could plug-in and use them. So in an emergency they know they could go to these locations to gain access to the dispatch system. This VLAN was also given a high Quality of Service (QoS) priority on the network, to ensure the dispatch traffic was not dropped when the network got congested. We debated using a VPN but the vendor would not guarantee it would work.

Or radiates. RF Gain Control that continuously varies receiver sensitivity. Rubber Duck (Rubber Ducky) A type of antenna, the rubber duck is an electrically short monopole antenna which is sealed in a rubber housing. There is debate as to where the name rubber duck originated. S S-Meter A graph that shows the relative strength of a signal at reception. Scanner a radio receiver that switches between multiple channels or frequencies, stopping when there is activity on the channel or.

Cameras, 47 Coax cables, 111 Common business ranges, 79 cordless phone, 80 headset ranges, 80 Common frequency range searching, 76 dot frequencies, 79, 78–79 FRS, 76–77 GMRS, 77 frequencies, 77 repeater inputs, 78 MURS, 78 frequencies, 78 Continuous Tone-Coded Squelch System (CTCSS), 35, 36, 101 Control Channel Only (CCO), 81 Cordless phones, 3, 46, 80 CTCSS. See Continuous Tone-Coded Squelch System D Data Encryption Standard (DES), 32 dB. See Decibel DCS. See Digital Code.

TETRA, 127–128, 128 Digital signal processor (DSP), 133–134 Digital Speech Decoder (DSD), 127–128 Digital wireless protocols Bluetooth, 130 Ubertooth, 130, 130–131 DECT, 128–129 broken-by-design security model, 129 DECT Standard Cipher (DSC), 129 Zigbee, 131 Atmel RZUSBSTICK, 131, 132 KillerBee framework, 131, 132 Digital-Coded Squelch (DCS), 35 Dipole antennas, 28 Direct-Sequence Spread Spectrum (DSSS), 33 Directional antennas, 26, 27 cantenna, 28–29 panel and wave guide, 28–29,.

Download sample

Download