WirelessDefence.org's Wireless Penetration Testing Framework

See
http://www.vulnerabilityassessment.co.uk for the full Penetration Testing Framework

Wireless Penetration

WLAN discovery

Airodump-ng
Kismet
Netstumbler
Ministumbler
Commview
Wifi Hopper
Wirelessmon
Airopeek
Wellenreiter

Unencrypted WLAN

Visible SSID

Sniff for IP range

MAC authorised

MAC filtering

Spoof valid MAC

Linux

ifconfig [interface] hw ether [MAC]

MAC ID changer

TMAC

SMAC

Hidden SSID

Deauth client

Aireplay-ng

aireplay -0 1 -a [Access Point MAC] -c [Client MAC] [interface]

Commview

Tools > Node reassociation

Void11

void11_penetration wlan0 -D -t 1 -B [MAC]

WEP encrypted WLAN

Visible SSID

Attempt WEPattack

wepattack -f [dumpfile] -m [mode] -w [wordlist] -n [network]

Capture / Inject packets

Break WEP

Aircrack-ng

aircrack -q -n [WEP key length] -b [BSSID] [pcap file]

Airsnort

Channel > Start

WEPcrack

WEPCrack.pl

Hidden SSID

Deauth client

Aireplay-ng

Commview

Tools > Node reassociation

Void11

WPA / WPA2 encrypted WLAN

Deauth client

Capture EAPOL handshake

WPA / WPA 2 dictionary attack

coWPAtty

cowpatty -r [pcap file] -f [wordlist] -s [SSID]

Aircrack-ng

aircrack-ng -a 2 -w [wordlist] [pcap file]

LEAP encrypted WLAN

Deauth client

Break LEAP

asleap

asleap -r [pcap file] -f dict.dat -n dict.idx

THC-LEAPcracker

leap-cracker -f [wordlist] -t [NT challenge response] -c [challenge]

802.1x WLAN

Create Rogue Access Point

Hotspotter

Deauth client

Associate client

Compromise client

Acquire passphrase / certificate

wzcook

Steal user's certificate

Key logger / Trojan

Karma

Deauth client

Associate client

Compromise client

Acquire passphrase / certificate

wzcook

Steal user's certificate

Key logger / Trojan

Linux rogue AP

Deauth client

Associate client

Compromise client

Acquire passphrase / certificate

wzcook

Steal user's certificate

Key logger / Trojan

Airsnarf

Deauth client

Associate client

Compromise client

Acquire passphrase / certificate

wzcook

Steal user's certificate

Key logger / Trojan