Cyberstudy
PDF p.353 In progress

Wireless Attacks

Open PDF at p.353 17 flashcards

Summary

PDF p.353

Wireless networks face unique security challenges and are common targets for various attacks, including rogue access points, wireless denial of service (DoS) attacks, and replay attacks aimed at key recovery.

Detailed explanation

PDF p.353
  • Rogue Access Points
    • Definition: Unauthorized access points installed on the network.
    • Evil Twin: A rogue access point masquerading as a legitimate one.
      • Techniques: Typosquatting, SSID stripping, DoS to overcome legitimate access points.
      • BSSID Spoofing: Spoofs the MAC address of the access point's radio.
      • Detection: Physical inspections, Wi-Fi analyzers, wireless intrusion protection systems.
  • Wireless Denial of Service (DoS)
    • Definition: Prevents clients from connecting to legitimate access points.
    • Interference: Can be unintentional or intentional (jamming with a stronger signal).
    • Disassociation Attacks
      • Mechanism: Exploits lack of encryption in management frames to send spoofed frames.
      • Effects: Disconnects clients from the network.
      • Variants: Single victim disassociation, broadcast disassociation.
      • Combination: May be used with replay attacks to recover network keys.
  • Wireless Replay and Key Recovery
    • Definition: Captures hashes used in wireless authentication to crack them offline.
    • KRACK Attack
      • Mechanism: Targets WPA and WPA2 4-way handshake.
      • Effectiveness: Works on both personal and enterprise authentication mechanisms.
      • Mitigation: Ensure clients and access points are fully patched.

Important terms

taken from the text above
Rogue Access Points
Unauthorized access points installed on the network.
Evil Twin
A rogue access point masquerading as a legitimate one.
BSSID Spoofing
Spoofs the MAC address of the access point's radio.
Wireless Denial of Service (DoS)
Prevents clients from connecting to legitimate access points.
Interference
Can be unintentional or intentional (jamming with a stronger signal).
Effects
Disconnects clients from the network.
Variants
Single victim disassociation, broadcast disassociation.
Combination
May be used with replay attacks to recover network keys.
Wireless Replay and Key Recovery
Captures hashes used in wireless authentication to crack them offline.
Effectiveness
Works on both personal and enterprise authentication mechanisms.
DoS Denial of Service

What I should remember

Key Points PDF p.353
  • Rogue Access Points
    • Unauthorized: Installed without permission.
    • Evil Twin: Masquerades as legitimate.
    • Detection: Physical inspections, Wi-Fi analyzers.
  • Wireless DoS
    • Interference: Disrupts legitimate connections.
    • Disassociation Attacks: Spoofed frames to disconnect clients.
  • Wireless Replay and Key Recovery
    • Replay Attacks: Capture and crack authentication hashes.
    • KRACK Attack: Targets WPA/WPA2 handshake.
    • Mitigation: Patch clients and access points.