Hacking: The Next Generation (Animal Guide) by Nitesh Dhanjani; Billy Rios; Brett Hardin

Author:Nitesh Dhanjani; Billy Rios; Brett Hardin
Language: eng
Format: mobi
Tags: Computer hackers, Internet - Security measures, Networking, Reference:Computers, Computer networks, Computers, General, Computer security, Internet, Security, Security measures
ISBN: 9780596154578
Publisher: O'Reilly Media, Inc.
Published: 2009-09-01T09:06:05.383000+00:00

Your Employees Are on My Network

When your employees join a Wi-Fi network at their favorite coffee shop, airport, hotel, or any place that offers a Wi-Fi hotspot, they are in fact joining a hostile network. The logo or the organization sponsoring the hotspot is irrelevant, as despite that organization’s best intentions, once an attacker joins the network all of the other users of the network are at risk. Most hotspots have little or no protection mechanisms to defend or segregate users from each other. The majority of the organizations that provide hotspots simply do not have the staffing, technical expertise, or inclination to detect even the most blatant attacks on their networks. Once an attacker has connected to the hotspot, she is free to passively sniff the wireless network for juicy information to fly by on the “wire,” she can initiate active network-based attacks such as Address Resolution Protocol (ARP) poisoning, and she can even identify individual targets sharing the Wi-Fi network and begin active, targeted attacks against those hosts.

The initial footprinting and targeting of open hotspots is painless and simple. Open wireless networks (such as those found at your favorite coffee shop, hotel, or airport) are designed to make the connection process user-friendly and easy. Once an attacker has identified an organization she wishes to attack, a number of public services are available to help her narrow her attack to hotspots that are likely to yield promising returns.

Note

Using a service such as Wi-FiHotSpotList.com, an attacker can find all of the wireless access points near a targeted organization. Wi-FiHotSpotList.com shows only U.S. locations, but other sites can provide hotspot locations for Europe and Asia.

Figure 6-1 shows all the Wi-Fi access points near a major software company in Redmond.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.