Kali Linux Wireless Penetration Testing Cookbook: Identify and assess vulnerabilities present in your wireless network, Wi-Fi, and Bluetooth enabled devices to improve your wireless security by Sean-Philip Oriyano

Author:Sean-Philip Oriyano [Oriyano, Sean-Philip]
Language: eng
Format: epub
Publisher: Packt Publishing
Published: 2017-12-13T00:00:00+00:00

Its problems arise from the following circumstances:

The protocol was designed without review from experienced cryptologists, the academic community, or even the public.

It provides no clearly-defined method for key distribution (such as centralized key management) other than pre-shared keys, which must be input manually into each station. As a result, the keys are cumbersome to change on a large scale and thus rarely changed.

Its design makes it possible to passively uncover the key using sniffing tools and cracking tools available freely in operating systems, such as the Linux-based Kali.

Key generators used by different vendors are inconsistently and poorly designed, leading to vulnerabilities such as issues with the use of 40-bit keys.

The algorithms used to perform key scheduling have been shown to be vulnerable to attack.

CRC32 used in the integrity checking is flawed, and with slight modifications packets may be modified consistently by an attacker to produce their desired results.

Initialization Vectors (IVs) are only 24-bits in length, meaning that an entire pool of IVs can be exhausted by a mildly active network in five hours or less.

It is susceptible to known plaintext attacks through the analysis of packets.

Keys may be uncovered through the analysis of packets, allowing for the creation of a decryption table.

It is susceptible to denial of service attacks through the use of associate and disassociate messages, which are not authenticated by WEP.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.