Let’s Talk Wireless Pentesting Equipment

Let’s Talk Wireless Pentesting Equipment






It seems like more and more often I get asked what equipment I utilize for performing wireless penetration tests (802.11 wireless networking). In this post I will talk about the equipment I use, where to buy it, and some brief information about each tool.

EQUIPMENT

Crazyradio PA

  • Cost – $37
  • Amazon purchase link
  • Utilized to perform a MouseJack exploit (keystroke injection) against vulnerable devices. Check out our White Oak Security blog post on this. Due to wireless engagements being onsite, I tend to utilize this tool to demonstrate to clients what a physical presence to the building could be utilized to perform an attack.

Panda Wireless PAU09 N600

  • Cost – $40
  • Amazon purchase link
  • Utilized to test against various wireless technologies (WEP, WPA, WPA2-PSK, WPA2-Enterprise)
  • I carry two of these around on my wireless engagements. Utilizing one of the cards to perform monitoring and another card to perform injection attacks.

WiFi Pineapple

  • Cost – $99
  • Hak5 purchase link
  • All in one wireless pentesting platform
  • Utilized primarily when targeting WPA2-Enterprise networks. The software included makes it easy to stand up a fake access point in an attempt to capture enterprise credentials.

GlobalSat GPS Receiver

  • Cost – $31
  • Amazon purchase link
  • USB GPS receiver
  • Utilized to capture GPS coordinates of logged access points. This can be imported into a mapping software to display the access points around a clients physical building.

CLOSING

These are the tools I utilize when performing a wireless penetration test (depending on the goal of the assessment). In the next series of wireless blog posts I will dive into executing the toolsets and specific items to look for when performing a wireless penetration test.



#IoT #PenTest #cybersecurity #infosec #AI #technology #MachineLearning #IIoT #Python #RPA #javascript #wireless #equipment #Analytics #NLP #RStats #DL #100DaysOfCode

 

Comments

Popular posts from this blog

TOP 20 ARTIFICIAL INTELLIGENCE RESEARCH LABS IN THE WORLD IN 2021

28 Deep Learning Interview Questions Recruiters are Asking in 2021

Success In Pentesting: Learn To Code