Slashdot Mirror

http://www.dachb0den.com/projects/scard/smartcards .ppt

What's up with tcpdump and friends, snort, kismet, bsd-airtools and ethereal anyway?

I thought opinions were supposed to go in the comments Cowboy...

In any case, anyone who has used the BSD-airtools package would likely argue differently...

dstumbler is a wardriving/netstumbling/lanjacking utility for bsd operating systems that attempts to provide features similar to netstumbler in a fast and easy to use curses based application. it is part of the bsd-airtools package released by Dachb0den Labs, which provides a complete bsd based tool set for 802.11b penetration testing.

• color s/n graphs
• detection of weped networks
• detects the beacon interval for aps
• detects the maximum supported rate for aps (with prism2 cards in scan mode)
• reports if the ssid of a network is default
• export/import to wi-scan'esque log format
• support for prism2 cards (without wep detection)
• interactive display of ap statistics
• intuitive navigation hotkeys
• nmea gps support
• monitor mode support for prism2 cards
• /dev/speaker audio support for reporting detected aps and nodes
• realtime logging to file (for wi-scan'esque compatibility)
• detection of weped and adhoc networks
• detection of nodes on bss networks
• detects if a bss network uses shared or keyed authentication
• detects the maximum supported rate of aps and nodes
• detects the beacon interval for aps
• detects if bss nodes are set to connect to any network or a specified one
• partial detection of 40-bit or 104-bit encryption

dstumbler is a wardriving/netstumbling/lanjacking utility for bsd operating systems that attempts to provide features similar to netstumbler in a fast and easy to use curses based application. it is part of the bsd-airtools package released by Dachb0den Labs, which provides a complete bsd based tool set for 802.11b penetration testing.

• color s/n graphs
• detection of weped networks
• detects the beacon interval for aps
• detects the maximum supported rate for aps (with prism2 cards in scan mode)
• reports if the ssid of a network is default
• export/import to wi-scan'esque log format
• support for prism2 cards (without wep detection)
• interactive display of ap statistics
• intuitive navigation hotkeys
• nmea gps support
• monitor mode support for prism2 cards
• /dev/speaker audio support for reporting detected aps and nodes
• realtime logging to file (for wi-scan'esque compatibility)
• detection of weped and adhoc networks
• detection of nodes on bss networks
• detects if a bss network uses shared or keyed authentication
• detects the maximum supported rate of aps and nodes
• detects the beacon interval for aps
• detects if bss nodes are set to connect to any network or a specified one
• partial detection of 40-bit or 104-bit encryption

http://www.ipsec.co.jp/products/ssh/cert/vulnerabi lity.html

Here is an even cuter, step-by-step explanation of how to BRUTE-FORCE CRACK the IV and RC4 encryption in less than 1 MINUTE!

http://www.dachb0den.com/projects/bsd-airtools/wep exp.txt

and the author even provides you with some auditing tools... for your network of course!

http://www.dachb0den.com/projects/bsd-airtools.htm l

Padding your keys with any number, especially zero, is not a good encryption scheme. Did I mention that RC4 calls for this? It did wonders for the Windows password file. LOL!

http://etudiant.univ-mlv.fr/~ecorreia/toto.html

Want more examples? Email me. It's just not a good algorithm. Unless under some kind of special condition, AES, Blowfish, or something else should be used instead.

Thank you for your time,

Quadgoatboy

http://www.ipsec.co.jp/products/ssh/cert/vulnerabi lity.html

Here is an even cuter, step-by-step explanation of how to BRUTE-FORCE CRACK the IV and RC4 encryption in less than 1 MINUTE!

http://www.dachb0den.com/projects/bsd-airtools/wep exp.txt

and the author even provides you with some auditing tools... for your network of course!

http://www.dachb0den.com/projects/bsd-airtools.htm l

Padding your keys with any number, especially zero, is not a good encryption scheme. Did I mention that RC4 calls for this? It did wonders for the Windows password file. LOL!

http://etudiant.univ-mlv.fr/~ecorreia/toto.html

Want more examples? Email me. It's just not a good algorithm. Unless under some kind of special condition, AES, Blowfish, or something else should be used instead.

Thank you for your time,

Quadgoatboy

Heck, I'm still waiting for a good program to use with OSX to do WarDriving with 802.11b.

http://lists.dachb0den.com/pipermail/bat/2002-Apri l/000202.html

Most likely the problem is environmental, appears that signal strength is good, but noise is also high, according to dstumbler.

I'm hoping to get a free eval of some of the Cisco products in the next month or so.