MITM/Wireless/Network Tap - Revision history

Unknown user: Admin moved page Man in the Middle/Wireless/Network Tap to MITM/Wireless/Network Tap

2022-03-05T20:41:17Z

Admin moved page Man in the Middle/Wireless/Network Tap to MITM/Wireless/Network Tap

← Older revision	Revision as of 20:41, 5 March 2022
(No difference)

Admin: /* Network Bridge */

2015-08-25T18:36:27Z

Network Bridge

← Older revision		Revision as of 18:36, 25 August 2015
Line 40:		Line 40:

	===Network Bridge===		===Network Bridge===






			<!--


	now we add a bridge device using <code>brctl</code>:		now we add a bridge device using <code>brctl</code>:
Line 67:		Line 75:
	</pre>		</pre>


			-->

Admin: /* Network Bridge */

2015-08-25T18:35:51Z

Network Bridge

← Older revision		Revision as of 18:35, 25 August 2015
Line 61:		Line 61:
	</pre>		</pre>

			and bring the bridge online:

			<pre>
			$ service networking restart
			</pre>

Admin: /* Setup */

2015-08-25T18:35:10Z

Setup

← Older revision		Revision as of 18:35, 25 August 2015
Line 38:		Line 38:

	Our hapless sheep is enthralled by the prospect of free wifi, so the sheep connects.		Our hapless sheep is enthralled by the prospect of free wifi, so the sheep connects.

			===Network Bridge===

			now we add a bridge device using <code>brctl</code>:

			<pre>
			$ brctl addbr br0
			</pre>

			we edit the network interfaces:

			<pre>
			$ vim /etc/network/interfaces
			</pre>

			and add the following lines:

			<pre>
			auto br0
			iface br0 inet dhcp
			bridge_ports wlan5 eth0 up
			</pre>

Admin: /* Wireless Access Point */

2015-08-25T18:31:26Z

Wireless Access Point

← Older revision		Revision as of 18:31, 25 August 2015
Line 25:		Line 25:
	3. sniff		3. sniff

	==Wireless Access Point==		===Wireless Access Point===

	We can create a wireless access point with our wireless card by using airbase-ng.		We can create a wireless access point with our wireless card by using airbase-ng.

Admin: /* =Wireless Access Point */

2015-08-25T18:31:03Z

=Wireless Access Point

← Older revision		Revision as of 18:31, 25 August 2015
Line 25:		Line 25:
	3. sniff		3. sniff

	===Wireless Access Point==		==Wireless Access Point==

			We can create a wireless access point with our wireless card by using airbase-ng.

			We specify the MAC address and ESSID of the resulting access point.

			<pre>
			$ airbase-ng -a <MAC for our access point> -c <channel> -e 'testing' wlan5
			</pre>

			Now we can take a look at the available networks on the Sheep, and we'll see "testing" show up as an unencrypted wireless network.

			Our hapless sheep is enthralled by the prospect of free wifi, so the sheep connects.

	~~We can create this with airbase-ng~~

Admin at 18:28, 25 August 2015

2015-08-25T18:28:52Z

← Older revision		Revision as of 18:28, 25 August 2015
Line 3:		Line 3:
	Just as a phone tap is a physical bug installed on a phone line, and an ethernet tap is a physical device with two ethernet ports physically on the network, a wireless tap is a physical device with a wireless connection to both the attacker and their authentic network device (the router, modem, etc.)		Just as a phone tap is a physical bug installed on a phone line, and an ethernet tap is a physical device with two ethernet ports physically on the network, a wireless tap is a physical device with a wireless connection to both the attacker and their authentic network device (the router, modem, etc.)

	The [[Evil Twin]] attack creates a fake access point to act as a wireless tap. See the [[Evil Twin]] page for information on how the Evil Twin attack is set up, how the sheep is connected to the evil twin, and how the network bridge (the actual software tap device) is installed.		=Configurations=

			==Wired-Wireless Configuration==

			This involves creating a wireless access point, plus a corresponding network tap device, on the attacker's machine. The attacker can then bridge the network tap and the ethernet device, and bridge the two devices. In this way, when a sheep connects to the access point all of their traffic will be forwarded through the access point, allowing a MITM attack to occur.

			==Wireless-Wireless Configuration==

			In this configuration you're bridging two wireless devices to create a wireless network tap. This is gonna be slow...

			=Wired-Wireless Configuration=

			==Setup==

			To set this up we need three things:

			1. be able to turn wireless device into an access point with airbase-ng

			2. bridge network traffic from wireless ap to ethernet

			3. sniff

			===Wireless Access Point==

			We can create this with airbase-ng

Admin at 16:12, 25 August 2015

2015-08-25T16:12:12Z

← Older revision		Revision as of 16:12, 25 August 2015
Line 4:		Line 4:

	The [[Evil Twin]] attack creates a fake access point to act as a wireless tap. See the [[Evil Twin]] page for information on how the Evil Twin attack is set up, how the sheep is connected to the evil twin, and how the network bridge (the actual software tap device) is installed.		The [[Evil Twin]] attack creates a fake access point to act as a wireless tap. See the [[Evil Twin]] page for information on how the Evil Twin attack is set up, how the sheep is connected to the evil twin, and how the network bridge (the actual software tap device) is installed.





			{{MITMFlag}}

Admin: Created page with "Installing a wireless network tap involves the attacker placing a physical device between the target and the network device they're trying to communicate with. Just as a phon..."

2015-08-25T16:11:18Z

Created page with "Installing a wireless network tap involves the attacker placing a physical device between the target and the network device they're trying to communicate with. Just as a phon..."

New page

Installing a wireless network tap involves the attacker placing a physical device between the target and the network device they're trying to communicate with.

Just as a phone tap is a physical bug installed on a phone line, and an ethernet tap is a physical device with two ethernet ports physically on the network, a wireless tap is a physical device with a wireless connection to both the attacker and their authentic network device (the router, modem, etc.)

The [[Evil Twin]] attack creates a fake access point to act as a wireless tap. See the [[Evil Twin]] page for information on how the Evil Twin attack is set up, how the sheep is connected to the evil twin, and how the network bridge (the actual software tap device) is installed.