From charlesreid1

No edit summary
No edit summary
Line 3: Line 3:
Just as a phone tap is a physical bug installed on a phone line, and an ethernet tap is a physical device with two ethernet ports physically on the network, a wireless tap is a physical device with a wireless connection to both the attacker and their authentic network device (the router, modem, etc.)
Just as a phone tap is a physical bug installed on a phone line, and an ethernet tap is a physical device with two ethernet ports physically on the network, a wireless tap is a physical device with a wireless connection to both the attacker and their authentic network device (the router, modem, etc.)


The [[Evil Twin]] attack creates a fake access point to act as a wireless tap. See the [[Evil Twin]] page for information on how the Evil Twin attack is set up, how the sheep is connected to the evil twin, and how the network bridge (the actual software tap device) is installed.
=Configurations=


==Wired-Wireless Configuration==
This involves creating a wireless access point, plus a corresponding network tap device, on the attacker's machine. The attacker can then bridge the network tap and the ethernet device, and bridge the two devices. In this way, when a sheep connects to the access point  all of their traffic will be forwarded through the access point, allowing a MITM attack to occur.
==Wireless-Wireless Configuration==
In this configuration you're bridging two wireless devices to create a wireless network tap. This is gonna be slow...
=Wired-Wireless Configuration=
==Setup==
To set this up we need three things:
1. be able to turn wireless device into an access point with airbase-ng
2. bridge network traffic from wireless ap to ethernet
3. sniff
===Wireless Access Point==
We can create this with airbase-ng





Revision as of 18:28, 25 August 2015

Installing a wireless network tap involves the attacker placing a physical device between the target and the network device they're trying to communicate with.

Just as a phone tap is a physical bug installed on a phone line, and an ethernet tap is a physical device with two ethernet ports physically on the network, a wireless tap is a physical device with a wireless connection to both the attacker and their authentic network device (the router, modem, etc.)

Configurations

Wired-Wireless Configuration

This involves creating a wireless access point, plus a corresponding network tap device, on the attacker's machine. The attacker can then bridge the network tap and the ethernet device, and bridge the two devices. In this way, when a sheep connects to the access point all of their traffic will be forwarded through the access point, allowing a MITM attack to occur.

Wireless-Wireless Configuration

In this configuration you're bridging two wireless devices to create a wireless network tap. This is gonna be slow...

Wired-Wireless Configuration

Setup

To set this up we need three things:

1. be able to turn wireless device into an access point with airbase-ng

2. bridge network traffic from wireless ap to ethernet

3. sniff

=Wireless Access Point

We can create this with airbase-ng