捕鱼达人2免费单机旧版

書名： BackTrack 5 Wireless Penetration Testing Beginner's Guide
作者名： Vivek Ramachandran
本章字?jǐn)?shù)： 579字
更新時(shí)間： 2021-04-02 18:48:46

Time for action – sniffing data packets for our network

In this exercise, we will learn how to sniff Data packets for a given wireless network. For the sake of simplicity, we will look at packets without any encryption.

Follow these instructions to get started:

Switch on the access point we had named Wireless Lab. Let it remain configured to use no encryption.
We will first need to find the channel on which the Wireless Lab access point is running on. To do this, open a terminal and run airodump-ng --bssid 00:21:91:D2:8E:25 mon0 where 00:21:91:D2:8E:25 is the MAC address of our access point. Let the program run, and shortly you should see your access point shown on the screen along with the channel it is running on:
We can see from the preceding screenshot that our access point Wireless Lab is running on Channel 11. Note that this may be different for your access point.
In order to sniff data packets going to and fro from this access point, we need to lock our wireless card on the same channel that is channel, 11. To do this run the command iwconfig mon0 channel 11 and then run iwconfig mon0 to verify the same. You should see the value Frequency: 2.462 GHz in the output. This corresponds to Channel 11:
Now fire up Wireshark and start sniffing on the mon0 interface. After Wireshark has started sniffing the packets, apply a filter for the bssid of our access point as shown next using wlan.bssid == 00:21:91:D2:8E:25 in the filter area. Use the appropriate MAC address for your access point:
In order to see the data packets for our access point, add the following to the filter (wlan.bssid == 00:21:91:d2:8e:25) && (wlan.fc.type_subtype == 0x20). Open your browser on the client laptop and type in the management interface URL of the access point. In my case, as we saw in Chapter 1, it is http://192.168.0.1. This will generate data packets that Wireshark will capture:
As you can see, packet sniffing allows us to analyze unencrypted data packets very easily. This is the reason why we need to use encryption in wireless.

What just happened?

We have just sniffed data packets over the air with Wireshark using various filters. As our access point is not using any encryption, we are able to see all the data in plain text. This is a major security issue as anyone within RF range of the access point can see all the packets if he uses a sniffer like Wireshark.

Have a go hero – analyzing data packets

Use Wireshark to analyze the data packets further. You would notice that a DHCP request is made by the client and if a DHCP server is available, it responds with an address. Then you would find ARP packets and other protocol packets on the air. This is a nice and simple way to do passive host discovery on the wireless network. It is important to be able to see a packet trace and reconstruct how applications on the wireless host are communicating with the rest of the network. One of the interesting features Wireshark provides is to "Follow a Stream". This allows you to view multiple packets together, which are part of a TCP exchange, in the same connection.

Also, try logging into gmail.com or any other popular website and analyze the data traffic generated.

We will now see a demonstration of how to inject packets into a wireless network.

官术网_书友最值得收藏!

BackTrack 5 Wireless Penetration Testing Beginner's Guide

Time for action – sniffing data packets for our network

What just happened?

Have a go hero – analyzing data packets