V/Scan for Wireless LANs

From: Ian Chilvers (Ian.Chilvers_at_prolateral.com)
Date: 07/18/03

  • Next message: Morgan, Andy: "RE: V/Scan for Wireless LANs" 
    To: <pen-test@securityfocus.com>
Date: Fri, 18 Jul 2003 13:18:37 +0100

    Hi all

    We've been asked to perform a vulnerability assessment for a company that
    has a Wireless LAN. The W/LAN is running WEP with a random key generated,
    rather than a dictionary word.

    Are there any tools out there that can brute force a WEP.

    Take this example. A person parks the car in the car park and sniffs the
    air waves with a product like NetStumbler. He discovers the W/LAN but with
    WEP.

    Is there a tool he can use to discover the WEP key (possible by brute force)

    If there isn't such a tool, how does this sound for an idea.

    Run a app that starts at binary 0's and counts upto 128bits of 1's
    For each sequence listen to see if there are any sensible packets or even
    send out a DHCP discover request to see if you get a reply. This would then
    possibly give you the WEP key.

    Any comments

    Ian....

    ---------------------------------------------------------------------------
    KaVaDo is the first and only company that provides a complete and an
    integrated suite of Web application security products, allowing you to:
     - assess your entire Web environment with a Scanner,
     - automatically set positive security policies for real-time protection,
       and
     - maintain such policies at the Application Firewall without compromising busines performance.
     
    For more information on KaVaDo and to download a FREE white paper on Web applications - security policy automation, please visit:
    http://www.kavado.com/ad.htm
    ----------------------------------------------------------------------------

  • Next message: Morgan, Andy: "RE: V/Scan for Wireless LANs"

    Relevant Pages

    • Strange logon attempts to Win2k server
      ... This server is an Exchange server with port 25 accessible from the ... Are there any tools out there that can brute force a WEP. ... Is there a tool he can use to discover the WEP key (possible by brute ... integrated suite of Web application security products, ...
      (Pen-Test)
    • RE: V/Scan for Wireless LANs
      ... I broke WEP in 7 hours by forcing new IVs. ... - automatically set positive security policies for real-time protection, ... For more information on KaVaDo and to download a FREE white paper on Web ...
      (Pen-Test)
    • RE: 802.11i research papers
      ... IT Infrastructure - Network Design ... Subject: 802.11i research papers ... with WPA which is the replacement to WEP (TKIP is ... WEP and other security features that the protocol has implemented. ...
      (Security-Basics)
    • RE: Wireless Security for Home Users
      ... User 128-bit WEP if your equipment supports it. ... the casual wardrivers to pass you by; there's always an unencrypted network ... Use any vendor-specific security improvements available to you. ... I believe if you use a 3Com WAP and 3Com client cards, ...
      (Security-Basics)
    • RE: Wireless LAN Security for Warehouse
      ... WEP implementations do not create weak IV's that are typically used to crack ... Adding additional layers like IPSEC or VPN can add to the security as well, ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
      (Security-Basics)