Sheetal - Wirelesss Hacking - ClubHack2008
4 likes1,334 views
The document summarizes a presentation on wireless security. It discusses wireless standards like 802.11b, 802.11a, and 802.11g and security standards like WEP, WPA, and WPA2. It describes vulnerabilities in WEP like weak IVs and keys. It also explains attacks like identity theft through MAC spoofing and defenses like strong encryption, authentication, and monitoring.
![© ClubHack http://clubhack.com Thank You! [email_address] [email_address]](https://image.slidesharecdn.com/sheetalclubhack08-100708145723-phpapp02/85/Sheetal-Wirelesss-Hacking-ClubHack2008-45-320.jpg)
Sheetal - Wirelesss Hacking - ClubHack2008
- 1. Wireless Security Workshop Rohit Srivastwa Sheetal Joseph © ClubHack http://clubhack.com 7 th December 2008
- 2. Roadmap Wireless Overview Wireless Security Standards Exploiting Wireless Vulnerabilities Wireless Best Practices © ClubHack http://clubhack.com
- 3. Wireless - The World of Convenience! User mobility Reduced cost Flexibility and convenience Increase the productivity Wireless devices use Radio Frequency (RF) technology to facilitate communication. © ClubHack http://clubhack.com
- 4. Wireless Standards 802.11b – Transmits at 2.4 GHz, sends data up to 11 Mbps using direct sequence spread spectrum modulation. 100 -150 feet range 802.11a – Transmits at 5 GHz and send data up to 54 Mbps using orthogonal frequency division multiplexing (OFDM). 50-75 feet range. Not interoperable is 802.11b. 802.11g – Combines features of both standards (a,b), 2.4 GHz frequency, 54 Mbps Speed, 100-150 feet range and is interoperable with 802.11b. 802.11i – Improves WEP encryption by implementing Wi-Fi Protected Access (WPA2). Data encryption with Advanced Encryption Standard (AES). 802.11n – 600 Mbps speed by adding multiple-input multiple-output (MIMO) and Channel-bonding/40 MHz operation to the physical (PHY) layer, and frame aggregation to the MAC layer. 802.11n uses WPA and WPA2 to secure the network. © ClubHack http://clubhack.com
- 5. Latest Wireless Hacks Email sent before the Ahmedabad & Delhi bombings sent via a hacked wireless connection TJX theft tops 45.6 million card numbers http://www.tjx.com/tjx_message.html © ClubHack http://clubhack.com
- 6. Types of Attacks Identity theft (MAC spoofing) - Cracker is able to listen in on network traffic and identify the MAC address of a computer and attack after spoofing the same Man-in-the-middle attacks - Cracker entices clients to log into a computer set up as an AP Once this is done, the hacker connects to a real AP through another wireless card offering a steady flow of traffic. Denial of service - Cracker continually bombards a targeted AP with bogus requests, premature successful connection messages, failure messages, and/or other commands. © ClubHack http://clubhack.com
- 7. Wireless Security Goals Access Control - Ensure that your wireless infrastructure is not mis-used. This calls for Efficient Key Management Data Integrity - Ensure that your data packets are not modified in transit. Confidentiality - Ensure that the contents of your wireless traffic is not learned. Proper Encryption mechanisms need to be implemented. © ClubHack http://clubhack.com
- 8. Wireless Security Standards © ClubHack http://clubhack.com
- 9. Description of WEP Protocol WEP relies on a shared secret key (64 bit/128 bit) which is shared between the sender (Mobile Station) and the receiver (Access Point). Secret Key - to encrypt packets before they are transmitted Integrity Check - to ensure packets are not modified in transit. The standard does not discuss how shared key is established. In practice, most installations use a single key which is shared between all mobile stations and access points. © ClubHack http://clubhack.com
- 10. CHAP Authentication © ClubHack http://clubhack.com Supplicant Authenticator username challenge response Accept/reject
- 11. How WEP works © ClubHack http://clubhack.com IV RC4 key IV encrypted packet original unencrypted packet checksum
- 12. Deficiencies of WEP IV is too short and not protected from reuse. The per packet key is constructed from the IV, making it susceptible to weak key attacks. No effective detection of message tampering (message integrity). No built-in provision to update the keys in all wireless clients connected to the access point. No protection against message replay. © ClubHack http://clubhack.com
- 13. WEP Cracking Demo © ClubHack http://clubhack.com
- 14. Radius: An additional layer in security © ClubHack http://clubhack.com
- 15. 802.1x Port-based access control Mutual authentication via authentication server © ClubHack http://clubhack.com 3. Issue challenge 5. Validate response 2. Limit access to authentication server 6. Allow access to network 1. Request access 4. Answer challenge 7. Use other Network devices Time Supplicant Authentic ator Authenticator server Client inaccessible network devices
- 16. Wi-Fi Protected Access (WPA) IEEE 802.1X authentication server- LEAP, EAP/TLS, PEAP or PSK (Pre-Shared Key) RC4 stream cipher, with a 128-bit key and a 48-bit initialization vector (IV). Temporal Key Integrity Protocol (TKIP) Message Integrity Code (MIC) Michael to ensure data Integrity © ClubHack http://clubhack.com
- 17. WPA – PSK A pass phrase (shared secret key) is used. Pre-Shared Key is generated by combining the Service Set Identifier (SSID) with a passphrase (an ASCII string, 8-63 characters.) A passphrase less than 64 characters can be insecure Management is handled on the AP - Vulnerable to dictionary attacks © ClubHack http://clubhack.com
- 18. Temporal Key Integrity Protocol Fixes flaws of key reuse in WEP - Comprised of 3 parts, guarantees clients different keys - 128-bit temporal key, shared by clients and APs - MAC of client - 48-bit IV describes packet sequence number Increments the value of the IV to ensure every frame has a different value Changes temporal keys every 10,000 packets Uses RC4 like WEP, only firmware upgrade required © ClubHack http://clubhack.com
- 19. Michael Message Integrity Check Message Integrity Code (MIC) - 64-bit message calculated using “Michael” algorithm inserted in TKIP packet to detect content alteration Message is concatenated with the secret key and the result is hashed Protects both data and header Implements a frame counter, which discourages replay attacks © ClubHack http://clubhack.com
- 20. WPA Summary Confidentiality : Per-packet keying via TKIP Message Authenticity : Michael algorithm Access Control and Authentication : IEEE 802.1x -EAP/TLS © ClubHack http://clubhack.com
- 21. Deficiencies of WPA Dictionary Attack on WPA-PSK - The weak pass-phrases users typically employ are vulnerable to dictionary attacks. DoS Attacks - Due to inevitable weaknesses of Michael, the network is forced to shut down for one minute if two frames are discovered that fail the Michael check. TKIP Attack - An attacker sniffs a packet, makes minor modifications to affect the checksum, and checks the results by sending the packet back to the access point. © ClubHack http://clubhack.com
- 22. © ClubHack http://clubhack.com WPA–PSK Hacking Demo
- 23. WPA2 – 802.11i 802.1x / PSK for authentication. CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) to provide confidentiality, integrity and origin authentication. AES replaces RC4 w/TKIP © ClubHack http://clubhack.com
- 24. A Comparison © ClubHack http://clubhack.com WEP WPA WPA2 Cipher RC4 RC4 AES Key Size 40 bits 128 bits 128 bits Key Life 24 bit IV 48 bit IV 48 bit IV Packet Key Concatenated Mixing Function Not Needed Data Integrity CRC - 32 Michael CCM Replay Attack None IV Sequence IV Sequence Key Management None EAP - Based EAP - Based
- 25. A dedicated website for wardriving in India http://wardrive.in
- 26. Trivia On 10th November 2008, ClubHack with support of Cyber Crime Cell of Pune Police conducted a Wardriving in Pune, Maharashtra. 50% of Pune’s wireless networks were found to be Open. 31% of Pune’s wireless networks were found with weak encryption (WEP) Only 19% of the networks were strongly encrypted with WPA (and its variants) © ClubHack http://clubhack.com Ref: http://www.wardrive.in/
- 27. Exploiting Vulnerabilities Locating a wireless network Attaching to the Found Wireless Network Sniffing Wireless Data © ClubHack http://clubhack.com
- 28. Locating a wireless network © ClubHack http://clubhack.com We need a special holiday to honor the countless kind souls with unsecured networks named 'linksys'. http://www.xkcd.com Strip Number: 466
- 29. Locating a wireless network NetStumbler – This Windows based tool easily finds wireless signals being broadcast within range © ClubHack http://clubhack.com
- 30. Locating a wireless network (contd) Kismet – Kismet will detect and display SSIDs that are not being broadcast which is very critical in finding wireless networks. © ClubHack http://clubhack.com
- 31. Capturing the Wireless Network If the wireless network is using authentication and/or encryption, you may need one of the following tools. Airodump-ng - packet capture program, collects authentication handshake Aireplay-ng - de-authenticator /packet injection program © ClubHack http://clubhack.com
- 32. Attacking to the Wireless Network CowPatty – Brute force tool for cracking WPA-PSK. Aircrack-ng - To crack PSK using authentication handshake © ClubHack http://clubhack.com
- 33. Sniffing Wireless Data Wireshark – Ethereal can scan wireless and Ethernet data and comes with some robust filtering capabilities. It can also be used to sniff-out 802.11 management beacons and probes and subsequently could be used as a tool to sniff-out non-broadcast SSIDs. © ClubHack http://clubhack.com
- 34. Steps to achieve security for home users • Open the configuration of your wi-fi device • Go to wireless setting • Under security option, select any one (whichever available) – WPA – WPA - PSK – WPA - Personal – WPA - AES – WPA2 - Personal – WPA2 - PSK • Set a complex password • Change the login password of the wireless router. • Change the SSID to something classy • Don't disable SSID broadcast • Done
- 37. Example : Dlink
- 38. Example : ZyXEL
- 39. Further Advised Change the router login password frequently Atleast once a month Change the wireless WPA password also Atleast once a month Avoid temptation to connect to open wireless just looking for free internet.
- 40. Securing Enterprise Networks 1. Define, monitor and enforce a wireless security policy Policy should cover all 802.11 and Bluetooth wireless devices Define wireless policies for mobile workers Ensure wireless devices are not used until they comply with the wireless security policy 2. Take a complete inventory of all Access Points and 802.11 devices in the airwaves Eliminate rogue Access Points and unauthorized user Stations. © ClubHack http://clubhack.com
- 41. Securing Enterprise Networks (Contd) 3. Define secure configurations for Access Points and user Stations Change default setting Disable SSID broadcast Turn-off “ad-hoc” mode operation 4. Define acceptable encryption and authentication protocols Use strong authentication (802.1x with EAP recommended) Use strong encryption with at least 128-bit keys (WPA2, WPA recommended) Deploy a layer-3 Virtual Private Network (VPN) for wireless communication © ClubHack http://clubhack.com
- 42. Securing Enterprise Networks (Contd) 5. Monitor the airwaves to identify suspicious activity Deploy a Wireless Intrusion Detection System (IDS) to identify threats and attacks Detect and terminate unauthorized associations in a timely manner Monitor wireless assets for policy violations Log, analyze, and resolve incidents in a timely manner Gather and store wireless activity information for forensic analysis © ClubHack http://clubhack.com
- 43. References Aircrack-ng Airtight Networks BackTrack 3 Understanding WPA TKIP crack Practical attacks against WEP and WPA Best Practices for Wireless Network Security and Sarbanes-Oxley compliance – Joshua Wright iPig Encryption Software Wikipedia! © ClubHack http://clubhack.com
- 44. Q & 42 ? :-?
- 45. © ClubHack http://clubhack.com Thank You! [email_address] [email_address]
Editor's Notes
- #4: SSID service set identifier, a 32-character unique identifier attached to the header of packets sent over a WLAN that acts as a password when a mobile device tries to connect to the BSS.
- #12: IV provides more randomness to the encryption process, to avoid pattern recognition in the ciphertext
- #13: The initialization vector in WEP is a 24-bit field, which is sent in the cleartext part of a message. Such a small space of initialization vectors guarantees the reuse of the same key stream. A busy access point, which constantly sends 1500 byte packets at 11Mbps, will exhaust the space of IVs after 1500*8/(11*10^6)*2^24 = ~18000 seconds, or 5 hours. Malicious user can generate automated collisions and collect enough packets to crack a moderately used network well within 30 minutes.
- #16: 802.1x is used with the EAP protocol which provides a framework to extend authentication possibilities from PAP, CHAP to OTP, certificates, biometrics, kerberos Eg: EAP -
- #18: The PSK provides an easily implemented alternative for the PMK as compared to using 802.1X to generate a PMK. A 256bit PSK is used directly as the PMK. When the PSK is a passphrase, the PMK is derived from the passphrase as follows: PMK = PBKDF2(passphrase, ssid, ssidLength, 4096, 256) Where the PBKDF2 method is from PKCS #5 v2.0: Password-based Cryptography Standard. This means that the concatenated string of the passphrase, SSID, and the SSIDlength is hashed 4096 times to generate a value of 256 bits. The lengths of the passphrase and the SSID have little impact on the speed of this operation. The PTK is a keyed-HMAC function using the PMK on the two MAC addresses and the two nonces from the first two packets of the 4-Way Handshake. This is why the whole keying hierarchy falls into the hands of anyone possessing the PSK, as all the other information is knowable.
- #33: This program simply tries a bunch of different options from a dictionary file to see if one ends up matching what is defined as the Pre-Shared Key