Null offensive hacking hands-on training.

Proposed sessions for this event:

• Getting started with Wireless Pentesting by Ashritha

Getting started with Wireless Pentesting

By Ashritha Alva

@AshrithaAlva

Pre reqs (Mandatory)

• Laptop with wireless card
• Kali bootable
  • Kali (https://www.kali.org/downloads/)
  • Making kali into persistent bootable (http://docs.kali.org/downloading/kali-linux-live-usb-persistence)

Topics

• Wireless networks (a/b/g/n)
• Types of encryption over the air
• Sniffing wireless networks around you
  • Switching your wireless card to monitor mode
  • Discovering hidden networks
  • kismet
  • aircrack-ng
• WEP
  • What
  • Weaknesses
• Breaking WEP
  • Testing for packet injection
  • Targetting a WEP network
  • Capturing WEP packets
    • writing to file
    • increasing the number of packets using packet injection
  • Cracking WEP
    • When packets > 10000
    • When packets < 10000 (Raising fudge factor)
    • When single packet - using dictionary
• WPA/WPA2
  • What
  • Weaknesses
• Breaking WPA/WPA2
  • Dictionary attacks
  • Targetting WPA networks
  • Deauth to capture the authentication handshake
  • Brute force password using dictionary (aircrack)
  • Brute force using hashcat
• WPS
  • What
  • Weaknesses
• Breaking WPS
  • PIN rotation method
  • Hard coded PINS
  • Brute force

Registrations open on April 15th 00:00