Wireless network hacking

Question 1

WEP

Answer 1

Calculates 32-bit integrity check value (ICV) appends this to the end of a data payload. then creates 24-bit IV (initialization vector) which is combined with a key and appended onto the end of the data stream. then input into a RC4 algorithm and encrypted with BLAH BLAH BLAH Key length 40/104

Question 2

WPA

Answer 2

uses TKIP (128 bit key) and clients mac address for rc4 encryption. WPA changes the key out hence temporal. Keys are transferred back and forth through EAP. IV 48

Question 3

WPA-2

Answer 3

AES encryption. WPA-2 Enterprise can include EAP or a RADIUS server into the autentication side of WPA2 allowing Kerberos ticketing. Uses CCMP to show message hasn’t been changed during transport (MIC Message integrity check includes sequence #). WPA personal just uses a PSK IV 48

Question 4

KIsmet

Answer 4

Passive, Can detect points that have not been configured (some default passwds) and determine encyption types. more of wire sniffer can do discovery.

Question 5

802.11a

Answer 5

op speed 54 mbps 5ghz 95 feet

Question 6

802.11b

Answer 6

op speed 11 mbps 2.4ghz 150 feet

Question 7

802.11g

Answer 7

op speed 54 mbps 2.4ghz 170 feet

Question 8

802.11n

Answer 8

op speed 100+ mbps 2.4-5ghz 230 feet

Question 9

802.11ac

Answer 9

op speed 1000 mbps (1.33 gb) 5ghz 230 ft

Question 10

BSSID

Answer 10

mac address of the wireless access point

Question 11

Honeyspot

Answer 11

creating evil twin of well known ap (McDonald’s)

Question 12

MAC spoofing tools

Answer 12

SMAC, TMAC

Question 13

Cain and Abel method to crack WEP

Answer 13

Statistical measures and the PTW technique

Question 14

AircrackNG method for cracking WEP

Answer 14

PTW, FMS, Korek or dictionary

Question 15

AirCrackNG method for cracking WPA and 2

Answer 15

Dictionary

Question 16

Key Reinstallation Attack

Answer 16

aka KRACK Replay attack that uses the 4 way handshake of WPA to gain full key used to encrypt all the traffic

Question 17

Wireless sniffers

Answer 17

OmniPeek, Air Magnet, Wifi Pilot,