Search the Community

I am looking for a tool that can test against the Cisco Wireless LAN Controller standard IDS signatures of which there are 17 signatures such as Broadcast deauthentication frame signatures, Management frame flood signatures, etc. Can anyone recommend a suitable tool that can create the attacks that will trigger the IDS's various signatures in order to validate the IDS solution is working? If the tool cannot test all the signature listed below please identify the ones that it can test. Thank you! IDS Signature Summary 1. Bcast deauth 2. Null probe resp 1 3. Null probe resp 2 4. Assoc flood 5. Auth flood 6. Reassoc flood 7. Broadcast probe flood 8. Disassoc flood 9. Deauth flood 10. Reserved mgmt 7 11. Reserved mgmt F 12. EAPOL flood 13. Netstumbler 3.2.0 14. Netstumbler 3.2.3 15. Netstumbler 3.3.0 16. Netstumbler generic 17. Wellenreiter

I have a pineapple tetra and am currently interning with an I.T. admin. We decided to see how the Cisco AP's would react to the tetra. I booted up Kali and the pineapple on my laptop (which was connected to the guest network) and immediately, the admin received texts and emails that a rogue AP had been detected. When I tried to deauth the AP's for the guest network, they blocked it and sent another email saying the attacks were "contained." As I come to understand wireless networks, I assume being on the guest wifi helped detect the tetra, but I also assume that a wifi adapter in monitor mode could pick up devices without the Cisco AP's flagging it... The goal is to get to the hidden wlan- pineapple or not, any suggestions would be great for accessing the wlan. Cheers

Arstechnica.com By: Sean Gallagher A Hacker has found a Backdoor to wireless combination router/DSL modems that could allow an attacker to reset the router’s configuration and gain access to the administrative control panel. The attack, confirmed to work on several Linksys and Netgear DSL modems, exploits an open port accessible over the wireless local network. The Backdoor requires that the attacker be on the local network, so this isn’t something that could be used to remotely attack DSL users. However, it could be used to commandeer a wireless access point and allow an attacker to get unfettered access to local network resources. Eloi Vanderbeken described the Backdoor in a PowerPoint posted with the code to Github. In his illustrated report, he explained how over the Christmas holiday he was trying to get access to the administrative console of his family’s Linksys WAG200G wireless DSL gateway wirelessly—mostly so he could limit how much bandwidth the others in the house were using. But Vanderbeken had previously turned off wireless access to the administration web console (and had forgotten his administrative password). Performing a scan, he found that the router responded to messages over an unusual TCP port number: 32764. A search of the web found other Linksys and Netgear router owers had found the same service, but there was no documentation for what it did. So Vanderbecken downloaded a copy of the Linksys firmware and commenced reverse-engineering the binary MIPS code. What he found was a simple interface that allowed him to send commands to the router without being authenticated as the administrator. On his first attempt to brute-force the interface, the router flipped its configuration back to factory settings, causing his family members to all lose Internet access at the same time. After some additional testing, Vanderbecken found that the interface allowed him to execute a number of commands directly against the router, including a command-line shell. Using the commands he discovered, he was able to write a script that allowed him to turn wireless access to administration on and reset the web password, and published the script (with his cartoon report on the Backdoor) to Github. Soon, confirmations that the Backdoor worked with other models of Linksys and Netgear wireless DSL modems came flooding in. A commenter on Hacker News noted that the Backdoor might effect wireless routers with DSL modems from SerComm, which manufactured many of Linksys’ older DSL modems. A list of SerComm devices from various vendors matches up with the router-modems reported as vulnerable thus far. http://nakedsecurity.sophos.com/2014/01/03/gaping-admin-access-holes-found-in-soho-routers-from-linksys-netgear-and-others/

I came across this article and thought it was pretty cool. reminds me of a more complex pineapple.http://fsosecurity.com/SPAN_MITM.pdf (I understand some might be leery about it being a PDF. its clean. don't worry)

Just got one for free, wondering what i could do with it.

I've just found a hidden menu on my Linksys/Cisco E4200 router and made a search on google to find out if there are any other. So far I found the followings. http://192.168.1.1/Wireless_Advanced.asp http://192.168.1.1/System.asp http://192.168.1.1/Cysaja.asp http://192.168.1.1/SysInfo.htm Now I am trying to find others if exists any. The question is how? I have some skills but I am not a hacker. What I will try is to implement basic code to try all possibilities (kind of brute force). However, I wonder if there is any other easy way to do it? Do you guys have any idea?