Excellent.
So a wireless network is a computer network that uses wireless data connections between network nodes.
Wireless networks are generally implemented and administered using radio communication.
And with this method, the costly process of introducing cables into a building can well obviously be
avoided.
A wireless local area network.
W lan.
Links two or more devices over a short distance using a wireless distribution method, usually providing
a connection through an access point for internet access.
I triple e 802.11 is a set of mac and physical layer specifications for implementing wireless LAN computer
communication.
Now they're the world's most widely used wireless computer networking standards used in most home and
office networks to allow laptops, printers, smartphones to talk to each other and access the Internet
without being connected to any wires.
So for this, I'm just trying to keep it simple so I won't talk about the entire 802 11 family or the
technical details beneath them.
I just want to let you know that the most popular are those defined by the 802 11 B and the 802 11 G
protocols, which are amendments to the original standard.
So 8,002.111997 was the first wireless networking standard.
But 802 11 be was the first widely accepted one, followed by 802 11 g and then 802 11 n.
802 11 is an amendment that improves upon the previous.
802 11 standards by adding multiple input multiple output antennas.
M.T.
So MMT, it's basically a method for multiplying the capacity of a radio link using multiple transmit
and receive antennas.
Nowadays.
802 11 AC is popular, so it builds on the 802 11 and includes wider channels in the five gigahertz
band.
The segment of the radio frequency spectrum used by 802 11.
Varies pretty much between countries.
For example, in the US 802.11 A and 802.11 G devices may be operated without a license as allowed in
the regulations.
Wireless networks are identified using a service set identifier or Ssid or I'll call it a Ssid.
An acid is the primary name associated with an 802 11 wireless LAN, including home networks and public
hotspots.
Client devices use this name to identify and join wireless networks.
Now there are multiple kinds of acids.
Use by itself.
The term acid refers to the name of a wireless network, whether it be a point to point network made
of only individual wireless clients, intercommunicating or an infrastructure network with clients relying
on access points.
So getting more specific, we have basic acids or B acids, which are the Mac address of the access
point.
The 48 bit number that uniquely identifies every wireless and every wireline for that matter, network
interface.
The extended acid or acid is a unique name applied to one or more access points, offering the same
service, such as access to a single wireline network.
Now, in some deployments, unique acids are applied to each individual access point.
In others, all access points that offer access to the same wireline network are given identical acid
values to help foster roaming between the various access points.
But generally speaking, when analyzing wireless LANs, we want to discover the Bssid, the Mac address
and the Ssid.
The name applied to the wireless network as a whole with a unique value typically applied to each individual
access point.
Now, since this is a course for penetration testers, we really need to talk about the weaknesses of
the wireless network infrastructure.
So here are some of the most significant vectors for wireless attacks.
Denial of service.
Blocking legitimate users on a wireless LAN is trivially easy, even if the network is carefully constructed.
Rogue access points.
Employees sometimes set up unauthorized access points in an enterprise environment to bypass the legitimate
wireless infrastructure or to gain wireless access when such an infrastructure isn't provided by the
enterprise.
Now, penetration testers and ethical hackers alike are sometimes required to sweep an organization's
physical infrastructure to find these unauthorized access points.
Lack of or improper configuration of wireless access points.
Right.
So if access points are not configured appropriately, attackers can have a much easier time of employing
any of the rest of these attack vectors.
Traffic capture.
Intercept.
In a wireless lan.
The hacker can get access to the data link layer.
Layer two communications.
As long as he or she is in physical proximity of the device for merely capturing packets that proximity.
For wireless lan could be a mile or more.
Numerous wireless sniffing tools can be used in such attacks.
Crypto attacks.
Some wireless encryption protocols suffer from significant security weaknesses, such as the wired equivalent
privacy WEP protocol.
Attackers can gather web traffic and by exploiting flaws in the way cryptographic initialization vectors
are exchanged, crack the keys to gain access to the data and the network.
Client duping some tests, call for a penetration tester or ethical hacker to set up a bogus access
point to see if clients will trust it and then use it to access the rest of the network.
The attacker can then sit in the middle of all the communications harvesting them or changing the data
as it passes by.