Excellent.
So a wireless network is a computer network that uses wireless data connections between network nodes.
Wireless networks are generally implemented and administered using radio communication and with this
method, the costly process of introducing cables into a building can well obviously be avoided.
A wireless local area network, LAN.
Links two or more devices over a short distance using a wireless distribution method, usually providing
a connection through an access point for Internet access.
I Tripoli Aido two point one one is a set of Mac and physical layer specifications for implementing
wireless LAN computer communication.
Now they're the world's most widely used wireless computer networking standards used in most home and
office networks to allow laptops, printers, smartphones to talk to each other and access the Internet
without being connected to any wires.
So for this, I'm just trying to keep it simple so I won't talk about the entire eight to 11 family
or the technical details beneath them.
I just want to let you know that the most popular are those defined by the ATO to live BE and the ATO
to 11 G protocols, which are amendments to the original standard.
So Aido to not one one dash one nine nine seven was the first wireless networking standard.
But eight to 11 B was the first widely accepted one, followed by eight to 11 G and then to 11 in.
Know 211 is an amendment that improves upon the previous eight to 11 standards by adding multiple input,
multiple output, antenna's mendte.
So Mendte, it's basically a method for multiplying the capacity of a radio link using multiple transmit
and receive antennas.
Nowadays, eight to 11 A is popular, so it builds on the ATO to 11 and includes wider channels and
the five gigahertz band.
The segment of the radio frequency spectrum used by to 11.
Varies pretty much between countries, for example, in the U.S., Aido two one one A and a two one
one G devices may be operated without a license is allowed in the regulations.
Wireless networks are identified using a service set identifier or SS ID or I'll call it a sit.
Unless it is the primary name associated with a NATO 211 wireless LAN, including home networks and
public hotspots.
Client devices use this name to identify and join wireless networks.
Now, there are multiple kinds of acids.
Used by itself, the term Essid refers to the name of a wireless network, whether it be a point to
point network made of only individual wireless clients into communicating or an infrastructure network
with clients relying on access points.
So getting more specific, we have basic CID's or be acids, which are the Mac address of the access
point, the 48 bit number that uniquely identifies every wireless and every wire line, for that matter,
network interface.
The extended Essid, or Essid, is a unique name applied to one or more access points, offering the
same service such as access to a single wireline network.
Now, in some deployment's, unique pieces are applied to each individual access point in others, all
access points that offer access to the same wireline network are given identical Essid values to help
foster roaming between the various access points.
But generally speaking, when analyzing wireless LANs, we want to discover the best, said the Mac
address and the E said the name apply to the wireless network as a whole with a unique value typically
applied to each individual access point.
Now, since this is a cause for penetration testers, we really need to talk about the weaknesses of
the wireless network infrastructure.
So here are some of the most significant vectors for wireless attacks.
Denial of service.
Blocking legitimate users on a wireless lan is trivially easy, even if the network is carefully constructed.
Rogue access points, employees sometimes set up unauthorized access points in an enterprise environment
to bypass the legitimate wireless infrastructure or to gain wireless access when such an infrastructure
isn't provided by the enterprise a penetration, testers and ethical hackers alike are sometimes required
to sweep an organization's physical infrastructure to find these unauthorized access points.
Lack of or improper configuration of wireless access points.
Right, so if access points are not configured appropriately, attackers can have a much easier time
of employing any of the rest of these attack vectors.
Traffic capture, intercept.
In a wireless lan, the hacker can get access to the data link layer layer to communications as long
as he or she is in physical proximity of the device for merely capturing packets.
That proximity for a wireless lan could be a mile or more.
Numerous wireless sniffing tools can be used in such attacks.
Crypto attacks, some wireless encryption protocols suffer from significant security weaknesses, such
as the wired equivalent privacy web protocol.
Attackers can gather Web traffic and by exploiting flaws in the way cryptographic initialization vectors
are exchanged, correct the keys to gain access to the data and the network.
Client duping.
Some tests call for a penetration test or ethical hacker to set up a bogus access point to see if clients
will trust it and then use it to access the rest of the network.
The attacker can then sit in the middle of all the communications, harvesting them or changing the
data as it passes by.