Flashcards
Passive Exploitation/Active Exploitation
Flashcards do conjunto (28)
- 1This term= takes advantage of already-collected signals without transmitting any frames onto the wireless network.Passive Exploitation
- 2WEP shared-secret encryption keys are how many bits in length?40 or 104
- 3How many bits does the IV (initialization vector) in WEP24 bits
- 4What type of algorithm does WEP use?RC4 Algorithm
- 5T or F: Once you de-encrypt WEP the key applies to all USERS past, present, and futureTrue
- 6What is a rainbow table?is a file of pre-computed hashes
- 7What are the 2 programs that be used to perform the dictionary attack against PSK-Mode connections?coWPAtty and aircrack-ng
- 8besides the dictionary attack against WPA/WPA2, another passive attack can be performed if this is captured?4-way handshake
- 9what 2 programs can decrypt packets onces the 4-way handshake has been recovered?Wireshark
and
airdecap-ng - 10WPA uses what Algorithm and what cipher?RC4
TKIP - 11WPA2 uses what Algorithm and what cipher?AES
CCMP
optional
RC4
TKIP - 12WPA/WPA2 has 2 modes..what are they?Personal PSK
or
Enterprise
802.1x EAP
Radius Server - 13What are the 3 vulnerabilities in the GSM standard? the obvious is the fact that it is very subseptable to attack by a rouge station1) mobile device determines the base station they attach to based on signal strength
2) lacks mutual authentication
3) mandates mobile devices support no encryption (A5/0) - 14What 5 technologies do not use mutual authentication?802.11
WiMax
UMTS
GSM
ZigBee - 15Name that program: setup interfaceairmon-ng
- 16Name that program: capture trafficairodump-ng
- 17Name that program: crack/break keyaircrack-ng
- 18Name that program(s): de-encrypt packetWireshark
&
airdecap-ng - 19Name that program: perform a de-authectication attackaireplay-ng -0
- 20Name that program: perform a fake authentication attackaireplay-ng -1
- 21Name that program: perform a ARP replay attackaireplay-ng -3
- 22What identifies the direction from which it is receiving the most RF energy (highest signal strength) from a given signal on a particular frequency?Direction Finding
(DF)
[he's that way --->] - 23What is geolocation?describes the act of determining an object's real world position.
- 24What is more accurate Geolocation or Direction Finding?Geolocation
DUUUHH!! - 25What is active exploitation?injecting data into a wireless network.
- 26spoofed frames, replaying captured frames, and sending malformed frames are examples of what?Active exploitation
- 27What attack is considered very powerful (jesus) because it used to accomplish a whole list of shit. for example to capture a 4-way handshake, reveal cloaked SSID, etcDeauthentication Attack
- 28What attack is used to quickly stimulate a large amount of traffic. Example- used to get IV's to decryptARP request replay attack
Informações
- Descrição
- college Wireless (Passive 802.11 Exploitation) FlashCards sobre Passive Exploitation/Active Exploitation, criado por jeriel.juarbe2031 em 07-10-2014.
- Criado por
- jeriel.juarbe2031
- Visualizações
- 6
- Avaliação