Test wireless security?

[pinkpanther56]

I would like to test the security of my wireless system is there any software that i can run that will perform some checks?

I'm using WPA-PSK am i right in assuming that the main weakness with this system is having a weak password to generate the key?

Cheers.

 

[schtek]

net stumbler, wireless mon.. try these progs

Stand up wherever you are, go to the nearest window and yell as loud as you can, 'I'm mad as hell, and I'm not going to take it anymore.'

 

[pinkpanther56]

Thanks i'll try them.

I read the following article and see that the main issue is a weak PSK am i right in assuming that a good key say over 30 random characters is going to make WPA about as secure as a small office is going to get?

http://www.networkworld.com/reviews/2004/1004wirelesswpa.html?page=1

Cheers.

 

[who235]

Here you can download a Linux LiveCD distro that comes preconfigured with a whole bunch of wireless security tools. Check it out - it might not be for you, but it is cool either way. . .

http://www.remote-exploit.org/index.php/Main_Page

 

[pinkpanther56]

I'll take a look cheers.

Interestingly i tried Netstumbler on a few access points and it detected them but i couldn't connect as the traffic was encrypted as i had hoped.

I couldn't however get anything from our wireless bridge at all Netstumbler didn't detect anythig even when i was stood right under the WAP any ideas why?

The bridge just uses 2 Buffalo Air stations.

Thanks.

 

[iownroot]

Is it possible that the bridges are fully directional?

CISSP, MCT, MCSE2K/2K3, MCSA, CEH, Security+, Network+, CTT+, A+

 

[pinkpanther56]

It's entirely possible as they we're installed before i worked here which is why i was having a good look at them.

They appear to be configured to only respond to each others MAC address could that be it or is it more likely they have a narrow transmission range?

Thanks.

 

[schtek]

i have 2 bridges and they are not detectable... i have them positioned approx40ft up so i do not have a chance of putting my pda in line of sight and checking if net stumbler can detect them i would sugest its because of the narrow band width though...

Stand up wherever you are, go to the nearest window and yell as loud as you can, 'I'm mad as hell, and I'm not going to take it anymore.'

 

[iownroot]

i have 2 bridges and they are not detectable... i have them positioned approx40ft up so i do not have a chance of putting my pda in line of sight and checking if net stumbler can detect them i would sugest its because of the narrow band width though..."

Be careful not to confuse bandwith with the bridges' fresnel zones.

CISSP, MCT, MCSE2K/2K3, MCSA, CEH, Security+, Network+, CTT+, A+

 

[G0AOZ]

I'm not at all sure that NetStumbler would be able to detect data from devices in a bridge configuration.

However, are you now trying to detect data or actual (rf) signals? The two are different.

To detect close proximity rf signals, I use one of these:-

http://www.smartid.com.sg/WiFi_Detector.shtml

You've not mentioned what sort of antennas are being used for the bridges. If you're using a good quality parabolic dish then no, you probably wouldn't be able to detect the signals. If, however, you're using an omni-directional vertical or a small yagi, then I'd be surprised if you couldn't detect a bit of "stray" rf. Dish antennas radiate very few side lobes by the nature of their design, but even the top quality yagis throw out a few unwanted side lobes.

ROGER - G0AOZ.