Testing Wireless Security

TheFella

Hi all. I'm planning on doing a thesis on wireless security. I think mostly it will be how easy/difficult it can be to hack.

I'm trying to come up with a few ideas as to what would be a good demonstration to go along with it in a lab environment.

I was thinking maybe setting up a wireless network from a lab router and then using my laptop to demonstrate a few progs hacking into it. But I'm thinking would it be worth showing the hacking of WEP, WPA. Considering WPA2 is the most used.

Any advice?

Note I am not asking for anyone to come up a demonstration for me, just want opinions on what others would think a cool but simple demonstration.

Black Swan

TheFella wrote: »

I was thinking maybe setting up a wireless network from a lab router and then using my laptop to demonstrate a few progs hacking into it. But I'm thinking would it be worth showing the hacking of WEP, WPA. Considering WPA2 is the most used.

When I took a Security+ certification college seminar awhile back, the instructor first demo'd how to hack wifi networks with various freeware from college lab, then he had us hack his home site, followed by hacking the college site. He essentially used Bandura's Social Learning Theory: instructor demonstrates hack; students hack while being observed; instructor provides corrective feedback; repeat cycle.

ethernet

Security in wi-fi networks gets quite a bit of coverage. Would you consider looking into security in wireless sensor networks or something similar? It's a lot more challenging and exciting given how constrained the devices are - can't even use many common encryption algorithms as the variables they use won't even fit in the few bytes of RAM.

rcanpolat

TheFella wrote: »

Hi all. I'm planning on doing a thesis on wireless security. I think mostly it will be how easy/difficult it can be to hack.

I'm trying to come up with a few ideas as to what would be a good demonstration to go along with it in a lab environment.

I was thinking maybe setting up a wireless network from a lab router and then using my laptop to demonstrate a few progs hacking into it. But I'm thinking would it be worth showing the hacking of WEP, WPA. Considering WPA2 is the most used.

Any advice?

Note I am not asking for anyone to come up a demonstration for me, just want opinions on what others would think a cool but simple demonstration.

Show WEP, WPA Hacking

Show WPS Hacking (even modern devices can be hacked in hours if WPS is turned on)

Show security in open networks (http://hackaday.com/2011/06/13/wifi-sniffing-digital-picture-frame/)

Show packet sniffing (chat messages, requests etc)

Show MITM Attacks (you telling the AP you are the client and you telling the client you are the AP to sniff traffic)

Show network scanning over wifi (nmap) and then exploiting an unpatched machine. Then scare them by displaying the machines desktop on your machine's monitor and worse activating the attacked machines webcam for a live feed. Nobody will ever watch porn in the bathroom again! lol