Exploit and defend against the latest wireless network attacks

Learn to exploit weaknesses in wireless network environments using the innovative techniques in this thoroughly updated guide. Inside, you’ll find concise technical overviews, the latest attack methods, and ready-to-deploy countermeasures. Find out how to leverage wireless eavesdropping, break encryption systems, deliver remote exploits, and manipulate 802.11 clients, and learn how attackers impersonate cellular networks. Hacking Exposed Wireless, Third Edition features expert coverage of ever-expanding threats that affect leading-edge technologies, including Bluetooth Low Energy, Software Defined Radio (SDR), ZigBee, and Z-Wave.

• Assemble a wireless attack toolkit and master the hacker’s weapons
• Effectively scan and enumerate WiFi networks and client devices
• Leverage advanced wireless attack tools, including Wifite, Scapy, Pyrit, Metasploit, KillerBee, and the Aircrack-ng suite
• Develop and launch client-side attacks using Ettercap and the WiFi Pineapple
• Hack cellular networks with Airprobe, Kraken, Pytacle, and YateBTS
• Exploit holes in WPA and WPA2 personal and enterprise security schemes
• Leverage rogue hotspots to deliver remote access software through fraudulent software updates
• Eavesdrop on Bluetooth Classic and Bluetooth Low Energy traffic
• Capture and evaluate proprietary wireless technology with Software Defined Radio tools
• Explore vulnerabilities in ZigBee and Z-Wave-connected smart homes and offices
• Attack remote wireless networks using compromised Windows systems and built-in tools

Table of Contents

Part I Hacking 802.11 Wireless Technology

1 Introduction to 802.11 Hacking

2 Scanning and Enumerating 802.11 Networks

3 Attacking 802.11 Wireless Networks

4 Attacking WPA-Protected 802.11 Networks

5 Attacking 802.11 Wireless Clients

6 Taking It All the Way: Bridging the Air-Gap from Windows 8 .

Part II Bluetooth

7 Bluetooth Classic Scanning and Reconnaissance

8 Bluetooth Low Energy Scanning and Reconnaissance

9 Bluetooth Eavesdropping

10 Attacking and Exploiting Bluetooth

Part III More Ubiquitous Wireless

11 Software-Defined Radios

12 Hacking Cellular Networks

13 Hacking ZigBee

14 Hacking Z-Wave Smart Homes

About the Authors

Joshua Wright is a senior technical analyst with Counter Hack, and a senior instructor and author for the SANS Institute. Through his experiences as a penetration tester, Josh has worked with hundreds of organizations on attacking and defending mobile devices and wireless systems, disclosing significant product and protocol security weaknesses to well-known organizations.

Johnny Cache is the founder and Chief Science Officer of Cache Heavy Industries. He has spoken at several security conferences including BlackHat, BlueHat, and ToorCon. Johnny received his Masters in Computer Science from the Naval Postgraduate School in 2006. His thesis work, which focused on fingerprinting 802.11 device drivers, won the Gary Kildall award for the most innovative computer science thesis.