2KKUU7ita

160
Part III: Hacking Network Hosts
Most of the tests I outline in this chapter require only Windows-based utilities.
My favorite tools for assessing wireless networks in Windows are as follows:
✓ Aircrack-ng (http://aircrack-ng.org)
✓ CommView for WiFi (www.tamos.com/products/commwifi)
✓ Elcomsoft Wireless Security Auditor (www.elcomsoft.com/ewsa.html)
✓ OmniPeek (www.wildpackets.com/products/omnipeek_network_
analyzer)
You can also use a handheld wireless security testing device, such as the
handy Digital Hotspotter by Canary Wireless (www.canarywireless.com)
and even your Android-based phone or tablet with apps such as WiEye or WiFi
Scanner. Apple, in its never-ending quest to protect itself from us and us from
ourselves, no longer permits wireless scanning using iOS-based devices.
An external antenna is also something to consider as part of your arsenal. I
have had good luck running tests without an antenna, but your mileage may
vary. If you’re performing a walkthrough of your facilities to test for wireless
signals, for example, using an additional antenna increases your odds of finding
both legitimate and (more important) unauthorized wireless systems.
You can choose among three types of wireless antennas:
✓ Omnidirectional: Transmits and receives wireless signals in 360 degrees
over shorter distances, such as in boardrooms or reception areas. These
antennas, also known as dipoles, typically come installed on APs from
the factory.
✓ Semidirectional: Transmits and receives directionally focused wireless
signals over medium distances, such as down corridors and across one
side of an office or building.
✓ Directional: Transmits and receives highly focused wireless signals over
long distances, such as between buildings. This antenna, also known as
a high-gain antenna, is the antenna of choice for wireless hackers driving
around cities looking for vulnerable APs — an act known as wardriving.
As an alternative to the antennas described in the preceding list, you can use
a nifty can design — called a cantenna — made from a Pringles, coffee, or
pork-and-beans can. If you’re interested in trying this, check out the article at
www.turnpoint.net/wireless/has.html for details. A simple Internet
search turns up a lot of information on this subject, if you’re interested. One
site in particular (www.cantenna.com) sells the Super Cantenna kit which
has worked well for me.