Hacking Wireless and Bluetooth 101 - Canada, October 2008

Training Brief:

Wireless networks are continually growing in our modern world and society, from private home networks to coffee shops. This 1 day course aims to demystify wireless network security and inform attendees on how to improve wireless LAN security and Bluetooth security through theory and practical examples on live wireless networks.

Attendees will first obtain detailed theoretical analysis of different wireless security schema's (i.e. Theory), thereafter have hands on experience in how the attacks are performed (i.e. Practical).

Attendees will also be issued with challenges in the form of wireless hacking.

Who should attend this course?

  -  General IT Security Specialists and Administrators
  -  IT Security Specialists who are interested in Wireless hacking specifically
  -  Security Officers for organizations and companies
  -  Wireless Network Administrators
  -  Any individual who may be interested in these topics

Contents of the course:

Proposed program is as follows:

     Introduction to Wireless Hacking
     Wireless Protocols and Architecture
     Network Mapping
     Methodology for securing wireless networks
     Wireless hacking tools and attacks
     Defending against wireless hacking
     Introduction to Bluetooth
     Bluetooth vulnerabilities overview
     Bluetooth hacking tools and techniques
     Defending against Bluetooth attacks

Duration - 1 Day Fast Track course

Prerequisites

     Basic knowledge of Wireless networks
     Participants must bring their own laptop with CDROM device (N.B for bootable software)
     Participants must have administrative rights to install software programs on their laptop
     Participants must make sure that they have a working wireless networking card and
     Bluetooth adapter on their laptop, preferably of different standards

Breakdown - Wireless

Introduction to Wireless Hacking:

     Wireless and its technology usage
     What is wardriving?

Wireless Protocols and Architecture:

     Analysis of various wireless protocols
     802.11 Protocol Analysis

Network Mapping and Methodology for securing wireless networks:
     Discovery of wireless networks
     Antenna variations
     Monitoring the wireless network, including packet analysis

Wireless hacking tools and attacks:

     Traffic injection tools
     Spoofing
     Flooding
     Aircrack and Aero suite of tools
     Airsnort
     WEP hacking cracking
     WPA, WPA2 hacking techniques
     Frame generation

Defending against wireless hacking:

     Improving your wireless systems against hacker attacks

Breakdown - Bluetooth

Introduction to Bluetooth:

     What is Bluetooth?
     What does it allow for?
     How Bluetooth works
     Bluetooth data rates
     Bluetooth ranges and specifications
     Introduction Bluetooth security (Scatternets)

Bluetooth vulnerabilities overview:

     The Snarfing attack
     The Bluebug attack
     The backdoor attack
     Bluechop
     Bluedump
     Bluebump
     Bluesmack
     The social engineering factor
     Bluetooth viruses
     Bluetooth implementation problems

Bluetooth hacking tools and techniques:

     BTscan, Bluestumbler, Bluescan, BT Browser
     Bluesnarf
     Bluebug
     Bloover II
     Carwhisperer
     Blueprinting (SDP tool)
     Brute force discovery - Redfang
     Optimising range of Bluetooth attacks

Defending against Bluetooth attacks:

     Bluetooth recommendations