Advanced Wireless, Bluetooth and RFID Hacking 101 - Malaysia, October 2008

Overview:

Wireless networks are continually growing in our modern world and society. This 2 day course aims to demystify wireless network security and inform attendees on how to improve wireless LAN security and Bluetooth security. This will be achieved via theory and practical. Attendees will first obtain detailed theoretical analysis of different wireless security schemas (i.e. Theory), thereafter have hands on experience in how the attacks are performed (i.e. Practical).

Course Agenda
Day 1 - Advanced Wireless Hacking

Introduction to Wireless Hacking

Wireless and its technology usage
Wireless networking breakdown
Security of wireless and progression
What is wardriving?
Attacking wireless brief

Wireless Protocols and Architecture

Analysis of various wireless protocols
Wireless architecture and design
802.11 Protocol Analysis

Network Mapping and Methodology for securing wireless networks

Discovery of wireless networks

Antenna variations
Monitoring the wireless network, including packet analysis
Various toolsets including Netstumbler, Kismet, the Aero suites and so fourth

Wireless hacking tools and attacks

Traffic injection tools
Spoofing
Flooding
Aircrack and Aero suite of tools
Airsnort
WEP hacking cracking
WPA, WPA2 hacking techniques
Frame generation
WPA/WPA2 Bruteforce accelerated with FPGA’s
WPA Enterprise Attack
NEW client based attacks including the café latté attack
NEW Obscure ways of attacking wireless networks
NEW WiFi Zoo and reinjecting cookies to gain access to sessions
Rogue Hotspots and attack scripting

Defending against wireless hacking

Site layout and planning
Improving your wireless systems against hacker attacks
Filtering

Day 2 – RFID
Introduction into RFID and Electronic Security

1. Introduction into Radio Frequency Identification
2. Common misconceptions with RFID
3. Choosing the correct system
4. How secure is your workplace?
5. RFID: Technology vs. Security
6. RFID Security Assessment
7. Requirements to research RFID technology
8. Hacking RFID
9. The Touch N’ Go system
10. The RFID Cloner
11. Social experiments using RFID tracking
12. National Safety: RFID in your passport, credit cards and cars?

Breakout: Build your own simple RFID reader circuit (There will be a contest run during the conference days that is associated with this portion - attendees must attend this training to qualify.)

Bluetooth

What is Bluetooth?
What does it allow for?
How Bluetooth works
Bluetooth data rates
Bluetooth ranges and specifications
Introduction Bluetooth security (Scatternets)
Latest developments with Bluetooth

Bluetooth vulnerabilities overview

The Snarfing attack
The Bluebug attack
The backdoor attack
Bluechop
Bluedump
Bluebump
Bluesmack
The social engineering factor
Bluetooth viruses
Bluetooth implementation problems

Bluetooth hacking tools and techniques

BTscan , Bluestumbler , Bluescan , BT Browser
Bluesnarf
Bluebug
Bloover II
Carwhisperer
Blueprinting (SDP tool)
Brute force discovery - Redfang
Optimising range of Bluetooth attacks

Defending against Bluetooth attacks

Bluetooth recommendations
Standard organizations practice
The future for Bluetooth security and implementations