Podcast
Questions and Answers
What is the initial step in the wireless targeting process?
What is the initial step in the wireless targeting process?
Which of the following is NOT a focus during remote presence reconnaissance?
Which of the following is NOT a focus during remote presence reconnaissance?
What method can provide information from emails of the targeted employee?
What method can provide information from emails of the targeted employee?
Which wireless technologies are specifically important to target according to the content?
Which wireless technologies are specifically important to target according to the content?
Signup and view all the answers
What features are important to consider when choosing a wireless network card?
What features are important to consider when choosing a wireless network card?
Signup and view all the answers
What is the primary purpose of a directional antenna?
What is the primary purpose of a directional antenna?
Signup and view all the answers
What is the recommended method to reduce signal loss when a longer distance is required?
What is the recommended method to reduce signal loss when a longer distance is required?
Signup and view all the answers
Which unit measures the power output of a wireless card?
Which unit measures the power output of a wireless card?
Signup and view all the answers
What is the maximum output power for radios in the United States?
What is the maximum output power for radios in the United States?
Signup and view all the answers
What is a potential effect of changing the region setting on the wireless card?
What is a potential effect of changing the region setting on the wireless card?
Signup and view all the answers
Which command is used to check the current power setting of a wireless card?
Which command is used to check the current power setting of a wireless card?
Signup and view all the answers
Which factor influences the channels and features a wireless card can support?
Which factor influences the channels and features a wireless card can support?
Signup and view all the answers
In which frequency range does the 802.11a standard operate?
In which frequency range does the 802.11a standard operate?
Signup and view all the answers
What is the potential risk even in newer wireless technologies that might not use WEP?
What is the potential risk even in newer wireless technologies that might not use WEP?
Signup and view all the answers
Which of the following is a key feature of a wireless antenna?
Which of the following is a key feature of a wireless antenna?
Signup and view all the answers
What is the typical price range for microcomputers like the Raspberry Pi?
What is the typical price range for microcomputers like the Raspberry Pi?
Signup and view all the answers
Which type of antenna radiates signals in all directions?
Which type of antenna radiates signals in all directions?
Signup and view all the answers
What is gain from an antenna measured in?
What is gain from an antenna measured in?
Signup and view all the answers
What are Yagi antennas also known as?
What are Yagi antennas also known as?
Signup and view all the answers
What is a characteristic of omnidirectional antennas when performing malicious access point attacks?
What is a characteristic of omnidirectional antennas when performing malicious access point attacks?
Signup and view all the answers
Wireless systems allow hackers to preserve their anonymity.
Wireless systems allow hackers to preserve their anonymity.
Signup and view all the answers
An attack should always start with compromising wireless clients before wireless networks.
An attack should always start with compromising wireless clients before wireless networks.
Signup and view all the answers
USB wireless cards can connect to a wider variety of devices than PCMCIA cards.
USB wireless cards can connect to a wider variety of devices than PCMCIA cards.
Signup and view all the answers
The most common modern wireless technologies operate on the 5 GHz spectrum.
The most common modern wireless technologies operate on the 5 GHz spectrum.
Signup and view all the answers
Targeting employees' family members can be a tactic used in social spear phishing.
Targeting employees' family members can be a tactic used in social spear phishing.
Signup and view all the answers
A directional antenna is mainly used for point-to-point connections.
A directional antenna is mainly used for point-to-point connections.
Signup and view all the answers
Power output of wireless cards can only be measured in watts.
Power output of wireless cards can only be measured in watts.
Signup and view all the answers
Longer antenna cables have less signal loss compared to shorter cables.
Longer antenna cables have less signal loss compared to shorter cables.
Signup and view all the answers
The maximum output power for radios in the United States is 30 dBm.
The maximum output power for radios in the United States is 30 dBm.
Signup and view all the answers
Changing the region setting on a wireless card cannot affect its power output.
Changing the region setting on a wireless card cannot affect its power output.
Signup and view all the answers
Using a 6-dBi-gain antenna can increase the effective output power.
Using a 6-dBi-gain antenna can increase the effective output power.
Signup and view all the answers
The chipset of a wireless card does not influence the channels it can use.
The chipset of a wireless card does not influence the channels it can use.
Signup and view all the answers
The 802.11a standard operates in the 2.4 GHz range.
The 802.11a standard operates in the 2.4 GHz range.
Signup and view all the answers
All wireless technologies are immune to sniffing of unencrypted traffic.
All wireless technologies are immune to sniffing of unencrypted traffic.
Signup and view all the answers
Antennas improve both the transmission and reception of RF signals.
Antennas improve both the transmission and reception of RF signals.
Signup and view all the answers
Omnidirectional antennas radiate signals in a single direction.
Omnidirectional antennas radiate signals in a single direction.
Signup and view all the answers
A Raspberry Pi can cost as low as $500.
A Raspberry Pi can cost as low as $500.
Signup and view all the answers
Directional antennas are also referred to as Yagi antennas.
Directional antennas are also referred to as Yagi antennas.
Signup and view all the answers
The gain provided by an antenna is measured in dB.
The gain provided by an antenna is measured in dB.
Signup and view all the answers
Devices supporting external antennas offer limited advantages.
Devices supporting external antennas offer limited advantages.
Signup and view all the answers
Wireless reconnaissance is the first step in targeting wireless systems and vulnerabilities.
Wireless reconnaissance is the first step in targeting wireless systems and vulnerabilities.
Signup and view all the answers
A USB wireless card is restricted to connecting only to laptops.
A USB wireless card is restricted to connecting only to laptops.
Signup and view all the answers
802.11a is the most commonly used wireless technology today.
802.11a is the most commonly used wireless technology today.
Signup and view all the answers
Targeting family members of employees can be an effective strategy in social spear phishing.
Targeting family members of employees can be an effective strategy in social spear phishing.
Signup and view all the answers
The characteristics of a wireless card do not impact its performance in different wireless spectrums.
The characteristics of a wireless card do not impact its performance in different wireless spectrums.
Signup and view all the answers
The maximum output power of a wireless card in the United States is 20 dBm.
The maximum output power of a wireless card in the United States is 20 dBm.
Signup and view all the answers
A directional antenna is typically used for point-to-multipoint connections.
A directional antenna is typically used for point-to-multipoint connections.
Signup and view all the answers
Using a longer antenna cable tends to increase signal loss.
Using a longer antenna cable tends to increase signal loss.
Signup and view all the answers
Power output of a wireless card can be influenced by the region setting of the card.
Power output of a wireless card can be influenced by the region setting of the card.
Signup and view all the answers
An external wireless card will usually come with a high-gain directional antenna.
An external wireless card will usually come with a high-gain directional antenna.
Signup and view all the answers
Legal power limits for wireless transmissions vary by country.
Legal power limits for wireless transmissions vary by country.
Signup and view all the answers
The gain from an antenna is typically measured in milliwatts.
The gain from an antenna is typically measured in milliwatts.
Signup and view all the answers
Wired Equivalent Privacy (WEP) protocol is commonly used in modern wireless technologies.
Wired Equivalent Privacy (WEP) protocol is commonly used in modern wireless technologies.
Signup and view all the answers
Omnidirectional antennas are used when the target's location is unknown.
Omnidirectional antennas are used when the target's location is unknown.
Signup and view all the answers
A Raspberry Pi microcomputer can cost as much as $500.
A Raspberry Pi microcomputer can cost as much as $500.
Signup and view all the answers
The gain from an antenna is measured in decibels pseudo-isotropic (dBPI).
The gain from an antenna is measured in decibels pseudo-isotropic (dBPI).
Signup and view all the answers
Directional antennas are also called Yagi antennas.
Directional antennas are also called Yagi antennas.
Signup and view all the answers
Wireless antennas can only improve the transmission of radiofrequency (RF) signals, but not reception.
Wireless antennas can only improve the transmission of radiofrequency (RF) signals, but not reception.
Signup and view all the answers
A wireless card that supports external antennas offers greater flexibility and performance.
A wireless card that supports external antennas offers greater flexibility and performance.
Signup and view all the answers
What is a significant characteristic of the 802.11a standard?
What is a significant characteristic of the 802.11a standard?
Signup and view all the answers
What is the main advantage of using a directional antenna?
What is the main advantage of using a directional antenna?
Signup and view all the answers
Which of the following best describes a potential vulnerability in newer wireless technologies?
Which of the following best describes a potential vulnerability in newer wireless technologies?
Signup and view all the answers
What is a common price range for good quality microcomputers such as the Raspberry Pi?
What is a common price range for good quality microcomputers such as the Raspberry Pi?
Signup and view all the answers
What does dBi measure in relation to antennas?
What does dBi measure in relation to antennas?
Signup and view all the answers
Which type of antenna is generally preferred for malicious access point attacks?
Which type of antenna is generally preferred for malicious access point attacks?
Signup and view all the answers
What is a disadvantage of using a longer cable from the antenna to the wireless radio?
What is a disadvantage of using a longer cable from the antenna to the wireless radio?
Signup and view all the answers
How is the effective output power of a wireless radio typically increased?
How is the effective output power of a wireless radio typically increased?
Signup and view all the answers
What advantage does an external antenna provide for a wireless card?
What advantage does an external antenna provide for a wireless card?
Signup and view all the answers
Which command is used to change the region setting of a wireless card?
Which command is used to change the region setting of a wireless card?
Signup and view all the answers
Which of the following options correctly identifies a characteristic of omnidirectional antennas?
Which of the following options correctly identifies a characteristic of omnidirectional antennas?
Signup and view all the answers
What does the power output of a wireless card typically indicate?
What does the power output of a wireless card typically indicate?
Signup and view all the answers
What is the primary limitation on the power output of radios in different countries?
What is the primary limitation on the power output of radios in different countries?
Signup and view all the answers
What aspect of a wireless card influences the channels it can access?
What aspect of a wireless card influences the channels it can access?
Signup and view all the answers
What does the abbreviation dBm stand for in the context of wireless power output?
What does the abbreviation dBm stand for in the context of wireless power output?
Signup and view all the answers
What is the primary goal during the wireless reconnaissance phase?
What is the primary goal during the wireless reconnaissance phase?
Signup and view all the answers
Which wireless standards should be prioritized when targeting wireless technologies?
Which wireless standards should be prioritized when targeting wireless technologies?
Signup and view all the answers
In the context of remote worker reconnaissance, which type of employee information is NOT relevant to gather?
In the context of remote worker reconnaissance, which type of employee information is NOT relevant to gather?
Signup and view all the answers
What is a significant reason for targeting employees' family members in social spear phishing?
What is a significant reason for targeting employees' family members in social spear phishing?
Signup and view all the answers
What should be a primary consideration when selecting a compatible wireless network card?
What should be a primary consideration when selecting a compatible wireless network card?
Signup and view all the answers
The primary focus during the wireless reconnaissance phase is to compromise wireless client services first.
The primary focus during the wireless reconnaissance phase is to compromise wireless client services first.
Signup and view all the answers
Using online services like Spokeo is an ineffective method for gathering information about targeted employees' home addresses.
Using online services like Spokeo is an ineffective method for gathering information about targeted employees' home addresses.
Signup and view all the answers
The most popular wireless technologies today include 802.11b/g/n, while 802.11a is considered obsolete.
The most popular wireless technologies today include 802.11b/g/n, while 802.11a is considered obsolete.
Signup and view all the answers
An omnidirectional antenna radiates signals equally in all directions.
An omnidirectional antenna radiates signals equally in all directions.
Signup and view all the answers
The chipset type of a wireless card plays no role in determining the wireless standards it supports.
The chipset type of a wireless card plays no role in determining the wireless standards it supports.
Signup and view all the answers
All modern wireless technologies are designed to completely eliminate the risk of unencrypted traffic sniffing.
All modern wireless technologies are designed to completely eliminate the risk of unencrypted traffic sniffing.
Signup and view all the answers
Low-priced microcomputers can typically cost more than $150.
Low-priced microcomputers can typically cost more than $150.
Signup and view all the answers
Directional antennas can improve both transmission and reception of RF signals.
Directional antennas can improve both transmission and reception of RF signals.
Signup and view all the answers
Omnidirectional antennas are primarily used for targeted point-to-point communication.
Omnidirectional antennas are primarily used for targeted point-to-point communication.
Signup and view all the answers
The gain provided by a wireless antenna is measured in decibels isotropic (dBI).
The gain provided by a wireless antenna is measured in decibels isotropic (dBI).
Signup and view all the answers
All wireless antennas are designed to operate exclusively with internal connections.
All wireless antennas are designed to operate exclusively with internal connections.
Signup and view all the answers
The regions setting of a wireless card can potentially allow for increased transmission strength beyond legal limits.
The regions setting of a wireless card can potentially allow for increased transmission strength beyond legal limits.
Signup and view all the answers
Yagi antennas are a type of omnidirectional antenna.
Yagi antennas are a type of omnidirectional antenna.
Signup and view all the answers
A directional antenna can effectively transmit signals in multiple directions.
A directional antenna can effectively transmit signals in multiple directions.
Signup and view all the answers
Using a longer USB cable instead of a longer antenna cable can help minimize signal loss.
Using a longer USB cable instead of a longer antenna cable can help minimize signal loss.
Signup and view all the answers
The maximum power output of a radio in the United States is primarily influenced by the type of antenna being used.
The maximum power output of a radio in the United States is primarily influenced by the type of antenna being used.
Signup and view all the answers
Omnidirectional antennas typically provide higher gain compared to directional antennas.
Omnidirectional antennas typically provide higher gain compared to directional antennas.
Signup and view all the answers
The iwconfig command can be used to check the current channel settings of a wireless card.
The iwconfig command can be used to check the current channel settings of a wireless card.
Signup and view all the answers
Increased cable length from an antenna to a wireless radio always results in decreased signal strength.
Increased cable length from an antenna to a wireless radio always results in decreased signal strength.
Signup and view all the answers
What is a critical step if initial attempts to compromise wireless networks are unsuccessful?
What is a critical step if initial attempts to compromise wireless networks are unsuccessful?
Signup and view all the answers
What type of information is important to gather during remote presence reconnaissance?
What type of information is important to gather during remote presence reconnaissance?
Signup and view all the answers
Which wireless technology operates primarily on the 2.4 GHz spectrum?
Which wireless technology operates primarily on the 2.4 GHz spectrum?
Signup and view all the answers
What is a consideration when selecting a wireless network card?
What is a consideration when selecting a wireless network card?
Signup and view all the answers
In which order should attacks on wireless systems be performed for maximum effectiveness?
In which order should attacks on wireless systems be performed for maximum effectiveness?
Signup and view all the answers
What is the typical gain of an antenna that can increase the effective output power when added to a wireless radio?
What is the typical gain of an antenna that can increase the effective output power when added to a wireless radio?
Signup and view all the answers
Which command sequence allows a user to change the transmission power on a wireless card to the maximum value in New Zealand?
Which command sequence allows a user to change the transmission power on a wireless card to the maximum value in New Zealand?
Signup and view all the answers
Which country has a maximum output power limit for wireless radios unique to it, typically measured in dBm?
Which country has a maximum output power limit for wireless radios unique to it, typically measured in dBm?
Signup and view all the answers
The power output of a wireless card does NOT affect which of the following aspects?
The power output of a wireless card does NOT affect which of the following aspects?
Signup and view all the answers
What is the primary drawback of using a longer antenna cable rather than a longer USB cable for wireless connections?
What is the primary drawback of using a longer antenna cable rather than a longer USB cable for wireless connections?
Signup and view all the answers
In the context of wireless cards, increasing the region setting to New Zealand may allow for what change?
In the context of wireless cards, increasing the region setting to New Zealand may allow for what change?
Signup and view all the answers
What aspect does the chipset of a wireless card significantly determine?
What aspect does the chipset of a wireless card significantly determine?
Signup and view all the answers
What is a primary advantage of using a directional antenna over an omnidirectional antenna?
What is a primary advantage of using a directional antenna over an omnidirectional antenna?
Signup and view all the answers
Which factor is NOT important when considering a wireless network card’s antenna?
Which factor is NOT important when considering a wireless network card’s antenna?
Signup and view all the answers
What is a potential security vulnerability in modern wireless technologies that do not implement WEP?
What is a potential security vulnerability in modern wireless technologies that do not implement WEP?
Signup and view all the answers
What is a common feature of a Raspberry Pi microcomputer?
What is a common feature of a Raspberry Pi microcomputer?
Signup and view all the answers
What does 'gain' of an antenna typically refer to?
What does 'gain' of an antenna typically refer to?
Signup and view all the answers
Which type of antenna is most suitable when the target's location is unknown?
Which type of antenna is most suitable when the target's location is unknown?
Signup and view all the answers
In which price range do microcomputers such as the Raspberry Pi typically fall?
In which price range do microcomputers such as the Raspberry Pi typically fall?
Signup and view all the answers
What is a characteristic of unencrypted traffic in newer wireless technologies?
What is a characteristic of unencrypted traffic in newer wireless technologies?
Signup and view all the answers
Study Notes
Chapter 7: Phase III: Remote Targeting
- Phase III of remote targeting focuses on identifying and targeting wireless systems.
- This phase is crucial for maintaining anonymity criteria for Advanced Persistent Threats (APTs).
- Wireless systems are ubiquitous, enabling stealth and anonymity.
- Initial reconnaissance involves determining employee relationships for spear phishing attempts.
Wireless Reconnaissance
- Following the initial reconnaissance phase, wireless reconnaissance is the next step.
- The goal is to compromise identified wireless networks by targeting key vulnerabilities.
- If initial attempts to compromise the network fail, wireless client services become the target.
Remote Presence Reconnaissance
- Gathering information about targeted employees, especially remote ones, is vital.
- This includes data from public resources, such as company policy on remote workers, home addresses (using online tools like Spokeo and Intelinus), office locations, and even lunch locations.
Social Spear Phishing
- Social engineering plays a role in this phase.
- Targeting employee family members can yield valuable information from emails.
- Compromising home systems can provide a pivotal point for attacking the employee's computer directly.
Wireless Phases
- Wireless systems are targeted in a specific order:
- Wireless reconnaissance
- Attack wireless access points
- Attack wireless clients
- Time constraints (e.g., 45 minutes in a coffee shop) may exist.
- Even if the wireless network isn't vulnerable, clients at the location can still be targeted.
Remote Edge Access Points
- Remote access points (APs) receive configuration from a central wireless controller.
- This centralized control is a key part of the target infrastructure.
- Visualization: Illustrative diagram of headquarters, VPN, and remote office, connections between them, and the AP
APT Wireless Tools
- Beyond basic laptop and wireless network cards, specialized tools are beneficial.
- Wireless network cards with specific features are important considerations.
- Wireless standards supported
- Antenna supported
- Connection type
- Power
- Chipset type
Wireless Technologies
- Choosing the correct device connection type (e.g., PCMCIA, USB) is significant.
- A few common options, such as Alfa and PRISM cards, facilitate connections and placement.
- The 802.11b/g/n standards are important.
- Newer technologies might have different WEP implementations.
- Wireless spectrums should be targeted (e.g., 2.4 GHz, 5 GHz).
Raspberry Pi Microcomputer
- Low-cost microcomputers like the Raspberry Pi are suitable for this phase.
- They offer features facilitating critical tools.
Wireless Antennas
- Antenna quality and the ability to use external antennas are crucial.
- External antennas enhance both transmission and reception
- Different antenna types exist (directional and omnidirectional)
- Directional antennas are useful for specific targets.
- Omnidirectional antennas offer broader coverage.
Connection Type
- "Rubber ducky" antennas are common, typically small with low gain.
- Longer cables can introduce transmission loss.
- Using USB cables rather than longer antenna cables may improve connections.
Power
- Maximum power output (e.g., dBm or watts) is limited based on legal country regulations.
- Power output should match the wireless networking hardware requirements.
- Kali commands provide information about power regulations.
- Adapting to regional power profiles is essential for success.
Chipset
- Chipset and card specifications dictate available channels and features.
- Popular Linux drivers (e.g., PRISM) support diverse applications.
- Use the command (iw list) to check the card's capabilities.
- Ensuring drivers support passive and monitor modes is important.
Wireless Reconnaissance (Active)
- Active wireless reconnaissance is performed to identify access points and networks.
- Specific tools (Kismet, Airodump) are used for network enumeration.
- This may require physical presence or proximity.
- Beacon frames provide information about SSIDs and data rates, for example.
- Important tools can include Android apps for mapping (such as wardrive or WiGLE WiFi Wardriving).
Internet Wireless Reconnaissance
- Basic information about wireless technologies is a starting point.
- Includes WiFi, guest wireless, guest access, and guest internet, for instance.
Active Wireless Recon Techniques
-
This phase involves two steps:
- Identifying and mapping access points/networks
- Identifying client devices.
-
Using tools in the Aircrack-ng suite is common.
-
Finding BSSID (basic service set identifiers) is important.
-
Tools include Kismet, Airodump, and Android applications for mapping wireless networks.
-
War driving is an active reconnaissance technique used when traditional methods are unsuitable or prohibited.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Related Documents
Description
Explore Phase III of remote targeting in cybersecurity with a focus on identifying and compromising wireless systems. This chapter outlines essential reconnaissance techniques, including employee profiling and the use of public resources. Understand the significance of maintaining anonymity in Advanced Persistent Threats (APTs).