WPA-Enterprise lazyness

The following story is fiction. We have an IT security compagny with 1000 employees. In our office, we don’t have a big wired infrastructure, we have high density wifi. Security is based on WPA2-enterprise. To access wifi, internet, intranet, mail and office applications we use one single account…….. Be aware of the man with the […]

Read More →
ARP in action

In example below we send a ping from host A to host B. Host A doesn’t have an ARP entry for host B. Host B doesn’t have an ARP entry for host A. Step 1. Host A sends an ARP request for host B. Step 2: Host B stores the MAC – and IP address […]

Read More →
Command Line connect wifi

In case of no encryption iw dev <device> connect <ssid> [<bssid>] Why bssid? In case you have multiple access points, you can specify a specific accesspoint. If you have just one, there’s no need to specify. i.e. iw dev wlan0 connect Freewifi 40:A5:EF:25:BF:12 In case of WPA/WPA2 apt-get install wpasupplicant wpa_passphrase <ssid> [passphrase] i.e. wpa_passphrase MyWifi Welcome123 Copy output to file wpa_supplicant […]

Read More →
Linux assign bogus MAC address

With linux we can change the MAC address of an interface via several methods: ifconfig <device> hw ether <mac address> ip link set <device> address <mac address> macchanger <device> <mac address> One disadvantage, we can only configure a unicast MAC address. It’s not possible to configure a non-unicast or bogus address. i.e. ifconfig eth0 hw […]

Read More →
MitM & Hijacking connection (802.1x )

This article describes how to capture traffic between a client and the network with a passive “Man in the Middle”. Also it explains how to generate traffic from a VM where the network only sees 1 MAC and 1 IP address form the client PC. In the example below, we use eth0 and eth1 as […]

Read More →
MitM (802.1x)

This article describes how to capture traffic between a client and the network with a passive “Man in the Middle”. In the example below, we use eth0 and eth1 as a bridge. Configure the MitM interfaces as “link only” interfaces. /etc/network/interfaces auto eth0 iface eth0 inet manual auto eth1 iface eth1 inet manual bring physical […]

Read More →
free website with free domain name

Your free domain go to https://www.freenom.com choose your own free domain sign up   Your free website go to https://www.000webhost.com sign up create a website with name example your website name is http://example.000webhostapp.com   Link your domain to you website in freenom.com go to services, My Domains Click on Manage Domain Go to Management tools, […]

Read More →
Passive Ethernet Tap

Just use an ordinary UTP cable Connect 4 walloutlets to the cable as shown below. Use the straight-through cable if you tap an ordinary switched network Use the cross-over cable if you tap an PC directly connected to another network The results may looks lik this   Place you tap (8 wired walloutlets) between a […]

Read More →
Homebrewed Accespoint

Apt-get install hostapd Apt-get install isc-dhcp-server Accesspoint Note1: hostapd won’t work with 2 wlan interfaces from which 1 is connected to Internet. Thus use wired internet via Ethernet. This can be also a phone connected to your USB which acts as hotspot. Note2: hostapd won’t work while wpa_supplicant is active. example hostapd.conf (/etc/hostapd/hostapd.conf) interface=wlan0 ssid=somename […]

Read More →
Citrix on Linux

Download latest receiver: https://www.citrix.nl/downloads/citrix-receiver/linux/receiver-for-linux-latest.html For debian: dpkg -i xxxxx.deb if you encounter certificate isssues? sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts/

Read More →