Wireless forensics - Revision history

.FUF at 19:56, 14 October 2008

2008-10-14T19:56:43Z

.FUF: cracking only solutions with GPU acceleration

2008-10-14T13:55:43Z

cracking only solutions with GPU acceleration

.FUF at 18:21, 18 September 2008

2008-09-18T18:21:44Z

.FUF: New page: {{Expand}} '''Wireless forensics''' is the process of capturing information that moves over a wireless network and trying to make sense of it in some kind of forensics capacity. == Wirel...

2008-07-20T20:31:05Z

New page: {{Expand}} '''Wireless forensics''' is the process of capturing information that moves over a wireless network and trying to make sense of it in some kind of forensics capacity. == Wirel...

New page

{{Expand}}

'''Wireless forensics''' is the process of capturing information that moves over a wireless network and trying to make sense of it in some kind of forensics capacity.

== Wireless Local Area Networks ==
''WLANs are standardized under the IEEE 802.11 series.''

Common encryption technologies used by these networks are: WEP, WPA/WPA2-PSK, some networks have no encryption at all.

In order to decrypt intercepted secured WLAN traffic you should crack the encryption key. Note, that the only option for cracking WPA/WPA2-PSK keys is to do a brute-force password guessing attack. There are several WPA-PSK rainbow tables [http://www.renderlab.net/projects/WPA-tables/ available].

Many commercial [[network forensics]] systems can intercept and decrypt WLAN traffic, for example:
* Mera Systems [http://netbeholder.com/ NetBeholder Mobile]
* E-Detective [http://www.edecision4u.com/edecision4u/Products.html Wireless Detective System]

As well as some open-source tools:
* [http://aircrack-ng.org/doku.php aircrack-ng]

== Wireless Metropolitan Area Networks ==

== GSM networks ==

== Other networks ==

[[Category:Network Forensics]]

@@ Line 17: / Line 17: @@
 * [http://aircrack-ng.org/doku.php aircrack-ng]
-WPA/WPA2-PSK cracking only solutions with [[Forensics on GPUs|GPU acceleration]] (15-100 times faster than in CPU-only mode):
+WPA/WPA2-PSK cracking-only solutions with [[Forensics on GPUs|GPU acceleration]] (15-100 times faster than in CPU-only mode):
 * [http://www.elcomsoft.com/edpr.html ElcomSoft Distributed Password Recovery]

@@ Line 16: / Line 16: @@
 As well as some open-source tools:
 * [http://aircrack-ng.org/doku.php aircrack-ng]
 == Wireless Metropolitan Area Networks ==

@@ Line 8: / Line 8: @@
 Common encryption technologies used by these networks are: WEP, WPA/WPA2-PSK, some networks have no encryption at all.
-In order to decrypt intercepted secured WLAN traffic you should crack the encryption key. Note, that the only option for cracking WPA/WPA2-PSK keys is to do a brute-force password guessing attack. There are several WPA-PSK rainbow tables [http://www.renderlab.net/projects/WPA-tables/ available].
+In order to decrypt intercepted secured WLAN traffic you should crack the encryption key. Note, that the only option for cracking WPA/WPA2-PSK keys is to do a brute-force password guessing attack. There are several WPA-PSK [[Rainbow Tables|rainbow tables]] [http://www.renderlab.net/projects/WPA-tables/ available].
 Many commercial [[network forensics]] systems can intercept and decrypt WLAN traffic, for example: