Wireless forensics

Wireless forensics is the process of capturing information that moves over a wireless network and trying to make sense of it in some kind of forensics capacity.

Contents  [hide] 1 Wireless Local Area Networks 2 Wireless Metropolitan Area Networks 3 GSM networks 4 Other networks

Wireless Local Area Networks

WLANs are standardized under the IEEE 802.11 series.

Common encryption technologies used by these networks are: WEP, WPA/WPA2-PSK, some networks have no encryption at all.

In order to decrypt intercepted secured WLAN traffic you should crack the encryption key. Note, that the only option for cracking WPA/WPA2-PSK keys is to do a brute-force password guessing attack. There are several WPA-PSK rainbow tables available.

Many commercial network forensics systems can intercept and decrypt WLAN traffic, for example:

• Mera Systems NetBeholder Mobile
• E-Detective Wireless Detective System

As well as some open-source tools:

• aircrack-ng

WPA/WPA2-PSK cracking-only solutions with GPU acceleration (15-100 times faster than in CPU-only mode):

• ElcomSoft Distributed Password Recovery
• Pyrit

Wireless Metropolitan Area Networks

GSM networks

Other networks

Bridge vs Bridge WDS

Terbiasa dengan Routerboard yang dimana bridgenya udah langsung transparent di Layer 2, ini ketemu UBNT Nano Bridge M5 ternyata udah beda…ada 2 fungsi yaitu Bridge dan Bridge WDS
Letak perbedaan ketemu setelah melakukan static route, problemnya bila kita gunakan mode Access Point di sisi Master dan Station di sisi Slave network yg diroute tadi tidak bisa tercapai, problem tsb dikarenakan layer 2 tidak sepenuhnya transparent bridge.
Berikut adalah contoh konfigurasi untuk transparent bridge Layer 2
Master : Access Point WDS

Slave : Station WDS

Problem Solved


http://tribudi.wordpress.com/2010/05/16/bridge-vs-bridge-wds/