wireless | Penetration Testing Tools

kalibrate-rtl

February 18, 2014portsWireless Attackssdr, wireless

Kalibrate, or kal, can scan for GSM base stations in a given frequency band and can use those GSM base stations to calculate the local oscillator frequency offset.

KillerBee

February 18, 2014portsWireless Attackswireless, zigbee

KillerBee is a Python based framework and tool set for exploring and exploiting the security of ZigBee and IEEE 802.15.4 networks. Using KillerBee tools and a compatible IEEE 802.15.4 radio interface, you can eavesdrop on ZigBee networks, replay traffic, attack cryptosystems and much more.

Kismet

February 18, 2014portsWireless Attacksenumeration, wireless

Kismet is an 802.11 layer-2 wireless network detector, sniffer, and intrusion detection system. It will work with any wireless card that supports raw monitoring (rfmon) mode, and can sniff 802.11a/b/g/n traffic. It can use other programs to play audio alarms for network events, read out network summaries, or provide GPS coordinates.

mdk3

February 18, 2014portsStress Testing, Wireless Attacksstresstesting, wireless

MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses. IMPORTANT: It is your responsibility to make sure you have permission from the network owner before running MDK against it.

mfcuk

February 18, 2014portsWireless Attacksrfid, wireless

Toolkit containing samples and various tools based on and around libnfc and crapto1, with emphasis on Mifare Classic NXP/Philips RFID cards.

mfoc

February 18, 2014portsWireless Attacksrfid, wireless

MFOC is an open source implementation of “offline nested” attack by Nethemba. This program allow to recover authentication keys from MIFARE Classic card.

mfterm

February 18, 2014portsWireless Attacksrfid, wireless

mfterm is a terminal interface for working with Mifare Classic tags.

Multimon-NG

February 18, 2014portsWireless Attackssdr, wireless

MultimonNG a fork of multimon. It decodes a large number of digital transmission modes.

Reaver

February 18, 2014portsStress Testing, Wireless Attacksstresstesting, wireless

Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases, as described in http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf.

redfang

February 18, 2014portsWireless Attacksbluetooth, enumeration, wireless

RedFang is a small proof-of-concept application to find non discoverable Bluetooth devices. This is done by brute forcing the last six (6) bytes of the Bluetooth address of the device and doing a read_remote_name().

Tag: wireless