ʻO Darren Kitchen: ʻO ke ahiahi maikaʻi, aia mākou ma ka ʻaoʻao o ka hālāwai DefCon ma ka pā hale o ka hui hacker Hack 5, a makemake wau e hoʻolauna i kekahi o kaʻu mea punahele punahele, ʻo DarkMatter, me kāna hoʻomohala hou i kapa ʻia ʻo WiFi Kraken.
ʻO ka manawa hope loa a mākou i hui ai, he ʻeke ʻeke nui kāu me ka "Cactus" i hoʻopaʻa ʻia me ka pineapple ma kou kua, a he mau manawa pupule kēlā!
ʻŌlelo a ka mea unuhi: Ua kau ʻo Mike i kahi pineapple maoli ma kāna hāmeʻa Cactus - he nod i ka WiFi Pineapple, kahi mea hacker no ka hoʻopaʻa ʻana i nā kamaʻilio kelepona, ʻike i ke kiʻi mai ka BlackHat 2017 conference.
Mike Spicer: ʻAe, nā manawa pupule! No laila, hele kēia papahana ma lalo o ka hashtag WiFi Kraken a hōʻike i kahi hanauna hou o nā ʻenehana i ke kahua o ka nānā ʻana i nā ʻoihana uila. I koʻu hana ʻana i ka WiFi Cactus, ua loaʻa iaʻu nā mākau he nui a ua hoʻoholo wau e hoʻokō i nā mea aʻu i aʻo ai, me ka hoʻohana ʻana e hoʻokō i nā pahuhopu kūpono i kahi papahana hou. I kēia lā ke hāʻawi aku nei au iā ʻoe iā Kraken!
ʻO Darren Kitchen: a he aha kēia Kraken? No ke aha e pono ai a he aha ke kumu o kēia hoʻomohala ʻana?
Mike Spicer: ʻO ka pahuhopu ka hiki ke hopu i nā ʻikepili a pau i ka manawa hoʻokahi, nā kaha 50 WiFi āpau i ka laulā 2.4 -5 gigahertz, i ka manawa like.
ʻO Darren Kitchen: no ke aha ʻaʻole ʻoe e hoʻohana wale i hoʻokahi kaila lekiō e hoʻopaʻa i nā ʻikepili āpau?
ʻŌlelo a ka mea unuhi: ʻO Mike Spicer ka mea nāna i hoʻokumu i ka WiFi Cactus, kahi mea no ka nānā ʻana i 50 mau kelepona kelepona ʻole i hoʻohana ʻia e nā polokalamu kelepona i loaʻa i loko o kahi radius o 100 m. Ua hōʻike mua ʻia ʻo WiFi Cactus i ka lehulehu ma ka hālāwai BlackHat ma Iulai 27, 2017. Source link:
Mike Spicer: pilikia loa keia. E nānā i ke kaiapuni a mākou e noho nei i kēia manawa - i loko o kēia lumi he 200-300 mau kānaka me ka pūʻulu o nā hāmeʻa e kamaʻilio ana ma nā ala like ʻole. Inā hoʻolohe wale au i hoʻokahi channel, ʻike paha wau i kekahi mau ʻike koʻikoʻi e hoʻolaha ʻia ana ma kahi ala ʻē aʻe i ka manawa like. Inā ho'āʻo ʻoe e hoʻolohe i nā kaha a pau, pono ʻoe e hoʻolilo i ka manawa nui e lele ana mai kekahi ala a i kekahi. Hoʻopau ʻo Cactus i kēia pilikia ma ka ʻae ʻana iā ʻoe e hoʻolohe i kēia mau ala āpau i ka manawa like.
ʻO Darren Kitchen: He aha nā pilikia i loaʻa iā Kraken?
Mike Spicer: ʻO kekahi o nā pilikia nui loa ʻo ia ka 100 megabit Ethernet port aʻu i hoʻopili ai i kaʻu hāmeʻa a me ka bandwidth aʻu i ʻoluʻolu ʻole ai. Ke loaʻa iā ʻoe nā lekiō 2 e hana ana i 300 megabits me nā lekiō hopena 802.11, ʻo ka hoʻokuke ʻana i ka ʻikepili nui e kaupalena ʻia ka throughput. No laila, makemake wau e hoʻonui i ka hoʻokipa a me ke ala hoʻouna. Ma ka ʻaoʻao aʻe o Cactus, ua hana wau i ka hoʻololi ʻana mai kahi hoʻololi 100 megabit i kahi hoʻololi gigabit, i hoʻonui i ka throughput e 10 mau manawa.
Me Kraken ua lawe au i kahi ala hou loa - pili pololei wau i ka pahi PCI Express.
ʻO Darren Kitchen: e pili ana iā PCIE - ʻIke wau i kahi pūʻulu o nā modules radio ma aneʻi, kahi i kū ai kēia mau kihi antenna alumini.
Mike Spicer: ʻAe, he hopena ʻenehana hoihoi kēia e pili ana i nā ʻāpana i kūʻai ʻia ma Amazon, pono wau e hakakā me ka waiho ʻana i nā kaula a me ka pena ʻana i nā antennas ʻeleʻele.
ʻO ke kumu nā mea hoʻololi kelepona uila no nā polokalamu Android MediaTek MT 6752, a ʻo ka mea hoihoi loa ka hoʻohana ʻana i ka mea hoʻokele kernel Linux. ʻO ia ke ʻano hiki iaʻu ke nānā i nā kahawai, hiki iaʻu ke hoʻokomo i ka ʻikepili, hana i kēlā mau mea ʻoluʻolu a mākou e makemake ai nā mea hackers e hana me nā kāleka uila.
ʻO Darren Kitchen: ʻAe, ʻike au i nā kāleka 11 ma ʻaneʻi no ka uila B, G, A, C.
Mike Spicer: ma ka laulā o 2,4-5 GHz, 20 a me 40.
ʻO Darren Kitchen: hōʻemi i ka "kālua" a me ka "kāhā". Ma kēia ala, hiki ke hoʻohana ʻia nā pae kamaʻilio like ʻole a me kā lākou hui ʻana. ʻO kēia kahi mea a mākou i kamaʻilio mua ai i ka wā i kūkākūkā ai mākou i ka hoʻohana ʻana i hoʻokahi mīkini lekiō e lele ana ma nā ʻano lekiō like ʻole. Hoʻolohe ʻoe i ke kahawai 1 a hala nā mea a pau e hana nei i ka manawa like ma ke kahawai 6, hoʻolohe i ke kahawai 2 a hala i ke koena, a pēlā aku. E haʻi mai iaʻu, ʻehia ka nui o nā hui ʻana o nā alapine, nā alahele, nā ʻāpana e hiki ai i kāu hāmeʻa ke hana i ka manawa like?
Mike Spicer: Wahi a nā helu hope loa, ʻo ka helu o nā kahawai i nānā ʻia i ka manawa like he 84. Malia paha e hiki i kekahi ke nānā i nā kahawai hou aʻe, akā ʻo nā hui aʻu i hoʻohana ai e hāʻawi i kēia helu. Eia naʻe, hiki i kēia papahana iā ʻoe ke hoʻolohe i ka 14 wale nō o lākou, kokoke e like me ka Cactus e ʻae ai, akā liʻiliʻi iki. Manaʻo wau e hiki iaʻu ke hoʻohana i kekahi o nā hoʻonā mai Cactus a Kraken i mea e ʻoi aku ka maikaʻi.
ʻO Darren Kitchen: e haʻi mai iaʻu i ka mea āu e hoʻohana ai e hopu?
Mike Spicer: Hoʻohana au i ka lako polokalamu Kismet - he mea ʻike pūnaewele, packet sniffer a me intrusion detection system no 802.11 wireless LANs. He polokalamu kupanaha loa kēia e hiki ai iaʻu ke hoʻokō kokoke i nā papahana a pau no DefCon, super stable a loaʻa kahi mea hoʻohana pūnaewele. Hiki iā ia ke nānā i nā pūnaewele uea, hōʻike i nā mea e hana nei ma laila, no ka laʻana, ʻike ʻoe i kahi laina ʻulaʻula ma ka pale nānā, ʻo ia hoʻi ke hana nei nā mea hoʻohana i kahi lulu lima. Hoʻoponopono kēia polokalamu i ka ʻikepili kamaʻilio radio i ka manawa maoli. ʻO kekahi o nā pilikia i hiki iaʻu ke hoʻoponopono me ke kōkua o kēia polokalamu ma kēia hāmeʻa, ʻo ia ka ʻike ʻike ʻikepili manawa maoli, ʻo ia hoʻi, ʻike wau ma ka nānā ʻana i nā mea e hana nei me ka pūnaewele uea i kēia manawa.
ʻO Darren Kitchen: a ʻaʻole pono ʻoe e ʻaʻahu i kāu ʻeke ʻeke Cactus e hana i kēia. No laila he aha ka mea i loko o ka pahu ʻeleʻele o Kraken?
Mike Spicer: ʻO ke kumu ia he pūʻulu o nā kāleka kelepona USB3.0 no ka mea ke hoʻopili pololei nei au i ka pahi PCIE.
ʻO Darren Kitchen: ʻo ia hoʻi, ke hoʻohana nei ʻoe i kahi kamepiula maoli me ka motherboard ATX. Ua like loa kēia me ka hoʻokuʻu alpha o ka hāmeʻa i hoʻohana ʻia i nā makahiki he nui aku nei, aia nā kāleka 6 me USB2.0, i hoʻohana i ka motherboard ATX me nā awa USB 14 a pono e hoʻohui i kahi adapter USB e hana me nā kāleka PCIE. I ka manawa like, ua puka mai nā pilikia me ka throughput. He aha ka mea i hoʻokomo ʻia ma kēia hāmeʻa? ʻIke wau iā Intel.
Mike Spicer: ʻAe, hoʻohana ʻo ia i kahi kaʻina hana Intel i5, ʻehā o ka hanauna, ʻaʻohe kumu kūʻai, lawe wau i kaʻu mea. Loaʻa iaʻu kahi motherboard kaʻawale me aʻu, no laila inā haki kekahi mea, hiki iaʻu ke pani wale ia, no laila ua mākaukau wau e hoʻoponopono i nā pilikia e hiki mai ana. No Kraken, ua hoʻohana au i nā ʻāpana liʻiliʻi loa i loaʻa mai nā ʻāpana i mākaukau. ʻAʻole kēia he kino Pelican, ua hoʻohana au i ka mea aʻu i kapa ai ʻo Condition 1, he pōhaku paʻa kēia kino a ʻoi aku ka liʻiliʻi o $150 ma mua o ka Pelican. ʻO ka hoʻonohonoho holoʻokoʻa ke kumu kūʻai iaʻu ma mua o $ 700.
ʻO Darren Kitchen: a no nā kālā 700 ua hana ʻoe i kahi sniffer maikaʻi loa no nā pūnaewele uea ʻole hiki ke hana i ʻoi aku ma mua o ka lekiō hoʻokahi. Pehea ʻoe i hoʻokokoke ai i ka hoʻoponopono ʻana i ka pilikia bandwidth me ka hoʻohana ʻole ʻana i ka Pineapple?
Mike Spicer: i kēia manawa ua loaʻa iā mākou ʻelua USB3.0 a e ʻōlelo wau i kekahi mea e pili ana i ka motherboard. Inā ʻoe e nānā ma aneʻi, aia kahi hub aʻa USB hoʻokahi i hoʻolako ʻia i ke kaʻa, no laila hele nā mea a pau ma kahi port USB 5 gigabit hoʻokahi. He mea maʻalahi kēia no ka mea e like me ka loaʻa ʻana o nā mea hana 250 i hoʻopili ʻia i hoʻokahi kaʻa, akā ʻaʻole maikaʻi ia ma ka ʻōlelo o ka bandwidth. No laila, ua loaʻa iaʻu kēia mau kāleka 7-port PCIE USB me ka bandwidth o 5 gigabits i kēlā me kēia a hoʻohui iā lākou i hoʻokahi kahawai maʻamau me ka bandwidth kiʻekiʻe - ma kahi o 10 gigabits i kekona ma o ka pahi PCIE.
ʻO ka bottleneck aʻe he SSD i hoʻohana ʻia ma o 6 GB SATA, no laila ma ka awelika ua loaʻa iaʻu he 500 megabytes i kekona, a i ʻole 4 gigabits.
ʻO Darren Kitchen: a ua kamaʻilio pū ʻoe i ka mea e kapa ai i kāu hana.
Mike Spicer: Ua kapa wau iā ia "Ua ʻike wau i ka mea āu i hana ai i ke kauwela hope loa - 3 mau makahiki o ka nānā ʻana i ka Pūnaewele Wireless DefCon."
ʻO Darren Kitchen: a he aha ke ʻano o ke kaʻa, he aha ka ʻikepili āu i nānā ai i nā ʻaha kūkā DefCon ʻekolu i hala?
Mike Spicer: ʻO ka mea hoihoi loa aʻu i ʻike ai he leak API. He 2 ia mau hihia i ka huina, hoʻokahi leak i hele mai mai ka hui Norewai met.no, ka mea nāna i hoʻomohala i ka noi wānana WeatherAPI, a pili i nā manawa o ka puka ʻana a me ka napoʻo ʻana o ka lā. Ua hoʻouna kēia palapala noi i kahi noi HTTP kahi o nā ʻāpana nui o ka leak he latitu a me longitude, no laila ʻaʻole ia e pōʻino.
ʻO Darren Kitchen: ʻo ia hoʻi, hiki i kēlā me kēia me ka helu MAC o kahi kelepona kūʻokoʻa ke kāohi i kēia noi ...
Mike Spicer: ʻae, a e hoʻokomo i kāu ʻikepili e hoʻololi i ka manawa o ka puka ʻana o ka lā.
ʻO Darren Kitchen: oops!
Mike Spicer: pololei pololei, ʻoops...Ua loaʻa iaʻu kekahi polokalamu like weather.com e hana like ana, ʻo ia ka ZTE desktop widget, a i koʻu ʻike ʻana iā ia, ua hoʻohenehene lākou i koʻu manaʻo.
ʻO Darren Kitchen: ʻAe, ʻae, loaʻa iā lākou kahi ala maʻalahi - no ke aha e pilikia ai me ka hiki ke komo i ka HTTP, ʻo ia wale nō ka ʻikepili o ka wā, ʻaʻohe ʻike pilikino ...
Mike Spicer: ʻAe, akā ʻo ka mea i hoʻokomo ʻia, noi ka hapa nui o kēia mau noi iā ʻoe e ʻae i ka ʻike e pili ana i kou wahi, a hāʻawi ʻoe iā lākou i kēia manawa, me ka maopopo e palekana kāu ʻikepili pilikino. ʻO ka ʻoiaʻiʻo, hiki i ka leakage ʻike ma o HTTP ke hōʻino loa i kou hilinaʻi i ia mau API.
ʻO Darren Kitchen: ua ʻike paha ʻoe i kahi pūʻulu o nā mea ʻokoʻa ma aneʻi!
Mike Spicer: ʻae, nui nā mea hana ma ka ʻuena uila! I ka wā o DefCon ma mua, ua hāʻule ʻo Kismet i ke kikowaena no ka mea e hoʻoili ana i ka ʻikepili mai kahi helu pupule o nā polokalamu i ka manawa like ma ka pūnaewele WiFi. ʻO ka nui o nā mea i hoʻopaʻa ʻia ma ka pūnaewele i hiki i 40 tausani! ʻAʻole loa au i hopohopo i ka helu ʻana i ka nui o nā mea hana ʻokoʻa aʻu i lawe ai no ka mea, ua like ia me ka nānā ʻana i lalo i kahi lua rabbit pau ʻole.
ʻO Darren Kitchen: ʻAe, ʻae, aia ʻoe ma DefCon ma hope o nā mea a pau! Ke holo nei ʻo MDK3, MDK4 ma ʻaneʻi, he pūʻulu o nā leka uila MAC i pop up, etc.
Mike Spicer: ʻAe, ke hoʻomaka ka poʻe e holo i kā lākou ESP32 microcontrollers i ka manawa like, hemo nā poʻe āpau.
ʻO Darren Kitchen: aia kekahi ʻike e pili ana iā Kraken ma GitHub a i kāu blog?
Mike Spicer: ʻAe, ua kau wau i ke code no ka mea i ka wā aʻu i hana ai i kahi loiloi o ka ʻikepili i loaʻa, ʻaʻole hiki iā Wireshark ke hoʻokō me ia, no ka mea inā loaʻa iā ʻoe kahi faila o 2,3,5 Gb i ka nui a makemake ʻoe e nānā i ka noi HTTP, ʻo ʻoe. pono e kali no 30 mau minuke. He kanaka hoʻokahi wau e hana ana i ka nānā ʻana i nā kaʻa a ʻaʻohe oʻu hui e hana ia noʻu, no laila pono wau e hana i kaʻu hana me ka hiki. Ua nānā au i kekahi mau mea hana a kamaʻilio pū me nā mea hoʻomohala pāʻoihana, akā ʻaʻole kūpono kā lākou huahana i kaʻu mau pono. ʻOiaʻiʻo, aia hoʻokahi ʻokoʻa - ka papahana miner Network i hoʻomohala ʻia e ka hui NETRESEC. ʻEkolu mau makahiki i hala aku nei, ua hāʻawi mai ka mea hoʻomohala iaʻu i kope manuahi o kēia code, ua hoʻouna aku au iā ia i kaʻu mau ʻōlelo, ua hoʻonui lākou i ka polokalamu a i kēia manawa ke hana maikaʻi nei ka papahana, e hōʻoiaʻiʻo ʻaʻole i hoʻoponopono ʻia nā ʻeke pūnaewele āpau, akā ʻo nā mea i hoʻouna ʻia ma ke kelepona.
Hoʻokaʻawale maʻalahi ia i nā kaʻa i nā ʻāpana a hōʻike iā DNS, HTTP, nā faila o kēlā me kēia ʻano i hiki ke hui hou ʻia. He mea hana forensics kamepiula hiki ke ʻeli hohonu i nā noi.
Hana maikaʻi kēia polokalamu me nā faila nui, akā ua holo wale au i nā hoʻonohonoho nīnau maʻamau i loko, a pono nō hoʻi au e ʻike i nā code SSID a pau i hoʻohana ʻia ma ka pūnaewele uila DefCon. No laila ua kākau wau i kaʻu mea hana ponoʻī i kapa ʻia ʻo Pcapinator, aʻu e hōʻike ai i kaʻu haʻiʻōlelo i ka Pōʻalima. Ua kau aku au ma kaʻu ʻaoʻao ma github.com/mspicer, no laila hiki iā ʻoe ke nānā inā hana ia.
ʻO Darren Kitchen: ʻO ke kūkākūkā hui a me ka hoʻāʻo ʻana i kā mākou huahana he mea nui, kekahi o nā waiwai nui o ko mākou kaiāulu.
Mike Spicer: ʻAe, makemake au i ka wā e ʻōlelo mai ai ka poʻe iaʻu, "He aha kou manaʻo e pili ana i kēia a i ʻole kēlā?" A ʻōlelo wau, "ʻAʻole e nā kāne, ʻaʻole wau i noʻonoʻo i kekahi mea like, he manaʻo maikaʻi loa kēlā!" E like me ka Kraken - koʻu manaʻo e hoʻopaʻa wale i kēia mau antenna a pau ma aneʻi, e hoʻohuli i ka ʻōnaehana a waiho ma kahi kihi no 6 mau hola a hiki i ka pau ʻana o ka pākaukau, a hopu i ka WiFi āpau āpau.
ʻO Darren Kitchen: ʻAe, hauʻoli nui wau e hālāwai me ʻoe a hele mai ʻoukou i Hack 5 e ʻike i ka mea a Mike i hana ai no mākou āpau!
Kekahi mau hoʻolaha 🙂
Mahalo no kou noho pū ʻana me mākou. Makemake ʻoe i kā mākou ʻatikala? Makemake ʻoe e ʻike i nā mea hoihoi hou aʻe? E kākoʻo iā mākou ma ke kau ʻana i kahi kauoha a i ʻole ka ʻōlelo ʻana i nā hoaaloha, , he analogue kū hoʻokahi o nā kikowaena hoʻokomo-level, i hana ʻia e mākou no ʻoe: (loaʻa me RAID1 a me RAID10, a hiki i 24 cores a hiki i 40GB DDR4).
ʻO Dell R730xd 2 mau manawa maʻalahi ma Equinix Tier IV kikowaena data ma Amsterdam? Eia wale nō ma Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - mai $99! Heluhelu e pili ana
Source: www.habr.com