Darren Chav Ua Noj: Nyob zoo yav tav su, peb nyob rau sab xis ntawm DefCon lub rooj sib tham ntawm lub pavilion ntawm pawg neeg hacker Hack 5, thiab kuv xav qhia ib qho ntawm kuv nyiam hackers, DarkMatter, nrog nws txoj kev loj hlob tshiab hu ua WiFi Kraken.
Lub sijhawm kawg peb tau ntsib, koj muaj lub hnab ev ntawv loj nrog "Cactus" topped nrog pineapple rau koj nraub qaum, thiab lub sijhawm ntawd vwm!
Tus neeg txhais lus ceeb toom: Mike tso ib lub txiv pineapple tiag tiag ntawm nws lub Cactus ntaus ntawv - qhov nod rau WiFi Pineapple, lub cuab yeej hacker rau cuam tshuam kev sib txuas lus wireless, saib daim duab los ntawm BlackHat 2017 lub rooj sib tham.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Yog, lub sijhawm vwm tiag tiag! Yog li, qhov project no mus nyob rau hauv lub hashtag WiFi Kraken thiab sawv cev rau tiam tshiab ntawm technologies nyob rau hauv lub tshav pob ntawm kev saib xyuas wireless tes hauj lwm. Thaum kuv tsim WiFi Cactus, kuv tau txais ntau yam kev txawj ntse thiab txiav txim siab muab qhov kuv tau kawm rau hauv kev xyaum, siv nws kom ua tiav cov hom phiaj siv tau hauv txoj haujlwm tshiab. Hnub no kuv nthuav qhia rau koj Kraken!
Darren Chav Ua Noj: thiab Kraken no yog dab tsi? Vim li cas thiaj xav tau thiab lub hom phiaj ntawm txoj kev loj hlob no yog dab tsi?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Lub hom phiaj yog kom ntes tau tag nrho cov ntaub ntawv ib zaug, tag nrho 50 WiFi raws hauv 2.4 -5 gigahertz ntau, ib txhij.
Darren Chav Ua Noj: vim li cas koj ho tsis siv ib lub xov tooj cua los cuam tshuam tag nrho cov ntaub ntawv?
Tus neeg txhais lus ceeb toom: Mike Spicer yog tus tsim ntawm WiFi Cactus, ib lub cuab yeej rau kev saib xyuas 50 wireless kev sib txuas lus siv los ntawm cov khoom siv txawb uas nyob hauv ib lub vojvoog ntawm 100 m. WiFi Cactus tau xub nthuav tawm rau pej xeem ntawm BlackHat lub rooj sib tham thaum Lub Xya Hli 27, 2017. Source link:
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! qhov no yog teeb meem heev. Saib ntawm ib puag ncig peb nyob tam sim no - hauv chav no tuaj yeem yooj yim muaj 200-300 tus neeg nrog ib pawg ntawm cov cuab yeej sib txuas lus sib txuas. Yog tias kuv tsuas mloog ib lub channel xwb, kuv yuav nco tau qee cov ntaub ntawv tseem ceeb uas tau tshaj tawm rau lwm tus channel tib lub sijhawm. Yog tias koj sim mloog tag nrho cov channel, koj yuav tsum siv sijhawm ntau dhia ntawm ib channel mus rau lwm qhov. Cactus daws qhov teeb meem no los ntawm kev tso cai rau koj mloog tag nrho cov channel no tib lub sijhawm.
Darren Chav Ua Noj: Cov teeb meem dab tsi Kraken tau ntsib?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Ib qho teeb meem loj tshaj plaws yog 100 megabit Ethernet chaw nres nkoj uas kuv txuas nrog kuv lub cuab yeej thiab qhov bandwidth uas kuv tsis txaus siab rau. Thaum koj muaj 2 xov tooj cua ua 300 megabits nrog 802.11 kawg xov tooj cua, thawb cov ntaub ntawv ntau dhau lawm yuav ua rau muaj kev txwv tsis pub dhau. Yog li ntawd, kuv xav nthuav kev txais tos thiab kev sib kis channel. Nyob rau hauv lub tom ntej no version ntawm Cactus, kuv tau hloov los ntawm ib tug 100 megabit hloov mus rau ib tug gigabit hloov, uas ua rau kom lub throughput los ntawm 10 lub sij hawm.
Nrog Kraken kuv coj txoj hauv kev tshiab - Kuv txuas ncaj qha mus rau PCI Express tsheb npav.
Darren Chav Ua Noj: hais txog PCIE - Kuv pom tag nrho cov xov tooj cua modules ntawm no, los ntawm cov txhuas kav hlau txais xov cov ces kaum tawm.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Yog lawm, qhov no yog qhov kev daws teeb meem nthuav dav raws li cov khoom yuav ntawm Amazon, Kuv yuav tsum tau tawm tsam nrog kev tso cov cables thiab tshuaj tsuag pleev xim rau cov kav hlau txais xov dub.
Lub hauv paus yog wireless processor adapters rau Android pab kiag li lawm MediaTek MT 6752, thiab qhov nthuav tshaj plaws yog siv lub Linux ntsiav tsav tsheb. Qhov no txhais tau tias kuv tuaj yeem saib xyuas cov channel, Kuv tuaj yeem txhaj cov ntaub ntawv, ua txhua yam txias uas peb cov neeg nyiag nkas nyiam ua nrog daim npav wireless.
Darren Chav Ua Noj: yog, kuv pom 11 daim npav ntawm no rau wireless B, G, A, C.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! nyob rau hauv ntau ntawm 2,4-5 GHz, 20 thiab 40.
Darren Chav Ua Noj: rho "nees nkaum" thiab ntxiv "plaub caug". Ua li no, kev sib txuas lus sib txawv thiab lawv cov kev sib txuas tuaj yeem siv tau. Nov yog qee yam peb twb tau tham txog thaum peb tham txog kev siv ib lub xov tooj cua scanner hopping hla ntau lub xov tooj cua sib txawv. Koj mloog channel 1 thiab nco txhua yam uas tshwm sim nyob rau tib lub sijhawm ntawm channel 6, mloog channel 2 thiab nco tus so, thiab lwm yam. Qhia rau kuv, muaj pes tsawg qhov sib txuas ntawm zaus, raws, bands tuaj yeem ua rau koj lub cuab yeej ua haujlwm ib txhij?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Raws li qhov tseeb suav, tus naj npawb ntawm cov kev soj ntsuam ib txhij yog 84. Tej zaum ib tus neeg yuav tuaj yeem saib xyuas ntau cov channel, tab sis cov kev sib txuas uas kuv siv tau muab tus lej no. Txawm li cas los xij, qhov project no tso cai rau koj mloog tsuas yog 14 ntawm lawv, yuav luag ntau npaum li Cactus tso cai, tab sis tsawg dua. Kuv vam tias kuv tuaj yeem siv qee qhov kev daws teeb meem los ntawm Cactus rau Kraken kom ua tau zoo dua.
Darren Chav Ua Noj: qhia kuv seb koj siv dab tsi los ntes?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Kuv siv Kismet software - nws yog lub network detector, pob ntawv sniffer thiab intrusion detection system rau 802.11 wireless LANs. Qhov no yog ib qho amazing all-in-ib software uas tso cai rau kuv mus nqa tawm yuav luag tag nrho tej yaam num rau DefCon, super ruaj khov thiab muaj ib tug web user interface. Nws tuaj yeem luam theej duab wireless network, tshaj tawm tias muaj dab tsi tshwm sim nyob rau ntawd, piv txwv li, tam sim no koj pom kab liab ntawm lub vijtsam saib, txhais tau hais tias cov neeg siv khoom siv tam sim no ua haujlwm tuav tes. Cov software no ua cov ntaub ntawv xov tooj cua sib txuas lus hauv lub sijhawm. Ib qho ntawm cov teeb meem uas kuv tuaj yeem daws tau nrog kev pab los ntawm cov software no ntawm cov cuab yeej no yog cov ntaub ntawv pom lub sijhawm tiag tiag, uas yog, kuv pom ntawm lub monitor muaj dab tsi tshwm sim nrog lub wireless network tam sim no.
Darren Chav Ua Noj: thiab koj tsis tas yuav hnav koj lub hnab Cactus los ua qhov no. Yog li, dab tsi yog nyob rau hauv Kraken lub thawv dub?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Nws yog ib txheej ntawm USB3.0 wireless phaib vim kuv txuas ncaj qha mus rau PCIE tsheb npav.
Darren Chav Ua Noj: uas yog, koj siv lub computer tiag tiag nrog ATX motherboard. Qhov no zoo ib yam li alpha tso tawm ntawm cov cuab yeej siv ntau xyoo dhau los, suav nrog 6 phaib nrog USB2.0, uas siv ATX motherboard nrog 14 USB ports thiab yuav tsum tau ntxiv USB adapter ua haujlwm nrog PCIE phaib. Nyob rau tib lub sij hawm, teeb meem tshwm sim nrog throughput. Dab tsi yog ntsia rau hauv cov cuab yeej no? Kuv pom Intel.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! yog, nws siv Intel i5 processor, tiam plaub, tsis muaj dab tsi kim, kuv coj yam kuv muaj. Kuv muaj lub motherboard seem nrog kuv, yog li yog tias muaj qee yam tawg, kuv tuaj yeem hloov nws yooj yim, yog li kuv tau npaj los daws cov teeb meem uas yuav tshwm sim. Rau Kraken, kuv siv cov khoom pheej yig tshaj plaws los ntawm cov khoom npaj ua tiav. Qhov no tsis yog lub cev Pelican, Kuv tau siv qhov kuv hu ua Kev Mob 1, lub cev no yog pob zeb thiab $ 150 pheej yig dua Pelican. Tag nrho cov teeb tsa raug nqi kuv tsawg dua $700.
Darren Chav Ua Noj: thiab rau 700 bucks koj ua tau zoo heev sniffer rau wireless networks uas yuav ua tau ntau tshaj li ib lub xov tooj cua. Koj ua li cas los daws qhov teeb meem bandwidth tsis siv Pineapple?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! tam sim no peb muaj ob USB3.0 thiab kuv yuav hais ib yam dab tsi txog lub motherboard. Yog tias koj saib ntawm no, muaj ib qho USB hauv paus hub uas muaj lub tsheb npav, yog li txhua yam mus dhau ib qho 5 gigabit USB chaw nres nkoj. Qhov no yooj yim heev vim tias nws zoo li muaj 250 cov khoom siv txuas nrog ib lub npav, tab sis nws tsis zoo nyob rau hauv cov nqe lus ntawm bandwidth. Yog li ntawd, kuv pom cov 7-chaw nres nkoj PCIE USB phaib nrog ib tug bandwidth ntawm 5 gigabits txhua thiab muab lawv ua ke rau hauv ib tug ntau channel nrog high bandwidth - txog 10 gigabits ib ob ntawm lub PCIE tsheb npav.
Lub fwj tom ntej yog SSD siv ntawm 6 GB SATA, yog li ntawm qhov nruab nrab kuv tau txais 500 megabytes ib ob, lossis 4 gigabits.
Darren Chav Ua Noj: thiab koj kuj tau tham txog dab tsi hu ua koj qhov kev ua tau zoo.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Kuv hu nws "Kuv Paub Koj Ua Dab Tsi Thaum Lub Caij Ntuj Sov - 3 Xyoo ntawm DefCon Wireless Network Saib Xyuas."
Darren Chav Ua Noj: thiab hom kev khiav tsheb zoo li cas, koj tau saib xyuas dab tsi ntawm peb lub rooj sib tham DefCon kawg?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Qhov nthuav tshaj plaws uas kuv pom yog API xau. Muaj 2 qhov xwm txheej zoo li no hauv tag nrho, ib qho xau los ntawm Norwegian lub tuam txhab met.no, tus tsim tawm ntawm WeatherAPI huab cua huab cua huab cua thov, thiab txhawj xeeb txog lub sijhawm ntawm hnub tuaj thiab hnub poob. Daim ntawv thov no tau xa ib daim ntawv thov HTTP qhov twg cov ntsiab lus tseem ceeb ntawm cov xau yog latitude thiab longitude, yog li nws tsis muaj teeb meem kiag li.
Darren Chav Ua Noj: uas yog, leej twg nrog MAC chaw nyob ntawm lub xov tooj tshwj xeeb tuaj yeem cuam tshuam qhov kev thov no ...
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! yog, thiab sau koj cov ntaub ntawv los hloov lub sij hawm hnub tuaj.
Darren Chav Ua Noj: oops ua!
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! raws nraim txoj cai, oops ... Kuv pom lwm qhov zoo sib xws weather.com app uas ua tib yam, nws yog ZTE desktop widget, thiab thaum kuv pom nws, lawv tsuas yog ua rau kuv lub siab.
Darren Chav Ua Noj: Zoo, yog, lawv muaj txoj hauv kev kom meej - yog vim li cas thab nrog HTTP kev nkag tau, nws tsuas yog cov ntaub ntawv huab cua, tsis muaj ntaub ntawv ntiag tug ...
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! yog, tab sis qhov tshaj plaws yog tias thaum nruab, feem ntau ntawm cov ntawv thov no thov kom koj tso cai nkag mus rau cov ntaub ntawv hais txog koj qhov chaw nyob, thiab koj muab lub sijhawm rau lawv, nco ntsoov tias koj cov ntaub ntawv tus kheej yuav nyab xeeb. Qhov tseeb, cov ntaub ntawv xa tawm ntawm HTTP tuaj yeem ua rau koj txoj kev ntseeg siab hauv APIs.
Darren Chav Ua Noj: koj yuav tsum tau pom ib pawg ntawm cov khoom siv tshwj xeeb ntawm no!
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! yog, muaj ntau, ntau yam khoom siv hauv wireless network! Thaum lub sij hawm dhau los DefCon, Kismet tsoo lub server vim tias nws tau ua cov ntaub ntawv los ntawm cov khoom siv vwm ib txhij ntawm WiFi network. Tus naj npawb ntawm cov cuab yeej sau npe hauv lub network tau txog 40 txhiab! Kuv yeej tsis thab suav suav tag nrho cov khoom siv tshwj xeeb uas kuv tau coj vim nws zoo li saib mus rau qhov kawg luav qhov.
Darren Chav Ua Noj: Zoo, yog, koj nyob ntawm DefCon tom qab tag nrho! MDK3, MDK4 tab tom khiav ntawm no, ib pawg ntawm MAC chaw nyob pop up, thiab lwm yam.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Yog lawm, thaum tib neeg pib khiav lawv ESP32 microcontrollers tib lub sijhawm, txhua qhov ntuj raug txim tawg.
Darren Chav Ua Noj: Puas muaj cov ntaub ntawv hais txog Kraken ntawm GitHub lossis ntawm koj qhov blog?
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Yog lawm, kuv tau tshaj tawm cov cai vim tias thaum kuv tau ua qee qhov kev tshuaj xyuas ntawm cov ntaub ntawv tau txais, Wireshark tsis tuaj yeem tiv nrog nws, vim tias thaum koj muaj cov ntaub ntawv loj ntawm 2,3,5 Gb thiab koj xav saib HTTP thov, koj yuav tsum tau tos 30 feeb. Kuv yog ib tug txiv neej uas tsuas yog ua kev tsom xam tsheb thiab kuv tsis muaj ib pab neeg ua rau kuv, yog li kuv yuav tsum ua kuv txoj haujlwm kom tau txais txiaj ntsig zoo. Kuv saib ntau yam cuab yeej thiab tham nrog cov neeg tsim khoom lag luam, tab sis lawv cov khoom tsis ua raws li kuv xav tau. Muaj tseeb, muaj ib qho kev zam - Network miner program tsim los ntawm pawg NETRESEC. Peb xyoos dhau los, tus tsim tawm tau muab ib daim qauv dawb ntawm cov cai no rau kuv, kuv xa nws kuv cov lus, lawv hloov kho cov software thiab tam sim no qhov kev zov me nyuam ua haujlwm zoo kawg nkaus, kom ntseeg tau tias tsis yog tag nrho cov pob ntawv hauv network tau ua tiav, tab sis tsuas yog cov xaim wirelessly xwb.
Nws cia li faib cov tsheb khiav mus rau hauv qhov chaw thiab qhia DNS, HTTP, cov ntaub ntawv ntawm txhua yam uas tuaj yeem rov ua dua. Nws yog lub khoos phis tawj forensics uas tuaj yeem khawb tob rau hauv cov ntawv thov.
Qhov kev pab cuam no ua haujlwm zoo nrog cov ntaub ntawv loj, tab sis kuv tseem tsuas yog khiav cov lus nug kev cai hauv nws, thiab kuv kuj xav paub txog txhua tus lej SSID siv ntawm DefCon wireless network. Yog li kuv tau sau kuv tus kheej lub cuab yeej hu ua Pcapinator, uas kuv yuav nthuav tawm thaum kuv tham rau hnub Friday. Kuv kuj tau muab tso rau hauv kuv nplooj ntawv ntawm github.com/mspicer, yog li koj tuaj yeem tshawb xyuas seb nws ua haujlwm.
Darren Chav Ua Noj: kev sib tham thiab kev soj ntsuam ntawm peb cov khoom yog ib qho zoo heev, ib qho ntawm cov khoom tseem ceeb ntawm peb lub zej zog.
Mike Spicer: 3 Lab tus kiv cua tos koj rau Webtalk! Yog, kuv nyiam nws thaum tib neeg hais rau kuv, "Koj xav li cas txog qhov no lossis qhov ntawd?" Thiab kuv hais tias, "Tsis muaj txiv neej, Kuv tsis tau xav txog ib yam li ntawd, qhov ntawd yog lub tswv yim zoo!" Ib yam li nrog Kraken - kuv lub tswv yim yog kom yooj yim lo tag nrho cov kav hlau txais xov ntawm no, qhib lub kaw lus thiab muab tso rau qhov chaw nyob rau hauv ib lub ces kaum rau 6 teev kom txog thaum lub roj teeb tag, thiab ntes tag nrho cov hauv zos WiFi tsheb.
Darren Chav Ua Noj: zoo, kuv zoo siab heev tau ntsib koj thiab koj tuaj rau Hack 5 kom pom tias Mike tau ua dab tsi rau peb txhua tus!
Ib co ads π
Ua tsaug uas koj tau nyob nrog peb. Koj puas nyiam peb cov ntawv? Xav pom cov ntsiab lus nthuav ntxiv? Txhawb nqa peb los ntawm kev tso ib qho kev txiav txim lossis qhia rau cov phooj ywg, , ib qho tshwj xeeb analogue ntawm nkag-theem servers, uas tau tsim los ntawm peb rau koj: (muaj nrog RAID1 thiab RAID10, mus txog 24 cores thiab mus txog 40GB DDR4).
Dell R730xd 2x pheej yig dua hauv Equinix Tier IV data center hauv Amsterdam? Tsuas yog nyob ntawm no hauv Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - los ntawm $ 99! Nyeem txog
Tau qhov twg los: www.hab.com