KW BLACK MARKET POWERPOINT Revision. DUE AUG 11 6pm EST

King Wave
Fullslidesetwithannotations.ppt
Home>Business & Finance homework help>Marketing homework help>KW BLACK MARKET POWERPOINT Revision. DUE AUG 11 6pm EST

Flaws and fixes for your home router

By Damon Whitley, Networking Specialist

HACKING

How this Cover slide meets criteria for an audience-friendly presentation:

  • The cover slide includes a title
  • The picture/illustration/graphic is relevant for the topic and may contribute color choices for the rest of the slide set
  • The author’s name is in at least 30-point type
  • The author’s credentials gains our confidence

Oral delivery: Introduce myself and tell the audience a little bit about my experience with cybersecurity and with home routers.

*

HACKING

Definitions

Hacking: actively testing someone or something for exploitations

WiFi: a wireless network

Router: the physical device that provides WiFi connectivity

How this Explanation slide meets criteria for an audience-friendly presentation:

  • A “logo” image (and color) distinguishes the title area of this slide and of all future “content” slides
  • A divider line picks up on the theme color and visually separates the title from the slide content
  • The slide eases us into the presentation with brief information or context that we might need to immediately understand the speaker
  • White space makes reading this first content slide (and the rest of the content slides in this set) easy
  • Content is placed closer to the title than to the bottom of the slide (the design “Rule of Thirds” that keeps content out of the “dead” center of the slide)
  • A 40-point title type and 32-point body type establish the type-size for all of the content slides throughout the set

Hacking: The purpose of the exploit is to get the person or item to do something it wasn’t intended to do. In our example, we’ll attempt to get our routers to give us their secret password.

WiFi: These wireless networks are common in coffee shops, hotels, offices, homes, etc…

Router: The vast majority of home routers are capable of providing WiFi access. Most Internet service providers offer WiFi routers with their Internet packages.

*

HACKING

to protect you from hackers that might use your home’s wireless network for illegal activity

What’s my purpose?

How this Purpose slide meets criteria for an audience-friendly presentation:

  • The slide expresses the speaker’s purpose (not the purpose of the term) and indicates how the talk will benefit the audience
  • The designer continues to use the consistent title area logo and divider line, type sizes, and text placement established on slide #3
  • For list logic, the single phrase does not begin with a bullet point

Cybercriminals often prefer to hack wireless networks because of their ability to connect to them discretely. With identity theft, fraud, and other nefarious acts to commit, wrongdoers would love unlimited access to your personal information.

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ll cover:

How this original Blueprint slide meets criteria for an audience-friendly presentation:

  • The slide design is visually related to previous slides but has a different colored background to make it easily distinguished as the “organizer” for the talk
  • To further distinguish this organizational slide from the content slides so far--#3 and #4, a related versions of the slide logo appears in a new position and in a much larger format
  • The blueprint list is limited to two to five parts
  • The designer bullets the blueprint list

I propose the following information will empower you to test your wireless network for flaws. By doing so, you may be able to fix any issues before becoming a victim.

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ll cover:

How this first “moving” Blueprint slide meets criteria for an audience-friendly presentation:

  • The design duplicates the blueprint design established by slide #5, which will characterize all blueprint slides that appear in the slide set
  • The designer calls attention to the part of the talk coming up next—during the course of the talk, the bullet (or other highlighting effect) will “move” down the list to show the audience the upcoming topic within the context of the entire list

*

HACKING

Step 1.) Download BackTrack

Step 2.) Burn BackTrack to a DVD-R

Step 3.) Boot from the DVD-R

Preparing

How this body slide (for part one of the talk) meets criteria for an audience-friendly presentation:

  • Its design duplicates the body slide design established with slides #3 and #4 above
  • The designer “builds” each bulleted item/step/image so that the audience can focus on it while he offers detail and examples

Step 1.) Download the BackTrack Linux bootable ISO file here: http://www.backtrack-linux.org/ajax/download_redirect.php?id=BT5R3-GNOME-32.iso

Step 2.) Most CD/DVD burning software supports burning ISO files. Check your software’s manual if you’re unsure of this process.

Step 3.) Boot the DVD-R media. Your computer’s BIOS may or may not be set to boot from CD/DVD. With some computers, you can press an F-key (ie… F9 or F10) to choose your boot device. Otherwise, you will need to change your computer’s BIOS settings to make it boot from an optical drive.

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ll cover:

How this second “Moving” Blueprint slide meets criteria for an audience-friendly presentation:

  • The design duplicates the blueprint design established by slide #5, which will characterize all blueprint slides that appear in the presentation
  • The designer calls attention to the part of the talk coming up next

*

HACKING

Step 1.) Press the Enter button on your keyboard to start the “Default Boot Text Mode”.

Booting

How this body slide and slide #10, below, meet criteria for an audience-friendly presentation:

  • Their design duplicates the body slide design established with slides #3 and #4 above
  • The designer “builds” each bulleted item/step/image so that the audience can focus on it while he offers detail and examples

*

HACKING

Step 2.) Type and press Enter

startx

Booting

Step 2.) The startx command tells BackTrack to provide us with a Graphical User Interface (GUI). The GUI is a better working environment for what we want to accomplish.

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ll cover:

How this third “Moving Blueprint” slide meets criteria for an audience-friendly presentation:

  • The design duplicates the blueprint design established by slide #5, which will characterize all blueprint slides that appear in the presentation
  • The designer calls attention to the part of the talk coming up next

Now that we’ve configured our tools, we can test our router for flaws.

*

HACKING

Step 1.) Click the Command Shell icon

Configuring

How this body slide and slides #13-17, below, meet criteria for an audience-friendly presentation:

  • Their design duplicates the body slide design established with slides #3 and #4 above
  • The designer “builds” each bulleted item/step/image so that the audience can focus on it while he offers detail and examples

Oral delivery: Step 1.) Click the Command Shell icon located near the top of your screen. This will open a window that we will use to issue all commands going forward.

*

HACKING

Step 2.) Type and press Enter

NOTE: wireless adapter name = wlan0

iwconfig

Command

Configuring

Step 2.) The iwconfig command is used to view all wireless adapters (interfaces). In this example, our wireless adapter interface is called wlan0.

*

HACKING

Step 3.) Type

and press Enter

Result:

wlan0 = mon0

airmon-ng start wlan0

Command

Interface

Configuring

Step 3.) The airmon-ng command sets our wireless adapter interface (wlan0) to a mode for monitoring network traffic. This is best compared to listening to a crowded room of people instead of listening to just one conversation. We want our wireless adapter to listen to our environment for all wireless network conversations.

The command in our example creates a new interface name called mon0. We will use this interface in our next set of commands.

*

HACKING

Configuring

See that monitor mode is enabled on our mon0 interface.

*

HACKING

Step 4.) Type press Enter

Step 5.) Press Ctrl+C

airodump-ng mon0

Configuring

Step 4.) The airodump-ng command tells the mon0 interface to monitor and capture all network traffic within range of our wireless signal—about 65 feet.

Step 5.) We wait about 30 seconds, then hit Ctrl+C. This stops the airodump-ng mon0 command so that we can view the results like I’ve shown on the following screen.

*

HACKING

BSSID

ESSID

Configuring

This is the result of my airodump-ng command. The name of your router should be easily found under the ESSID column. You will want to write down the BSSID information (letters and numbers) for your router. We will use this information in the testing section of my presentation.

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ll cover:

How this fourth moving” Blueprint slide meets criteria for an audience-friendly presentation:

  • The design duplicates the blueprint design established by slide #5, which will characterize all blueprint slides that appear in the presentation
  • The designer calls attention to the part of the talk coming up next

So what do we do after we’ve tested our router for a flaw? We fix it.

*

HACKING

Step 1.) Using your configuration results issue the following command:

Testing

reaver -i mon0 –b C0:C1:C0:63:5B:22 -vv

Interface

BSSID

How this body slide and slides #20-21, below, meet criteria for an audience-friendly presentation:

  • Their design duplicates the body slide design established with slides #3 and #4 above
  • The designer “builds” each bulleted item/step/image so that the audience can focus on it while he offers detail and examples

Oral delivery: Step 1.) The reaver command tells our mon0 interface to attempt to obtain a password from the BSSID (your router). It’s as if we’re feeding our router a truth serum in hopes that the router gives us the password. Some routers give up the password faster than others.

*

HACKING

Step 2.) Now we wait for the results...

Testing

It may take up to 10 hours!

Step 2.) Patience is the key to success here. It may take up to 10 hours to get any results. I prefer to start these tests in the evening, and wake up to the results in the morning.

*

HACKING

Testing

This is what it will look like if your router is vulnerable to the flaw found in the Wireless Protected Setup (WPS) feature. Notice the WPS pin, the WPA password, and the SSID (name of my WiFi signal).

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ll cover:

How this fifth “moving” blueprint slide meets criteria for an audience-friendly presentation:

  • The design duplicates the blueprint design established by slide #5, which will characterize all blueprint slides that appear in the presentation
  • The designer calls attention to the part of the talk coming up next

So what do we do after we’ve tested our router for a flaw? We fix it.

*

HACKING

Fixing

Did you obtain the password?

Update router firmware

Disable WPS

How this body slide and slide #24, below, meet criteria for an audience-friendly presentation:

  • Their design duplicates the body slide design established with slides #3 and #4 above
  • The designer “builds” each bulleted item/step/image so that the audience can focus on it while he offers detail and examples

Oral delivery: If you didn’t obtain a password after 10 hours, then you are probably safe from the flaw found within WPS. However, if you did retrieve your password, then you should try updating your router’s firmware. Then, go into your router’s settings and disable the WPS feature. My next slide shows how I did it on my personal router at home.

*

HACKING

Fixing

WPS

This is what my router’s settings page looks like. Notice how I’ve un-checked the radio button for Wireless Protected Setup (WPS). With WPS disabled, the reaver command will not be able to trick our router into providing a password.

*

Preparing

Booting

Configuring

Testing

Fixing

What we’ve covered:

How this review version of the original Blueprint slide meets criteria for an audience-friendly presentation:

  • The design duplicates the blueprint design established by slide #5, which will characterize all blueprint slides that appear in the presentation
  • The designer reminds the audience or all of the topics of the talk, perhaps helping people to remember questions they might have had earlier in the talk

Oral delivery: We’ve discussed preparing your hacking tools, booting your computer from the disc, configuring your hacking tools, testing your router, and fixing the WPS flaw. Now I’m going to open up the discussion for questions…

*

Questions?

HACKING

How this slide meets criteria for an audience-friendly presentation:

  • The design continues the uncluttered look and feel of the entire talk
  • The designer uses the cover image or one of the other logos for the talk to invite interaction with the audience

Oral delivery: If you have any questions, please let me know now.

*

Thank you for your time.

*