How do you protect against Airpwn

Okay so I was going throught the forums the other night and discovered the "...things to do at a security conference" and among them was the goatse @ defcon prank using Airpwn.

It's funny and all but, if someone is on my wlan can they just use this program and f---up everything? Or have measures been put in place to stop this kind of activity? Would encryption work? or If I'm already usin WEP could someone break the encryption and then do the packet injection? How do i stop this?

(but yeah, It is pretty dope though)

- The project site- http://www.compsecassoc.org/airpwn.html
- The Defcon prank- http://www.evilscheme.org/defcon/

I think WPA encryption is the only thing that can stop it. Being public key I think it would be really difficult to inject packets. With WEP, if you're on the network then you can sniff/inject/whatever, but with WPA that shouldn't be possible.

WPA-PSK or just WPA? which do one you prefer?

By using wires.

Quote:

---

Originally posted here by okay
By using wires.

---

Ya Okay, like the one that's going to hold your virtual Jaw closed after you are banned?

Shut the **** up, and throw your Atari in the street.


Doushbag.

:D

-Edit

I have good odds on OKAY being on the Banned list before the day passes, any takers?

Bam!

Jeez Galdron.... Don't beat around the bush.... Say what you mean.... ;)

Damn... Even I don't generate that kind of hostility. I mean, I know he's a ****, but he ain't that bad.


wow.

d0ppy []
Banned


Location: /mnt/chick
Registered: Mar 2005
Posts: 132
Status: offline

Alrighty then.


:D

Quote:

---

Originally posted here by Galdron
d0ppy []
Banned


Location: /mnt/chick
Registered: Mar 2005
Posts: 132
Status: offline

Alrighty then.


:D

---

He's already back:

d0pp

:rolleyes:

In my own defense I was banned for the Sexican thing.

The d0ppy account never caused trouble.

Statement.


I remember DoppleGanger as a peer, a while back.


We have had our differences in the past few days, yet my intentions were to make Dopp realize that it is very important to be responsible as fellow member.

I have not always, or ever been the model of information, and self control, so I would be remiss to classify myself as a Model of AO society, yet I beleive that the bullS$%t should be kept to a Minimum. I am in most cases a Lurker, yet I have managed to stay within the guidelines set out by AO, both while JP was around and beyond.

I have communicated in a very positive way with Dopp, and we have taken the high road.

I am glad to support him as a part of AO.



On the other hand...................



barrywilliams []
Banned


Location:
Registered: Mar 2005
Posts: 19
Status: offline


Barry Sig-
"you confused me with someone who gives a flying **** about antipoints."


No Barry you confused yourself that we would not use them to get rid of your impotent ass.


---End Rant


:D

OK, so back to the question, you can also use EAP-FAST and there will be no issue with this tool. AirPwn is geared to abuse those who deserve it. Using static WEP or a poorly configured WAP will earn you a fresh look up the arse of GOATSE.

--TH13

I picked up a couple books on wardriving from barnes and nobles it well help you defend and protect your netowork or others.

Quote:

---

Originally posted here by r3dskyy
I picked up a couple books on wardriving from barnes and nobles it well help you defend and protect your netowork or others.

---

Uh, how exactly will Airpwn do that?


== Off Topic ==

Horse13 and IronGeek, I happen to be sitting in the main conference room at the FISC at this very moment, enjoying my morning caffeine infusion and waiting for Maj. General Dale Meyerrose, HQ NORCOM to offer todays keynote address.

Your suggestion is almost overpowering my will to be a good boy. Not only is it an InfoSec conference...it's a bunch of DoD, stuffed shirt, military it and security, national defense, or defense industry types. The collective pucker factor of the sphincters in this room is staggering.

Can you SEE the look on these folks faces if good 'ole GOATSE came up? During a presentation?!?!?

/me falls over dead with laughter

In that case, see my latest tutorial are doing the same thing as Airpwn, but with Ettercap. Ettercap is a lot easier to get running.

http://www.irongeek.com/i.php?page=s...ettercapfilter

:)

Quote:

---

Originally posted here by Irongeek
In that case, see my latest tutorial are doing the same thing as Airpwn, but with Ettercap. Ettercap is a lot easier to get running.

http://www.irongeek.com/i.php?page=s...ettercapfilter

:)

---

Dude, you are a seriously bad influence! There are some scary people in this room. This is practically a conference for spooks.

Give us a review of the conference when it's done. Was it open to the public?

From the site it seems like it was.

If you going to do it, don't do it with goatse...

Also:

"This unique 2-day event will present information security tools and techniques available to assist Information Security professionals working in the Federal government. "

Nessus, nmap, and ethreal for the win!

At least that's what I use...I bet a couple bucks that "IA" vendors are there pushing expensive software.

Makes me wish I had gone on the C. Springs trip this week.

Well I've been to many conferences like the one you are at. I always throw up a webserver with GOATSE. I don't care if I'm at the DoD, DHS, White House or wherever. I feed the logs out reatime so I can see exactly when I'm getting hits on the site and then I look around for the reaction. Truly simplistic and extremely amusing all at the same time.

thehorse13: You can do that with a normal face? If I did that... everyone would know it was me. I wouldn't be able to hold back and I'd probably get a hernia from laughing so hard.

Well this is MY view.................if you get a jolly.............go for it, get laid, get sloshed but shove that laptop up your goatse..........I still have a few white phosphorous devices to attach.

If you are not a jerk-off, you will not be treated like one?

Hell, no wonder the scum (sorry, I did mean children) of today feel they are so badly treated..........


/end rant disgusted

Errr.... Do I smell smoke????? :eek:

nihil: I don't quite understand what you said... but I still think its funny as hell you said to "shove that laptop up your goatse"... ROFL

Quote:

---

Errr.... Do I smell smoke?????

---

From the laptop? :D

Quote:

---

Originally posted here by phishphreek80
thehorse13: You can do that with a normal face? If I did that... everyone would know it was me. I wouldn't be able to hold back and I'd probably get a hernia from laughing so hard.

---

Straight face? Hernia?

I'd piss my pants laughing! Dear god, you should see some of these people. Career military-turned-civilian. There are so many tight asses in this place, you could make a fortune in diamonds just by putting coal on all the seat cushions.

Hehe, it's a great group but yes, vendors galore. AirMagnet, Air Defense, iDefense, Configure Soft, Computer Associates, General Surveilance, Patchlink, ISC^2, CompTIA (I know, not software vendors), CoreStreet, Enterasys, blah blah blah. All hawking wares and giving away (shitty quality) tchotskies.

I'll post a review tonight after I've downed a few beers at Judge Baldwins.

Quote:

---

All hawking wares and giving away (shitty quality) tchotskies.

---

Sounds like a DoD event to me! I use the retractable badge clips are booby traps in the office.

The best one i ever got was a clock with suction cups on the base. The clock face was on a level bubble, and would level out however it was placed.


The best ones were when I was at the pentagon. They did a few series of free seminars and they had the guys from foundstone over. First 20 people there got free 'Hacking Exposed' books. I was poor, and it was my first every security book =P


Ahh how nice it is to be a contractor now =)

Have fun! Look forward to your report.

Quote:

---

Originally posted here by Irongeek
Give us a review of the conference when it's done. Was it open to the public?

---

http://tinyurl.com/b5vc9