Index
Note: Page numbers followed by b indicate boxes, f indicate figures and t indicate tables.
0-9, and Symbols
802.1X
AP connection stages
89crack attack
114default password break-ins
127legacy SSIDs
123rogue-on-rogue attack
107802.11
acronyms
120ad hoc bridged interfaces
125–126basic wireless technology
102Doctor Reflecto
94Farewell Attacks
106IBSS
119WiFi/WLAN EMR spectrum
89wireless hacking
91wireless network characteristics
89t802.11a
96802.11b/g/n
access point example
97fDoctor Reflecto
9611b, Queensland Attack
103illegal channel beaconing
108jammers
103802.11w
106A
Abilene Paradox
200–201Access point (AP)
ad hoc bridged interfaces
126ad hoc networks
119aluminum foil enclosure
97fantenna shorting
100fbasic wireless technology
102Bogus Beacon attack
108crack attacks
114default password break-ins
127Fake AP project
109Farewell Attacks
105FCC regulations
101flooding attacks
108Google hacking
129locking ceiling tile enclosure
95fman-in-the-middle attack
111fmirror/monitor attack
115peer-to-peer-to-hack
117rogue
rogue-on-rogue attacks
106rogue SSID additions
122–123virtual AP
119whack-a-rogue
107ACLs
Adobe, Inc., social engineering attack
24Agency phone books, building security
37–38Aireplay-ng, Farewell Attacks
105AirJack, Farewell Attacks
105Airplane safety, expert advice
185AirTight Networks
120Antennas
Anti-virus software, wrappers
174Anxiety, penetration tester approach
172Anywho.com
140AP
ARP flooding, crack attack
113Ask.com, for initial identification
141Automated surveillance
155–156AV, social engineering considerations
25Awareness
B
Backdoors, penetration testing automated attacks
173Baker, Greg, expert advice
187–191Bank account information, surveillance tactics
148–149Basic Service Set (BSS), definition
120Basic Service Set Identifier (BSSID), definition
120Behavior, penetration testing
166Bing, for initial identification
141Biometrics, building security
38Black hats, social engineering effectiveness
2Blippy.com
false login data
146financial data mining
148–149frequented locations
149targeting prevention
161Block, Matt
74–75Blogs
financial data
148initial identification
141online exposure
151signature phrases
154–155third-party disclosures
152Blogspot.com, false login data
146Bluetooth
EMR spectrum
89miniature surveillance equipment
158wireless hacking
91wireless network characteristics
89tBody language, penetration testing approaches
172Bogus Beacon attack
108Bomb threats, Chicago example
40–42Boolean strings, search terms
146Booth, Evan
74–75Bot herding, spear phishing
188–189Bot net, spear phishing
188–189Bridged interfaces, ad hoc networks
125–126BSS
Bugmenot.com, false login data
146Bug-sweeping, miniature surveillance equipment
158Building security
see alsoPhysical security
basic considerations
35–40corporate/agency phone books
37–38employee badges
36key control example
81block checks
35–36off-shift staff training
39–40tailgating countermeasures
39bBump keys
78Burn bag, expert tip
37C
Caller ID Spoofing, Paul Henry interview
23Car alarm, EMR spectrum
88Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA)
basic wireless technology
102Queensland Attack
103Cartoon character, Information Security Awareness Program
204Cellular technology, wireless network characteristics
89tCertified Information Systems Security Professional (CISSP)
195Chabris, Christopher
164–165Chicago bomb threat, physical security example
40–42Cialdini, Robert
166Clear channel assessment (CCA), Queensland Attack
103Closed-circuit television (CCTV), EMR spectrum
89Communications Act (1934)
103Communications Division, Information Security Awareness Program
219Communications matrix, Information Security Awareness Program
216–217Compliance Department, Information Security Awareness Program
218–219Computer rooms, high security locks
42Computer systems
crime perpetrator vs. victim
179penetration testing case study
174penetration testing permission considerations
175Conkel, Hans
63Cordless phones, EMR spectrum
89Corporate Information Security Officer (CISO)
auditing issues
202awareness program lessons
212–213communications matrix
216Information Security Awareness Program
208Information Security Awareness Specialist
195Internal Information Security Consultants
220new-hire video
204team benefits/drawbacks
201Corporate Information Security Policy, Awareness Standard
209Cost risk benefit, information security awareness
197–198Countermeasures
see alsoAwareness training
Chicago bomb threat example
40forced entry
62lock vulnerabilities
58padlock shims
73–74physical security risk assessment
34social engineering
27–29tailgating
39bvideo security log review
43Craig's List, for initial identification
143Critical infrastructures, definition
190Critical to Quality (CTQ), Information Security Awareness Program effectivness
222Cross cut shredders, expert tip
37bCuts
seeBittings
Cybercrime, law enforcement help
189–190Cyber Crime Task Forces (CCTF), FBI-local law enforcement relationship
190D
Data leakage prevention (DLP) tools, ad hoc attacks
119Data theft, information security awareness
196–198Deadbolt lock, semi-high-secure-room break-in example
63–64Deauthentication, Farewell Attacks
105Decoy SSID
109–110Default configuration wireless hacking
overview
126–130Defcon Security Jam (2008)
110Directional antennas, layer 1 DoS
94Disk drives, disposal
46bDisk-type pin tumbler lock, example
57fDistraction, penetration testing
165Distributed denial of service (DDoS) attack, Queensland Attack
103–104DNS
DocStoc.com
148Document retention/destruction policy, information security awareness
197Domain Name Server (DNS), static IP hack
131Door signs, physical security
42Drake, Phil, expert advice
19–22Drop ceilings, physical security
47DVDs, penetration testing
168–169E
Eavesdropping, third-party disclosures
153–154Ebay, for initial identification
143eDiscovery
197Editor, Information Security Awareness Program
207800 number, Information Security Awareness Program
212Electromagnetic spectrum
87–90Electronic Crimes Taskforce
183Email addresses
employment information
143penetration testing case study
174PeopleFind sites
140purchase habits
146–147Employee awareness, information security
196–198Employee badges, building security
36Employment information, targeting and surveillance
142–144Energy companies, spear phishing attacks
24Equipment “burial ground,” physical security
46Executive protection, basic considerations
186Executive Protection Institute
184Extended Service Set (ESS), definition
120F
Facebook
automated surveillance
156data mining
23false login data
146with financial data
148–149frequented location information
149safety recommendations
161social engineering
29surveillance
144Federal Bureau of Investigation (FBI)
contact by victim
189Cyber Crime Task Forces
190expert advice
187InfraGard
190spear phishing
188–189Federal law enforcement, CCTF
190File cabinets, lock bypass example
54–55Financial data, surveillance and targeting
146–149Firefox, automated surveillance
155–156Forced reflection, wireless hacking
944-1-9 advance fee fraud, expert advice
181–182411.com
140Frequency analyzer, WWII device example
90fG
Gift cards, as targeting prevention
160GLBA
Google, Inc., social engineering attack
24Google Advanced, for initial identification
141Google Alerts, automated surveillance
155Google Analytics, automated surveillance
156Google Blog, for initial identification
141Google Chrome, automated surveillance
155–156Google Groups, for initial identification
141Google Street View, surveillance information
151–152GoWalla
frequented locations
149targeting prevention
161target interaction
157user information posting
150“Graffiti-man,” place targets
151–152Gramm-Leach-Biley Act (GLBA)
201Gucci, social engineering attack
24Guest attack
116–117H
Half-duplex system, basic wireless technology
102Handheld authentication device, building security
38Hashes, rainbow table
113HBGary, social engineering attack
24Headless devices, ad hoc bridged interfaces
126Henry, Paul, expert advice
22–26Hole 196 attack
114Homeinfomax.com
142Hotel safety, expert advice
185HP WESM, legitimate-looking rogue APs
124Human factor, penetration testing
basic considerations
164–166magic as distraction
165selective attention
164–165trust and behavior
166Hypertext Markup Language (HTML), free Wi-Fi hack
134I
Icerocket.com
145IDS, social engineering considerations
25Illegal channel beaconing
Infomercials, Information Security Awareness Program
215Information Security Awareness Program
accessibility
212administration component
200alliance building
217–220Audit Department
218Awareness Standard author
209–210Awareness Standard requirements
209business plan
201–202communications matrix
216–217Compliance Department
218–219components
204–205creativity in
214–215design
198–207editor's importance
207effectiveness measurement
221–223funding
213–214GLBA
201group support
199implementation
207–215importance of repetition
199improvements over time
223finformercials
215Internal Information Security Consultants
220key components/cumulative effect
222–223Legal Department
218lessons from
212–213manager's QRG
206–207on-line program risks
211perpetual program
210Personnel Department
219presentation components
202–204presentation importance
203–204presentation question anticipation
202–204Privacy Division
218product appearance
205product/material content
207program control
219program materials
217fprogram viability
220progress graph
224fQRG as initiator
211–212resource alternatives
220security as company mindset
216–220“The String Analogy”
210team benefits/drawbacks
200–201touch points
199–200trainees
211Training and Communications Division
219web site example
215fwin-win solutions
210Information Security Awareness Specialist
195Information Security Awareness Standard
author
209–210Corporate Information Security Policy
209requirement examples
209Information security awareness training
business plan
196characteristics
195cost risk benefit
197–198data theft
196–198employee awareness
196–198information security awareness specialist
195intrapreneur
195–196key control
71non-compliance costs
197overview
194–198people involved
194–196Injection attacks, cracks
113Inside threats, physical security
34–35Internal Information Security Consultants
220Internet
for initial identification
139–140on-line blackmarketing case
155penetration testing automated attacks
173penetration testing case study
175–176personal information removal
142safety recommendations
160–161Internet Explorer, automated surveillance
155–156Investment information, surveillance
146–149“The Invisible Gorilla”
164–165iPad
information security awareness
196MAC address switching
133as scanning device
158SSID issues
117WiFi scanner app
159IPS, social engineering considerations
25IPSec tunnel, mirror/monitor attack
115Iran's Nuclear Fuel Centrifuges, SCADA system attack
24isearch.com
139–140J
Jammers, layer 1 DoS attacks
102–103“John attack,” wireless hacking
98–101Juniper Networks, social engineering attack
24K
Karma tool, dead-end hijacking
110–111Key control
awareness training
71basic considerations
70–71building security example
81bindividuals with access
70–71social engineering
70system set-up
71bKey covers, example
84fKey micrometers, key creation
79–80Keys
creation
78–79creation without machine
79–81creation tools
79fdepth keys
78overview
76–79pin tumbler/warded
56frim cylinder lock
60fKindles, SSID issues
117Knowx.com
140–141L
LANs
Laptop security, information security awareness
196Layer 1 denial of service (DoS) attacks
access point antenna shorting
100farchetypal antennas
91–93directional antennas
94Doctor Reflecto
94–98electrical tampering
98–101FCC regulations
101–102jammers
102–103overview
91–104Queensland Attack
103–104Layer 2 denial of service (DoS) attacks
Bogus Beacon
108dead-end hijacking
110–112decoy SSID
109–110Farewell Attacks
104–106flooding
108man-in-the-middle attack
110overview
104–112rogue-on-rogue attack
106–107whack-a-rogue
107–108Learning Management System (LMS), Information Security Awareness Program
218–219Legal Department, Information Security Awareness Program
218LinkedIn
data mining
23false login data
146with financial data
148–149safety recommendations
161surveillance
144third-party disclosures
152Litigation, information security awareness
197Local Area Networks (LANs)
characteristics
89tdecoy SSID
109default PSK lookup
127virtual
wireless hacking
91Local law enforcement, CCTF
190Lock examples
disk-type pin tumbler lock
57fhigh-quality high-security lock
64fmortise vs. rim cylinder locks
83–85rim cylinder lock
60fLock picking
FALE team example
75–76learning
74–76legal issues
53boverview
51–59penetration tester permission
52bsuggested reading
62bLock picking example
bait and switch
71–74padlock shims
73–74pin tumbler hack
68secured office complex door
69fLocks
access point enclosures
95advanced reference materials
59building security
35–36bypassing example
54–55computer rooms/phone closets
42forced entry
60–63forced entry method
61–63overview
51–59popular types
54–56quality vs. effectiveness
57–58rack houseing
96fsuggested reading
62bLogin2.me
146“Looking the part,” penetration testing
170bM
MAC address
ad hoc bridged interfaces
126Farewell Attacks
105free Wi-Fi hack
134legitimate-looking rogue APs
125peer-to-peer-to-hack
117rogue access points
122security tool bypasses
130spoofing
132static IP hack
131switching for access
133Magic tricks, distraction component
165MAN
Marino, Tony, expert advice
180–187Marlinspike, Moxie
113–114MD5 hash, rainbow tables
114Medeco locks, key control
71Metasploit, penetration testing automated attacks
173Microsoft, social engineering flaw remediation
26Microwave oven, EMR spectrum
88Military.com, for initial identification
141–142Miniature surveillance equipment
158–159Mirror/monitor attack
115–116Mobile Broadband Wireless Access (MBWA), EMR spectrum
89Morse, Samuel
193Motion-sensing cameras, home security
48Motion-sensing lights, as physical security
43–44Mounting plate, lock forced entry
61Murdoch, Rupert, social engineering attack
24Mushroom pins, lock quality/effectiveness
57N
Neighborhood routes, targeting and surveillance
142–144Nemesis, Farewell Attacks
105Netronline.com
142Network access control (NAC)
ad hoc bridged interfaces
126MAC address switching
133mirror/monitor attack
115rogue access points
122security tool bypasses
130static IP hack
131Network Interface Controller (NIC)
ad hoc bridged interfaces
125Bogus Beacon attack
108dead-end hijacking
110–111Farewell Attacks
105Queensland Attack
103rogue-on-rogue attacks
106signal extender
93fNew-hire video, Information Security Awareness Program
204News Corp., social engineering attack
24“Night Dragon” malware, energy company spear phishing
24Nine Lives
184O
Office complex, secured door example
69fOff-shift staff, building security training
39–40Omnidirectional antennas
azimuth and elevation radiation charts
93fbeamwidth sample
93tcharacteristics
92123people.com
140Online directories, building security
38Operation Aurora, social engineering attack
24Organizational culture, penetration testing
170Organizational Unique Identifier (OUI), MAC address switching
133Orthogonal frequency-division multiplexing (OFDM), 802.11a/g/n
104Outside threats, physical security
34–35P
Padlock shim
countermeasures
73–74key creation
78–79mortise cylinder lock
81mortise vs. rim cylinder locks
83types
76usage considerations
73PANs
Parabolic dish antennas, beamwidth sample
93tPassive intelligence collection, and target interaction
156Passports, protection
185–186PATRIOT Act
183Payload introduction, penetration testing
172bPayment Card Industry Data Security Standard (PCI DSS)
legitimate-looking rogue APs
125rogue access points
120PayPal, for safe transactions
140PBXs
Peer-to-Peer (P2P) network searches
dangers
147safety recommendations
160targeting and surveillance
147–148Penetration testing
approach
172bautomated attacks
173–174case study
approaching conference staff
176approaching hotel staff
175overview
174–176permission considerations
175CDs/DVDs
168–169compromising locks
81–83drop ceilings
47equipment “burial ground”
46human factor
basic considerations
164–166magic as distraction
165selective attention
164–165trust and behavior influence
166key creation
79–80location decisions
171lock picking legal issues
53block picking permission
52b“looking the part”
170bMicroSD USB storage device
168fmotion-sensing light security
43–44non-functioning lock issues
68organizational culture
170overview
163project organization
170–174staging effort
169–170strategy decisions
171–172subterranean vulnerabilities
44–45target location considerations
169–170target organization
169–170technology basics
166–169technology selection
172–174tester body language
172USB device usage
168Peoplefinders.com
140PeopleFind sites
financial/background checks
146–147free vs. fee-based
140initial identification
139–140personal information removal
142safety recommendations
160Peoplelookup.com
140People.yahoo.com
140Permission considerations, penetration testing
175Personal identifiable information (PII), targeting prevention
160Personal information
Information Security Awareness training
211initial identification
139–142PeopleFind sites
140removal from Internet
142shredders
37spear phishing
188–189third-party disclosures
153vehicle registration
80–81Personal protection, expert advice
184Personal Protection Specialists (PPS)
184Personnel Department, Information Security Awareness Program
219Phillips, Bill
62Phishing, vs. spear phishing
187–188Phone books, corporate building security
37–38Phonenumber.com
140Photograph data, travel patterns
150–151Physical security
access point enclosure
95fantennas
95buildings
basic considerations
35–40corporate/agency phone books
37–38employee badges
36key control example
81block checks
35–36off-shift staff training
39–40tailgating countermeasures
39bChicago bomb threat example
40–42disk drive disposal
46bdoor signs
42drop ceilings
47equipment “burial ground”
46expert advice
185–186home documents
46home security cameras
48bhome security tips
48internal auditors
47–48lockable rack housing
96fmanhole cover
45fmotion sensing lights
43–44outside threats
34–35overview
31phone closets
42video security log review
43Piggybacking
seeTailgating
Pin tumbler locks
characteristics
54–55as common type
70disk-type
57fFALE team picking example
75–76mortise cylinder lock
81pin removal hack
68Pipl.com
139–140Pippin file, key creation
80Place targeting, basic considerations
151–152Plaintext hash, rainbow tables
114Pleaserobme.com
150Printers, ad hoc bridged interfaces
125–126Prism Test Utility, Queensland Attack
103Privacy Division, Information Security Awareness Program
218Private Branch Exchange, phone closet security
42Project organization, penetration testing
approach considerations
172bbasic considerations
170–174body language
172location decisions
171strategy decisions
171–172technology selection
172–174Protect Information Properly (PIP)
212–213Proxy servers, penetration testing automated attacks
173PSK
Public Branch Exchange (PBX)
phone closet security
42physical security outsider/insider threats
34social engineering example
21Public Secure Packet Forwarding (PSPF), peer-to-peer-to-hack
118Pulford, Graham W
62Purchase habits, surveillance
146–149Putty tool, Google hacking
129Q
R
Rackspace, social engineering attack
24Radio control (RC) equipment, EMR spectrum
89Radio frequency (RF)
access point in foiled enclosure
99faccess point in foil-less enclosure
99faccess point radiation pattern
92basic wireless technology
102Bogus Beacon attack
108directional antennas
94EMR spectrum
88–89forced reflection
94layer 1 denial of service attacks
91–92rogue access points
122rogue SSID additions
123wave canceling
102fRADIUS, default password break-ins
127Rainbow table, basic concept
113Real estate search engines, examples
142Realestate.yahoo.com/Homevalues
142Rebate check scam, bank account targeting
148–149Reference books, social engineering countermeasures
28–29RF
Risk assessment, physical security example
basic considerations
32–34basic risks
32–33countermeasures
34threats
33vulnerabilities
33Robmenow.com
150Rogue access points
bridged interface abuse
125–126introduction on network
121–122legacy SSIDs
123legitimate-looking APs
124–125overview
120–126SSID additions
122–123Rogue detection, definition
106Rootkit, peer-to-peer-to-hack
118RSA, social engineering attack
24RSS feeds, automated surveillance
155S
Safari, automated surveillance
155–156Scanners, surveillance
158–159“Script Kiddy”
187–188Sector antennas, beamwidth sample
93tSecurity tool bypasses
free Wi-Fi hack
134MAC address switching
133MAC spoofing
132static IP hack
131–132wireless hacking
130–134Selective attention, definition
164–165Self-disclosures, social networks/media
144–146Self-loading Trojan, USB thumb drives
167Semi-high-secure-room break-in, lock picking example
bolt retraction
64–66lock access
66–69lock example
64foverview
63–69Sensitive compartmented information facility (SCIF), scanner/miniature equipment checks
158September 11 attacks, Electronic Crimes Task Force
183Service Set Identifier (SSID)
Bogus Beacon attack
108cloaking
117crack attack
114decoy SSID
109–110default WPA key hacking
127definition
120layer 1 DoS attack
98legacy SSIDs
123legitimate-looking rogue APs
124peer-to-peer-to-hack
117rogue access points
122–123Sheesley, Adam
74–75Shim
seePadlock shim
Shoulder surfing, definition
183Signature phrases, surveillance and targeting
154–155Simons, Daniel
164–165Site survey, RF signal documentation
96Skimming, expert advice
182Slideshare.com
148Slogans, Information Security Awareness Program
204Smartphone
automated surveillance
155frequented location tracking
150–151as listening device
158neighborhood route mapping
143WiFi scanner app
159YouTube videos
151–152Smishing, target interaction
156Sneakers (1992)
44–45Sniffers, crack attack
112Social engineering
AV, IDS, IPS considerations
25compromising locks
81–83conversation eavesdropping
16–18countermeasures
27–29effectiveness
2–3email attachments
187–188engineer's point of view
3expert advice
180firewall considerations
25–26flaw remediation
26having fun with
29key access
70key creation
78–80keystroke logger
13–16lock bait and switch
72mortise vs. rim cylinder locks
83motion-sensing light security
43–44neighborhood scam
157overview
1Paul Henry interview
22–26Phil Drake interview
19–22phone book security
37–38suspicious phone technicians
19btarget interaction
156victims
3–4Social engineering example
analysis of scam
9–10follow-up questions
8–9initial question
7–8key information
8Social Engineering: The Art of Human Hacking (Hadnagy)
28Social media surveillance
144–146SPAM mail approach, spear phishing
188–189Spokeo.com
140Spoofing
Caller ID
23ease of learning
157Farewell Attacks
105identity theft
186–187MAC addresses
132target interaction
156–157Spy gear, surveillance
158Staging efforts, penetration testing
169–170State law enforcement, CCTF
190Static IP address, wireless hacking
131–132Stickers, Information Security Awareness Program
205Strategy decisions, penetration testing
171–172“The String Analogy”
210Subject Matter Experts (SMEs), Information Security Awareness Program
207Surveillance
automated
155–156businessman case study
145employment information
142–144financials, investments, purchase habits
146–149free vs. fee-based PeopleFind sites
140frequented locations
149–152historical overview
137initial identification
139–142military personnel addresses example
159miniature equipment examples
158neighborhood routes
142–144on-line blackmarketing case
155P2P dangers
147personal bank accounts
148–149place as target
151–152planning stage
138property records
142–144safety recommendations
160–161scanner and miniature equipment
158–159self-research on property records
143signature phrases
154–155social network/media disclosures
144–146targeting example
141target interaction
156–157third-party disclosures
152–154travel location example
151travel patterns
149–152Surveys
Information Security Awareness Program
administration
200effectiveness
221–222implementation
207Personnel Department participation
219RF signal site survey
96social network/media disclosures
144Suspiciousness, as social engineering countermeasure
28Swartz, Aaron
132Symantec, social engineering attack
24T
“Take Charge” publication (FTC), credit card recommendations
183Targeting
automated surveillance
155–156businessman case study
145employment information
142–144example case
141financials, investments, purchase habits
146–149free vs. fee-based PeopleFind sites
140frequented locations
149–152historical overview
137initial identification
139–142military personnel addresses example
159miniature equipment examples
158neighborhood routes
142–144neighborhood scam
157on-line blackmarketing case
155P2P dangers
147personal bank accounts
148–149place as target
151–152planning stage
138property records
142–144safety recommendations
160–161scanner and miniature equipment
158–159self-research on property records
143signature phrases
154–155social network/media disclosures
144–146targeting example
141target interaction
156–157third-party disclosures
152–154travel location example
151travel patterns
149–152Target organization
location considerations
169–170location decisions
171organizational culture
170penetration testing
169–170Task Force Officer (TFO)
191TaskForces, USSS
184Technology basics, penetration testing
automated attacks
173–174CDs/DVDs
168–169MicroSD USB storage device
168foverview
166–169selection
172–174USB devices
168Teflon plumbers tape, compromising locks
81–83Texting, third-party disclosures
154TFO
Tobias, Mark Weber
62–63Touch point, Information Security Awareness Program
199–200Training and Communications Division, Information Security Awareness Program
219Trojan Horse
man-in-the-middle attack
110–111penetration testing
automated attacks
173case study
175–176permission considerations
175self-loading, USB thumb drives
167physical security outsider/insider threats
34–35target interaction
156–157Trust, penetration testing
166Tweeting, third-party disclosures
152Tweetscan.com
145Twitter
automated surveillance
155businessman surveillance case study
145false login data
146with financial data
148–149surveillance
144target interaction
157third-party disclosures
154Two-part authentication, building security
38U
USB thumb drives
penetration testing
166–168penetration testing case study
175penetration testing technology selection
173standard size
167fusage
168USSS
U.S. State Department, stolen passports
185–186V
Videoronk, automated surveillance
155–156Video security logs, review
43Virtual access point (AP)
119Virtual local area networks (VLANs)
crack attack
114Google hacking
129guest wireless hacking
116legitimate-looking rogue APs
124mirror/monitor attack
115peer-to-peer-to-hack
117rogue access points
121rogue SSID additions
123SSID cloaking
117static IP hack
131Viruses, peer-to-peer-to-hack
118Vishing, target interaction
156VLAN 2100, legitimate-looking rogue APs
124Voice over IP (VoIP), social engineering example
21W
Web browser add-ons, automated surveillance
155–156Welborn, Jon
74–75Whack-a-rogue attacks
107–108Whitepages.com
140Whostalkin.com
144–145WiFi scanners, surveillance
159Winsock Packet Editor, Farewell Attacks
105WIPS
Wireless hacking
802.11 acronyms
120802.11 and Bluetooth
91802.11w standard
106access point examples
92fad hoc networks
119–120antenna beamwidths
93tantenna types
93fbasic wireless technology
102bypassing security tools
130–134crack attack
112–114default configurations
overview
126–130DoS overview
91–112electromagnetic spectrum
87–90EMR spectrum chart
88fFake AP project
109fFCC
101forced reflection
94free Wi-Fi
134guest attack
116–117IBSS
119–120layer 1 DoS
access point antenna shorting
100farchetypal antennas
91–93directional antennas
94Doctor Reflecto
94–98electrical tampering
98–101FCC regulations
101–102jammers
102–103overview
91–104Queensland Attack
103–104RF wave canceling
102flayer 2 DoS
Bogus Beacon
108dead-end hijacking
110–112decoy SSID
109–110Farewell Attacks
104–106flooding
108man-in-the-middle attack
110overview
104–112rogue-on-rogue attack
106–107whack-a-rogue
107–108lockable rack housing
96fMAC address switching
133MAC spoofing
132mirror/monitor attack
115–116network uses and ISM band
89tomnidirectional antenna characteristics
93fpeer-to-peer-to-hack
117–119rainbow table
113rogue access points
bridged interface abuse
125–126introduction on network
121–122legacy SSIDs
123legitimate-looking APs
124–125overview
120–126SSID additions
122–123safety recommendations
160security challenges
90SSID cloaking
117static IP
131–132virtual AP
119WWII frequency analyzer
90fWireless IPS (WIPS)
default password break-ins
127directional antennas
94Farewell Attacks
106IBSS traffic
120Queensland Attack
104rogue access points
122rogue-on-rogue attacks
106whack-a-rogue
107Wireless Local Area Network (WLAN)
characteristics
89tdecoy SSID
109default PSK lookup
127wireless hacking
91Wireless Sensor Networks, EMR spectrum
89Wireless Wide Area Network (WWAN)
89tWithers, Don
184WPA Cracker
113–114X
Xanga.com, false login data
146..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.