Introduction

The Auditor Security Collection is a fully functional, bootable CD-based operating system (OS) that provides a suite of wireless network discovery and penetration test tools. In order to perform successful penetration tests against wireless networks, you must be familiar with many of these tools and their specific roles in the penetration testing process. Recently, the people at RemoteExploit.org and at WHAX combined their bootable CD distributions into the BackTrack distribution, which will most likely become the live CD of choice in the future. Presently, however, the suite of wireless tools provided in Auditor is more robust than that of BackTrack. Because of the additional tools it provides, this chapter focuses on Auditor, which is available at www.remote-exploit.org/index.php/Auditor_mirrors.

In order to attack your target network, you must first locate it. Auditor provides two tools for Wireless Local Area Network (WLAN) discovery:

• Kismet

• Wellenreiter

After locating the target network, many options are available to penetration testers. Auditor provides testers with many of the tools necessary to accomplish attacks based on these options.

Change-Mac can be utilized to change your clients Media Access Control (MAC) address and bypass MAC address filtering. Both Kismet and Ethereal can be utilized to determine the type of encryption that is being used by your target network, as well as capture any clear text information that may be beneficial to you during your penetration test.

Once you have determined the type of encryption that is in place, there are several different tools that provide the...