WarDriving & Wireless Penetration Testing

In addition to Auditor, some other outstanding tools to be aware of when penetration testing are NetStumbler (for Windows) and KisMAC (for Mac OS X). Netstumbler is an active scanner, so its application is limited; however, it can be an outstanding resource, particularly due to its excellent Signal to Noise Ratio (SNR) display. KisMAC, on the other hand, is a fantastic tool for penetration testers. KisMAC provides the ability to perform both active and passive scanning and has a strong graphical signal display. Additionally, the functionality of many of the tools discussed in this chapter is built into KisMAC including deauthentication, packet injection, WEP cracking, and WPA cracking.
For a quick tool to change MAC addresses, SirMACsAlot (www.securitytribe.com/~roamer/SirMACsAlot.tar.gz) provides a simple, command-line interface for changing MAC addresses.
This list is still not complete. More tools are released every day, so it is important to stay current and understand the tools you need and what tools are available.
TerraServer satellite maps (such as those shown in Figure 7.3) are not the only types of maps available. GPSMap allows you to generate maps from a number of different sources and types. The following list shows the map server options and types available for GPSMap:
- S-1 Creates a representation of the networks with no background map.
-S0 Uses Mapblast
-S1 Uses MapPoint (this functionality does not work as of the time of this writing)
-S2 Uses TerraServer satellite maps
-S3 Uses...