Configure Wireless Adapter and Change MAC Address

-
Today I am shifting gears. I decided to introduce WiFi hacking into the mix. Kali in a virtual environment cannot utilize the same wireless card in a host machine. Therefore, the use of  a wireless adapter is required. I found that the Alfa AWUS036NHA (http://amzn.to/2joTI0q) worked best for my objective. This adapter uses the Atheros 9271 chipset and is compatible with Kali Linux. Additionally, it is compatible with any brand 802.11b, 802.11g or 802.11n router using 2.4 Ghz wave-length, includes a 4 inch 5 ddbi screw-on swivel rubber antenna that can be removed and upgrade up to 9 dbi, and supports 64/128-bit WEP, WPA, WPA2, TKIP, and AES  encryption protocols.

The first step to getting the wireless adapter to work in the Kali environment is to install the VirtualBox Extension Pack (https://www.virtualbox.org/wiki/Downloads) if you are using VirtualBox like I am.


Once the Extension Pack has been installed, open the settings to the Kali machine installed on VirtualBox, navigate to the USB option, and ensure that the USB 2.0 option is selected and the Atheos UB91C is activated.

Kali atheros.jpg

Next, start your Kali machine. Once connected, use the iwconfig command to ensure that the wireless adapter is being seen.




While this is not a hack, this will document how to change the MAC address using the macchanger command in Kali. To accomplish this, I first needed to disable the wireless adapter by using the command ifconfig wlan0 down. Additionally, running the macchanger --help command shows what options there are when changing the MAC address of the wireless adapter.

Using the --random flag, I was able to change the MAC address of the wireless device.

Step 3 - change mac address using random flag.jpg

More to come...

Comments

Post a Comment

Popular posts from this blog

Master Port List

-
TCP  0  Reserved TCP  1  Port Service Multiplexer TCP  2  Management Utility TCP  3  Compression Process TCP  4  Unassigned TCP  5  Remote Job Entry TCP  6  Unassigned TCP  7  Echo TCP  8  Unassigned TCP  9  Discard TCP  10  Unassigned TCP  11  Active Users TCP  12  Unassigned TCP  13  Daytime (RFC 867) TCP  14  Unassigned TCP  15  Unassigned [was netstat] TCP  16  Unassigned TCP  17  Quote of the Day TCP  18  Message Send Protocol TCP  19  Character Generator TCP  20  File Transfer [Default Data] TCP  21  File Transfer [Control] TCP  22  SSH Remote Login Protocol TCP  23  Telnet TCP  24  any private mail system TCP  25  Simple Mail Transfer TCP  26  Unassigned TCP  27  NSW User System FE TCP  28  Unas...
Read more

Reflected Cross Site Scripting (XSS) Attacks

-
Image
According to the Open Web Application Security Project's (OWASP) Top 10 list for 2017, cross site scripting (XSS) is a major security concern ( https://www.owasp.org/index.php/Top_10_2017-Top_10 ).  OWASP defines XSS as flaws that "occur whenever an application includes untrusted data in a new web page without proper validation or escaping, or updates an existing web page with user supplied data using a browser API that can create JavaScript. XSS allows attackers to execute scripts in the victim’s browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites ( https://www.owasp.org/index.php/Top_10_2017-Top_10 ). Essentially, XSS allows an attacker to inject JavaScript code into a page. JavaScript is a client-side scripting language. With XSS, the JavaScript code is executed when the page loads and is executed on the client machine not the server. There are three types of XSS attacks: Stored XSS Attacks - These types of attacks are als...
Read more

Installing and Configuring WebGoat

-
Image
After doing some research, I found WebGoat. WebGoat is a deliberately insecure web application developed by the Open Web Application Security Project (OWASP) and was developed to teach users how to learn web application penetration testing. More information on OWASP can be found at https://www.owasp.org . To install WebGoat, the following is needed: Linux (for my purposes, I am using Kali Linux) https://www.kali.org/downloads/   Apache Tomcat http://tomcat.apache.org/ WebGoat https://s3.amazonaws.com/webgoat-war/webgoat-container-7.0-SNAPSHOT-war-exec.jar Java https://www.java.com/en/download/help/linux_x64_install.xml It is important to note that many Linux systems come preconfigured with Java out of the box. An easy way to find out is by running the simple command java -version The architecture of WebGoat is very simple. The diagram below shows exactly what is required (other than the Java dependency). Steps to Installing and Configuring WebGoat ...
Read more