Skip to content

Latest commit

 

History

History
313 lines (288 loc) · 11.9 KB

wireless.md

File metadata and controls

313 lines (288 loc) · 11.9 KB
Raw

Wireless Stuff

Content

3GPP

802.11

  • Wi-Fi Alliance
  • Attacks:
    • KRACK attack:
      • paper: Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2
      • scripts: scripts to test if clients or access points (APs) are affected by the KRACK attack.
      • website: Key Reinstallation Attacks
    • ICMP redirects: Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects.
    • MacStealer:
      • paper: Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues.
      • repository: est Wi-Fi networks for client isolation bypasses.
      • wifi-framing: Repository for the Framing Frames publication
  • [IEEE]:
  • Tools
    • aircrack-ng: complete suite of tools to assess WiFi network security.
      • GitHub: WiFi security auditing tools suite
    • airpwn-ng: Packet injection for wifi.
    • bettercap: Swiss Army knife for WiFi, Bluetooth Low Energy, wireless HID hijacking.
      • GitHub: source code repository.
    • ESP32 802.11 TX: Send arbitrary IEEE 802.11 frames with Espressif's ESP32.
    • ESP32 ESP8266 attacks: Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties.
    • ESP32 Marauder: suite of WiFi/Bluetooth offensive and defensive tools for the ESP32.
    • esp32-wifi-penetration-tool: Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks.
    • FreeRADIUS: open source RADIUS server.
    • hostapd: user space daemon for access points.
    • Kismet: Wi-Fi, Bluetooth, RF, and more
      • GitHub: Kismet and related tools and libraries for wireless monitoring, transmitting, and auditing.
    • iw: nl80211 based CLI configuration utility for wireless devices.
    • libwifi: an 802.11 (WiFi) Frame Generation and Parsing Library in C.
    • libwifi (nukesor): rust library for parsing IEE 802.11 frames.
    • libwifi (vanhoefm): python and scapy scripts for Wi-Fi.
    • nexmon: The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips.
    • pawnagotchi: A2C-based “AI” powered by bettercap and running on a Raspberry Pi Zero W that learns from its surrounding WiFi environment in order to maximize the crackable WPA key material it captures/
    • pi-pwnbox-rogueap: Rogue AP based on Raspberry Pi
    • WEF: Wi-Fi Exploitation Framework.
    • wifi-cracking: Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat.
    • wifijammer: Continuously jam all wifi clients/routers.
    • wifiphisher: The Rogue Access Point Framework.
    • wifipumpkin3: Powerful framework for rogue access point attack.
    • wifite2: script for auditing wireless networks.
    • wpa_supplicant: supplicant for 802.11
  • esp-wifi: WIP / POC for using the ESP32-C3, ESP32-S3 and ESP32 wifi drivers in bare-metal Rust.
  • USB-WiFi: USB WiFi Adapter Information for Linux

802.15.4

  • KillerBee: IEEE 802.15.4/ZigBee Security Research Toolkit.

Bluetooth

IoT

linux

  • Linux Wireless wiki: Documentation for the Linux wireless (IEEE-802.11) subsystem.
  • Realtek drivers:
    • RTL88x2BU: Linux Driver for USB WiFi Adapters that are based on the RTL8812BU and RTL8822BU Chipset.

Microcontrollers Vendors

Misc

  • Awesome CTS: curated list of Capture The Signal CTF related stuff.
  • cts.ninja: CTF focused on radio signal reverse engineering
  • FCC
  • Mirage: powerful and modular framework dedicated to the security analysis of wireless communications.
  • Signal Identification Guide: help identify radio signals through example sounds and waterfall images.

Radio Controllers

SDR and SDP

  • Hardware
    • BladeRF: 2x2 MIMO, 47MHz to 6GHz frequency range
      • GitHub: bladeRF USB 3.0 Superspeed Software Defined Radio Source Code.
    • HackRF One: oftware Defined Radio peripheral capable of transmission or reception of radio signals from 1 MHz to 6 GHz.
      • GitHub: low cost software radio platform.
    • LimeSDR: low cost, open source, apps-enabled software defined radio (SDR).
  • Libraries
    • FISSURE: RF and reverse engineering framework for everyone.
    • GNU Radio: development toolkit that provides signal processing blocks to implement software radios.
      • GitHub: the Free and Open Software Radio Ecosystem.
    • LiquidSDR: free and open-source signal processing library for software-defined radios.
      • liquid-dsp: digital signal processing library for software-defined radios.
    • OpenOFDM: Sythesizable, modular Verilog implementation of 802.11 OFDM decoder.
  • Theory
    • dspguide: The Scientist and Engineer's Guide to Digital Signal Processing.
    • pysdr: A Guide to SDR and DSP using Python.
    • rtl-sdr: RTL-SDR (RTL2832U) and software defined radio news and projects.
    • sdre: Software-Defined Radio for Engineers.
  • Tools

Z-Wave