How to Convert Docx

Converting docx to other file formats such as doc, or pdf used to be a challenge, but with Microsoft’s commitment to the docx format other applications have begun to support the format, in some cases natively for opening, editing, and then saving. Of course converting docx to doc or pdf may still be a requirement if compatibility with older applications or archival procedures is required.

The easiest, and some would say most reliable way of converting docx to doc requires MS Word 2007, either as part of the MS Office bundle, or included within MS Works 9.0 since docx is the native file format of this version of Word and selecting a different file format for saving is trivial.

MS Word isn’t able to export to pdf format, but Microsoft make a free plugin available known as “Microsoft Save as PDF” which allows MS Word 2007 to convert docx to pdf. Unfortunately this is only available for the 2007 version of MS Office, so Windows users with older versions will need additional software such as Adobe’s Acrobat application, but note that the Acrobat reader isn’t able to convert docx to pdf.

An approach that many users of docx find convenient is to bookmark one of the many online converters, websites that have an upload form for the docx file, which is converted using their software, and a download link then given so that the new doc or pdf file can be saved back to the users hard drive. For basic documents this can be a convenient and efficient solution.

A downside to using an online converter is lack of security, can the website doing the conversion be trusted not to store a copy of the file that has been converted, either explicitly or within their cache. Business documents or any document containing confidential information probably shouldn’t be trusted to online conversion sites.

In these instances the free, and highly capable, OpenOffice suite of applications might be a solid solution, with native handling of docx and the ability to seemlessly convert any open document to doc or pdf formats. Version 3.0 of OpenOffice is required, and converting a docx is a simple matter of saving the document to another format.

Additional Reading on Docx Files

Learn about the Types of Wireless Networks

1003184_girl_enjoying_laptop It is difficult to categorize and compare Wireless data networks because there is such a large number and variety of them.

Some, like mobile telephone networks run over wireless voice networks: CPDP, HSCSD, PDC-P, and GPRS. Others run on their own physical layer networks, utilizing antennas built into handheld devices and large antennas mounted on towers like 802.11, LMDS, and MMDS.

A few are intended to connect only small devices over short distances, like Bluetooth.

Wireless networks that run over other wireless networks may use the lower layer networks for security and encryption. Stand-alone wireless networks can have their own security and encryption features or rely upon Virtual Private Networks to provide security. Multiple layers of security and encryption are desirable.

Some wireless networks are fixed (their antennas do not move frequently). Other networks are mobile (the antennas move constantly). They may operate either on licensed or unlicensed portions of the frequency spectrum.

Common Wireless Network Types

These are major types of wireless networks:

CDPD Cellular Digital Packet Data

HSCSD High Speed Circuit Switched Data

PDC-P Packet Data Cellular

GPRS General Packet Radio Service

1xRTT 1x Radio Transmission Technology

Bluetooth

IrDA

MMDS Multichannel Multipoint Distribution Service

LMDS Local Multipoint Distribution Service

WiMAX Worldwide Interoperability for Microwave Access

802.11 Wi-Fi

Subnet Masks

711230_network_cable_1 A subnet mask allows you to identify which part of an IP address is reserved for the network, and which part is available for host use. By looking at the IP address alone you can’t tell which part of the address is which.The subnet mask (or netmask) gives you all that information to calculate whether IP addresses are on the same subnet, or not.

Using a subnet mask to determine the network and host portions of an IP address

To determine the network address for any IP address, you have to convert both octal addresses into binary, and do a bitwise AND operation.

For example, an IP address of 156.154.81.56 used with a network mask of 255.255.255.240:

IP Address: 10011100.10011010.01010001.00111000

Subnet mask: 11111111.11111111.11111111.11110000

Bitwise AND ———————————————–

Result: 10011100.10011010.01010001.00110000

• The network address for the IP address and subnet mask in question is 156.154.81.48. To determine the how many hosts are possible to be on this same subnet count the number of bits from the right until you get to the first “1″ in the binary network address display.

• That number will be the power you raise 2 to for the calculation of possible number of hosts.

• You must also subtract 2 from the result because one address is reserved for broadcast and network addresses.

• This leaves you with the final algorithm of 2^n-2.

• In the example there are 4 bits of 0 in the network address, leaving you with 2^4-2 hosts possible (14 hosts).

• This means that your network address is 156.54.81.48, that you have a range of addresses available to hosts from 156.154.81.49 - 156.154.81.62, and that the broadcast address for this network is 156.154.81.63.

Subnet masks are critical to communications on an IP network. Network devices use the targets and defined netmask to determine if the host is on is a local subnet, or on a remote network.

Devices act differently depending on the result: If the subnet is local, the device will send an ARP request to retrieve the MAC or hardware address of the system in question to communicate over the data-link layer and If the address is found to be on a remote network, then the network device routes packets to the gateway in it’s routing table that is set to handle that network.

Additional Reading on Subnet Masks

Setup a Proxy Server

496858_cable A proxy server is a server that receives requests intended for another server and that acts on the behalf of the client to obtain the requested service.

It is often used when the client and the server are incompatible for direct connection or for screening purposes, to enable the administrator to control access to undesirable sites.

It may also be used for caching purposes to enable faster access to frequently used websites and improves security because all the computers connected to the LAN access the Internet through a single IP address reducing the number of ports exposed.

Proxy servers work on the seventh layer (the Application Layer) of the OSI model and tend to be application dependent. They are more difficult to install and maintain than firewalls, as proxy functionality for each application protocol like HTTP, SMTP, or SOCKS must be configured individually.

Their filtering capabilities are relatively intelligent Since proxy servers function at the OSI Application layer. Network administrators can bar access to illegal domains but allow access to other sites while ordinary firewalls cannot see Web domain names. Proxy servers can also filter incoming data based on application content inside the messages.

WinProxy

WinProxy is one of the proxy servers available for Windows based systems. No software has to be installed on the client systems because WinProxy is a transparent proxy server that also provides NAT (Network Address Translation).

The client system is then virtually unaware of the existence of the proxy server. Apart from the usual caching and security features it also supports important protocols like HTTP, Real Audio/Video, Mail, FTP, NNTP News, Telnet, Socks, Secure Sockets, DNS, IMAP 4, etc.

The WinProxy Server is installed and configured as follows:

• Install the TCP/IP protocol on all systems connected to the network.

• Run the Install Wizard. The first screen is the product registration screen which require you to enter the product key.

• The next two screens require information about your Internet connection. Select the type of connection and the name of your connection.

• Enter the username and password of the Internet connection to be used.

• WinProxy then configures the internal and external IP addresses. It automatically assigns a unique address to each device on the LAN as internal addresses. The IP address assigned to the modem/router by your ISP is taken as the external address.

• WinProxy then prompts you to disconnect from the Internet if you are already connected.

• In the final step WinProxy works through all the steps and verifies that all operations have been performed properly.

RAR Password Recovery

883988_security WinRAR 3.x archives use AES encryption with 128-bit keys. AES is a secure algorithm and 128-bits is a reasonable key size.

These encrypted RAR archives can be attacked with both a dictionary attack and a brute force attack but RAR password recovery will not be trivial.

RAR Password Recovery Software

Several programs can help you recover a RAR archive password:

RAR Password Cracker

Elcomsoft Advanced RAR Password Recovery

RAR Key

cRARK

RAM

666819_got_ram RAM means Random Access Memory. It is a “temporary” memory that is lost when the system shuts down, hence the “random” part of the name since any piece of information can be circulated through the memory regardless of its location and its relation to any other information.

The first RAM was created in 1951 and was used until the late 1960s and early 1970s.

RAM Types

Some types of RAMs used today are: SRAMs (static RAMs), which stores data in a state of a flip-flop, or DRAMs (dynamic RAMs), Flash, and EPROM, which store data as a charge in a capacitor.

A ROM, is a type of a RAM that has permanently enabled/disabled selected transistors by using a metal mask. ROMs thus cannot store any further charges.

Flash memory is widely used because SRAMs and DRAMs are known to be highly volatile, so new products adopt the flash memory technology. Portable music players, scientific calculators, mobile phones, are devices that use flash memory.

There are two types of flash memory: the NOR type is able to conduct a random access, and is widely used as a ROM and the NAND type used in flash USB drives.

RAMs are shipped as DRAM modules or memory modules. The Plug n Play technology, allows the user to easily replace them by taking the old one out of the port and replacing it with a new one. There is also an extremely small amount of RAM (known as SRAMs) within CPUs, motherboards, and hard drives.

RAM Swapping and Thrashing

Sometimes the computer will conduct a task known as swapping. This is when the computer uses the hard drive space in place of the memory temporarily. Constantly swapping is called thrashing, but as the name suggests, constant thrashing can decrease system performance.

Security

SDRAMs are not fully shut off when the power is cut. The stored memory is faded away, this takes seconds in a normal room temperature, and can take up to minutes in lower temperatures. Encrypted information could potentially be leaked while it is still stored in the memory.

Recent Developments

Non-volatile RAMs are under development, so that memory can still be stored when the power is shut off. In 2004 Nantero developed a fully functioning carbon nanotube memory type holding 10 GB. In 2006, “Solid State Drives” with sizes of 150 GB and a faster speed have been created.

Cell Phone Signal Boosters

1074815___call__ If you cant talk on your cell phone because it has weak signals in a particular area and important calls are lost. What can you do?

The Signal Booster saves the day

You can install a cell phone signal booster, a device which will lead to reduced dropped calls and extends your cell phone range. Manufacturers claim that signal boosters can increase signal strength up to 500%.

The cell phone booster intensifies the signal level and the power output of your cell phone to the maximum FCC limit. In the past, cell phones were capable of an output of 3000 watts, the cell phone booster increases your current cell phone power to the standard of cell phones used in the past.

Improving Long Distance Calls

You can achieve long distance and more reliable communications with a cell phone booster. Antennas with the magnetic mount or the glass mount can be used in cars and in boats.

The indoor cell phone coverage can be increased to cover an area of 2500 square feet. The booster can enhance wireless applications like cell phone-internet use and text messaging too.

Dual Band Cell Phone Boosters

With a booster you will never have to lose signal in places or environments which are very important for communication. There are even dual band cell phone signal boosters available for use with a dual band phones.

There is also the wireless extender system cell phone signal booster that is capable of improving the signal strength of the PCS phone through signal amplification up to an area of 2500 square feet.

For additional coverage, you can get a wireless extender PCS indoor antenna, place the antenna on the roof and then run a RG-6 coaxial cable to the room where you will place the base. Once connected there will be fewer dropped calls.

Additional Reading on cell phone signal booster

SMSS.exe

Window’s operating systems have many processes that run behind the scenes. One of these processes is the SMSS.exe which is an execution file. Its full name is Session Management Subsystem.

This Session Manager Subsystem is responsible for starting a user’s session. The system thread is responsible for specific tasks like launching the Winlogon, other Win32 processes and setting the system variables.

Many users first notice the SMSS.exe process when the system shuts down abnormally, since when a system shuts down abnormally or unexpectedly, the SMSS.exe causes a “hang” and the system stops responding.

The SMSS.exe Trojan Version

The real SMSS.exe file is always located in the C:\Windows\System32 folder. If you find an smss.exe in another folder, it is probably malware (a virus, spyware, trojan or worm).

Many malicious programs try to hide like legitimate computer processes such as the smss.exe trojan.

The malware that takes the form of smss.exe is a trojan called Flood.F.

Flood.F is a serious security risk that can steal or reveal sensitive data or documents like personal and financial information and be used for credit card fraud or identity theft.

The smss.exe Flood.F trojan can be removed with commercial applications such as MacAfee and Norton or other free applications found online.

Additional Reading on SMSS.exe

SSID

866368_wireless_ The Service Set IDentifier (SSID) is a token which identifies an 802.11 (Wi-Fi) network.

It is a secret key set by the network administrator which you must know to join an 802.11 network.

It can be discovered by network sniffing. since it is part of the packet header for every packet sent over the WLAN.

SSID Security Issues

The fact that it is a secret key and not a public key creates a key management problem for the network administrator.

Every user of the network have the SSID configured into their system so If the network administrator seeks to lock a user out of the network, the administrator must change the SSID and reconfigure the SSID on every network node.

Default SSID’s

802.11 access point vendors allow the use of an SSID to enable an 802.11 NIC to connect to any 802.11 network. This is known to work with wireless equipment from Buffalo Technologies, Cisco, D-Link, Enterasys, Intermec, Lucent, and Proxim. Other default SSID’s include “tsunami”, “101″, “RoamAbout Default Network Name”, “Default SSID”, and “Compaq”.

Disabling SSID Broadcasting

Wireless Access Point (WAP) vendors have added a configuration option which lets you disable broadcasting of the SSID, but it is only able to prevent the SSID from being broadcast with Probe Request and Beacon frames.

In addition, the wireless access cards will broadcast the SSID in their Association and Reassociation frames. Because of this, the SSID cannot be considered a valid security tool.

Other names for SSID

The SSID is also referred to as the ESSID (Extended Service Set IDentifier).

Additional Reading on SSID

Wi-Fi Software Tools

866376_wireless_ Users of almost all software platforms have available many useful Wi-Fi software tools that allow Wi-Fi to perform functions such as:

• Wireless network discovery

• Wireless network mapping

• Wireless network traffic analysis

• Wireless network RF signal strength monitoring

• Wireless network encryption cracking

• Wireless network custom frame generation

• Dictionary or brute force attacks against wireless networks

• Denial of Service (DoS) attacks against wireless networks

Wi-Fi Software Tools for Multiple Platforms

Aircrack-ng

Aircrack-ng is a WEP and WPA-PSK key cracking program you can use on 802.11 networks. This program’s primary purpose is to recover a lost or unknown key once enough data is captured.

Aircrack-ng has the following advantages over the original Aircrack release:

• Updated and better documentation

• Updated drivers, including new drivers not originally supported in Aircrack

• New and faster WEP attack algorithm PTW

• Supports Unix, Windows, and Zaurus

• Includes fragmentation in attacks

• Better cracking performance

• Dictionary support for WEP attacks

• Use multiple cards to capture simultaneously

• New tools including airtun-ng, packetforge-ng (improved arpforge), wesside-ng (still under development), and airserv-ng (still under development)

• Code optimizations and bug fixes

Wi-Fi Software Tools for Windows

KNSGEM II

This program KNSGEM II, takes the survey logs produced by NetStumbler, Kismet, or WiFiHopper and compiles the data with google earth to provide colorized 3D coverage maps.

NetStumbler

NetStumbler for Windows allows you to detect Wireless Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has many uses:

• Verify that your network is set up the way you intended.

• Find locations with poor coverage in your WLAN.

• Detect other networks that may be causing interference on your network.

• Detect unauthorized “rogue” access points in your workplace.

• Help aim directional antennas for long-haul WLAN links.

• Use it recreationally for WarDriving.

OmniPeek

Omnipeek is the next generation version of commercial wireless analysis software from wildpackets.

Features of OmniPeek:

• Analyze any network interface, including 10Gigabit, Gigabit, and WAN adapters

• Analyze media and data traffic simultaneously

• View results in normal document formats such as PDF, HTML or just through email or IM clients

• View high level details of traffic in a dashboard, or drill down into the individual packet payloads

• View local, remote, or previously stored captures, including view multiple active captures at once.

• View capture details by conversation pairs to quickly identify useful or problematic events

• Change capture filters at will without restarting the capture sequence

Stumbverter

StumbVerter allows you to import Network Stumbler’s summary files into Microsoft’s MapPoint 2004 maps.

The logged WAPs will be shown with small icons, their colour and shape relating to WEP mode and signal strength.

As the AP icons are created as MapPoint pushpins, the balloons contain other information, such as MAC address, signal strength, mode, etc. This balloon can also be used to write down useful information about the AP.

Lucent/Orinoco Registry Encryption/Decryption

Lucent Orinoco is a Client Manager that stores WEP keys in the Windows registry under a certain encryption/obfuscation. This wi-fi tool can be used to encrypt WEP keys into a registry value or to decrypt registry values into WEP keys.

WiFi Hopper

WiFi Hopper is a windows network discovery and connection client.

WiFi Hopper can assist auditors with Site Surveys, Connection parameter testing, and Network Discovery. You can easily limit the details displayed, as well as what kinds and configurations of equipment will be tested, using filters

APTools

APTools queries ARP Tables and Content-Addressable Memory (CAM) for MAC Address ranges associated with 802.11b Access Points. It utilizes Cisco Discovery Protocol (CDP) if available. If an Access Point that is web managed is identified, the security configuration of the Access Point is audited via HTML parsing.

Wi-Fi Software Tools for Unix

AirSnort

It is a wireless LAN (WLAN) tool used to crack encryption keys on 802.11b WEP networks. AirSnort passively monitors transmissions, computing the encryption key when enough packets have been gathered.

CoWPAtty

CoWPAtty is a program that utilized look up tables to optmize brute force key cracking for shortest time. The hash tables provides include 100,000 dictionary and common key words with the top 1000 most common WiFi SSIDs. Its focus is on the WPA1 and WPA2 protocols.

Karma

Karma is a set of compiled wireless client assessment tools. It is used to identify and take advantage of methods operating systems use to connect to access points. Although no exploit codes are provided with the code release, the suite has been tested with multiple exploit releases.

Kismet

Kismet is an 802.11 Layer 2 wireless network detector, sniffer, and Intrusion Detection System. It will work with any wireless card that supports a raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.

Identify networks by passively collecting packets and detecting standard named networks, detecting and decloaking hidden networks, and inferring the presence of nonbeaconing networks via data traffic.

Wellenreiter

Wellenreiter, by Max Moser, is a GTK/Perl program that makes the discovery and auditing of 802.11b Wi-Fi wireless networks much easier. All three major wireless cards (Prism2, Lucent, and Cisco) are supported. It has an embedded statistics engine for the common parameters provided by wireless drivers. Its scanner window can be used to discover access-points, networks, and ad-hoc cards. It detects SSID broadcasting or non-broadcasting networks in every channel. The manufacturer and WEP is automatically detected. A flexible sound event configuration lets you work in unattended environments. An ethereal / tcpdump-compatible dumpfile can be created for the whole session. GPS is used to track the location of the discovered networks immediately. Automatic associating is possible with randomly generated MAC address. Wellenreiter can reside on low-resolution devices that can run GTK/Perl and Linux/BSD (such as iPaqs). Uniq Essod-bruteforcer is now included too.

Airsnarf

Airsnarf is a simple rogue wireless access point setup utility designed to demonstrate how a rogue AP can steal usernames and passwords from public Wi-Fi hotspots. Airsnarf was developed and released to demonstrate an inherent vulnerability of public 802.11b hotspots–snarfing usernames and passwords by confusing users with DNS and HTTP redirects from a competing AP.

Hotspotter

Hotspotter passively monitors Wi-Fi networks for probe request frames to identify the preferred networks of Windows XP clients, and will compare it to a supplied list of common hotspot network names. If the probed network name matches a common hotspot name, Hotspotter will act as an access point to allow the client to authenticate and associate. Once associated, Hotspotter can be configured to run a command, possibly a script to kick off a DHCP daemon and other scanning against the new victim.

BSD-Airtools

bsd-airtools is a package that provides a complete toolset for wireless 802.11b auditing. Namely, it currently contains a bsd-based wep cracking application, called dweputils (as well as kernel patches for NetBSD, OpenBSD, and FreeBSD). It also contains a curses based ap detection application similar to netstumbler (dstumbler) that can be used to detect wireless access points and connected nodes, view signal to noise graphs, and interactively scroll through scanned ap’s and view statistics for each. It also includes a couple other tools to provide a complete toolset for making use of all 14 of the prism2 debug modes as well as do basic analysis of the hardware-based link-layer protocols provided by prism2’s monitor debug mode.

WaveStumbler

WaveStumbler is console based 802.11 network mapper for Linux.

AirFart

AirFart is a wireless tool created to detect Wi-Fi devices, calculate their signal strengths, and present them to the user in an easy-to-understand fashion. It is written in C/C++ with a GTK front end. Airfart supports all wireless network cards supported by the linux-wlan-ng Prism2 driver that provide hardware signal strength information in the “raw signal” format (ssi_type 3). Airfart implements a modular n-tier architecture with the data collection at the bottom tier and a graphical user interface at the top.

AirTraf

AirTraf is one of the first wireless 802.11(b) network analyzers. With the growth of interest in wireless networks, network administrators of today are faced with a challenge. The challenge is to effectively deploy numerous access points within their organization to provide wireless coverage for all users, and at the same time make sure that everyone who is granted access is able to operate in a fast, robust network environment.

AirTraf is a 100% passive packet sniffing tool for the wireless 802.11b networks. It captures and tracks all wireless activity in the coverage area, decodes packets, and maintains acquired information associated by access points, as well as detected individual wireless nodes. It dynamically detects any access points in the area, finds association between wireless clients and access points, and builds information table for each packet that is transmitted via the air. AirTraf is able to maintain packet count, byte information, related bandwidth, as well as signal strength of nodes.

And best of all, its open-source, and distributed under the GPL. Other comparable products that perform wireless network analysis price their products above $10,000 (such as Sniffer Wireless), and is limited to single-licenses of copy, while AirTraf can be installed at any detection location you choose, enabled to run in (Server Mode), and polled periodically via the polling server to retrieve active wireless data from multiple stations at once, resulting in consolidation of wireless information over your entire organization into a single point of access (database), and able to be administered via a web interface, visualizing your wireless network performance in a single glance. At absolutely no cost to you, or your organization.

However, AirTraf is still a work in progress, meaning much of planned features, such as injecting packets into the network to test Access Point security, are not available yet. But it is constantly being worked on, and soon it will prove to be a critical tool in managing healthy wireless networks in the future.

AP Hunter

AP Hunter (Access Point Hunter) can find and automatically connect to whatever wireless network is within range. AP Hunter can be used for site surveys, writing the results in a file.

AP Radar

AP Radar (Access Point Radar) is a Linux/GTK+ based graphical netstumbler and wireless profile manager. This project makes use of the version 14 wireless extensions in linux 2.4.20 and 2.6 to provide access point scanning capabilities for most models of wireless cards. It is meant to replace the manual process of running iwconfig and dhclient. It makes reconfiguring for different wireless access points quick and easy.

Mognet

Mognet is a simple, lightweight 802.11b sniffer written in Java and available under the GPL. It features realtime capture output, support for all 802.11b generic and frame-specific headers, easy display of frame contents in hex or ASCII, text mode capture for GUI-less devices, and loading/saving capture sessions in libpcap format.

PrismStumbler

Prismstumbler is a wireless LAN (WLAN) discovery tool which scans for beaconframes from access points. Prismstumbler operates by constantly switching channels and monitors any frames received on the currently selected channel.

Prismstumbler is designed to be a flexible tool to find as much information about wireless LAN installations as possible. It comes with an easy to use GTK2 frontend and is small enough to fit on a small portable system. Because of its client-sever architecture the scanner engine may be used for different frontends. An example for this is gpe-aerial, a wireless LAN access tool for GPE.

The current GTK user interface is designed to work on large PC screens as well as on PDA displays. Prismstumbler uses an embedded SQL database to store network information. It is also able to create networks lists in GPSdrive format and store captured packages to pcap dump files.

THC WarDrive

THC-WarDrive is a tool for mapping your city for wavelan networks with a GPS device while you are driving a car or walking through the streets. It is effective and flexible, a “must-download” for all wavelan nerds.

Wifi-Scanner

Wifi-Scanner is a tool that has been designed to discover wireless nodes (i.e access point and wireless clients). It is distributed under the GPL License.

WiFi-Scanner will work with Cisco cards and prism cards with the hostap driver or wlan-ng driver.

An IDS (Intrusion Detection System) is integrated into Wifi-Scanner to detect anomalies like MAC usurpation.

WaveMon

wavemon is a ncurses-based monitor for wireless devices. It allows you to watch the signal and noise levels, packet statistics, device configuration, and network parameters of your wireless network hardware.

WPM (Wireless Power Meter)

WPM (Wireless Power Meter) is intended to give you a nice signal strength meter for analyzing your wireless connection, and facilitate setting up point-to-point links.

asleap

asleap exploits weaknesses in Cisco’s LEAP protocol. Specifically, asleap:

Recovers weak LEAP passwords.

Can read live from any wireless interface in RFMON mode.

Can monitor a single channel, or perform channel hopping to look for targets.

Will actively deauthenticate users on LEAP networks, forcing them to reauthenticate. This makes the capture of LEAP passwords very fast.

Will only deauth users who have not already been seen, doesn’t waste time on users who are not running LEAP.

Can read from stored libpcap files, or AiroPeek NX files (1.X or 2.X files).

Uses a dynamic database table and index to make lookups on large files very fast. Reduces the worst-case search time to .0015% as opposed to lookups in a flat file.

Can write *just* the LEAP exchange information to a libpcap file. This could be used to capture LEAP credentials with a device short on disk space (like an iPaq), and then process the LEAP credentials stored in the libpcap file on a system with more storage resources.

anwrap

anwrap.pl is a wrapper for ancontrol that serves as a Dictionary attack tool against LEAP enabled Cisco Wireless Networks. anwrap traverses a user list and password list attempting authentication and logging the results to a file. anrwap really wrecks havoc on RADIUS calls to NT networks that have lockout policies in place, you have been warned. Tweak the Timeouts, a lengthy LEAP timeout on the Cisco side could make for a very boring afternoon. anwrap was designed to audit authentication strengths before deploying LEAP in a production environment.

AirJack

AirJack is a device driver (or suite of device drivers) for 802.11(a/b/g) raw frame injection and reception. It is meant as a development tool for all manor of 802.11 applications that need to access the raw protocol.

Fake AP

Black Alchemy’s Fake AP generates thousands of counterfeit 802.11b access points. Hide in plain sight amongst Fake AP’s cacophony of beacon frames. As part of a honeypot or as an instrument of your site security plan, Fake AP confuses Wardrivers, NetStumblers, Script Kiddies, and other undesirables.

Wireless Access point Utilities for Unix

Wireless Access Point Utilites for Unix is a set of wi-fi utilities to configure and monitor Wireless Access Points under Unix using SNMP protocol. Wireless Access Point Utilities compiles by GCC and IBM C compiler and runs under Linux, FreeBSD, NetBSD, MacOS-X, AIX, QNX, OpenBSD.

AP Hopper

AP Hopper is a program that automatically hops between access points of different wireless networks. It checks for DHCP and Internet Access on all the networks found. It logs successful and unsuccessful attempts.

APTools

APTools is a utility that queries ARP Tables and Content-Addressable Memory (CAM) for MAC Address ranges associated with 802.11b Access Points. It will also utilize Cisco Discovery Protocol (CDP) if available. If an Access Point that is web managed is identified, the security configuration of the Access Point is audited via HTML parsing.

GpsDrive

GpsDrive is a car (bike, ship, plane) navigation system. GpsDrive displays your position provided from your NMEA capable GPS receiver on a zoomable map, the map file is autoselected depending of the position and preferred scale. Speech output is supported if the “festival” software is running. The maps are autoselected for best resolution depending of your position and can be downloaded from Internet. All Garmin GPS receiver with a serial output should be usable, also other GPS receiver which supports NMEA protocol.

Wifitap

WifiTap allows users to connect to Wifi networks using traffic injection. The concept is the same as most “man-in-the-middle” or “monkey-in-the-middle” attacks. For WifiTap to work, another system must have an association with an access point that the WifiTap system wants to pass traffic through.

Wi-Fi Software Tools for Mac OS

MacStumbler.

MacStumbler is a utility to display information about nearby 802.11b and 802.11g wireless access points. It is mainly designed to be a tool to help find access points while traveling, or to diagnose wireless network problems. Additionally, MacStumbler can be used for “wardriving”, which involves co-ordinating with a GPS unit while traveling around to help produce a map of all access points in a given area.

KisMAC

KisMAC is a free stumbler application for MacOS X, that puts your card into the monitor mode. Unlike most other applications for OS X we are completely invisible and send no probe requests. KisMAC supports third party PCMCIA cards with Orinoco and PrismII chipsets, as well as Cisco Aironet cards.

Kismet

Kismet is an 802.11 Layer 2 wireless network detector, sniffer, and Intrusion Detection System. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.

Kismet identifies networks by passively collecting packets and detecting standard named networks, detecting (and given time, decloaking) hidden networks, and inferring the presence of nonbeaconing networks via data traffic.

Windows tools useful when associated with Wi-Fi tools

MacIdChanger

MacIdChanger allows you to easily and temporarily change the MAC Address of your windows network adapter without much fuss. This is generally used to conceal the unique mac id that is on every network adapter. This software only operates on Windows XP/2003.

Technitium MAC Address Changer

Free, and very verbose and functional tool to change your network adapters MAC Address. The tool works regardless of which network adapter or driver is installed in your system. Supported platforms are Windows NT, Windows 2000, Windows XP and Windows Vista.

Additional Reading on Wi-Fi Software Tools