Attacking Wifi with Wireshark

For a thing , I want to dump the wlan traffic between an Android app and a wifi camera. It isn't hard to grab network traffic from Android, if you have a rooted device you can just run tcpdump . tcpdump on Android is annoying, you have to manage the pcap files and it isn't clear what you are capturing.

Thankfully, wireshark can be fed WPA and WEP keys , making snooping as a third party an absolute breeze. The key options are in the protocol preferences for IEEE 802.11 , they look something like this:

wep:a1:b2:c3:d4:e5
wpa-pwd:MyPassword:MySSID
wpa-psk:0102030405060708091011...6061626364

The protocol preferences dialog doesn't seem to do any validation of the keys, instead I had to restart wireshark to get the super unhelpful error message.

The wireshark guide mentions the wireless toolbar, but this wasn't available on my platform and I didn't need it. With just the key, WEP traffic can be decrypted. WPA traffic requires that you capture an EAPOL handshake first. The easiest way to do that is observe the device keying, for testing I just had my phone join the network.


Reading: Nemesis Games, All Tomorrows Parties

Puffins

Today was a very slow start, staying in bed for an extra hour really didn't help me out at all today. Normally the end of the year is quite calm, all of the deadlines seem to have concentrated themselves at the start of next year. Time to work on interesting, but not pressing problems probably won't exist next year, as much as possible has to happen in the next week.

That does make preparation for congress very interesting.


Reading: Nemesis Games, All Tomorrow's Parties

Wellington Suspension Bridge

Unable to remember the name of the Wellington Suspension Bridge I came across this awesome website that documents the 'Doric Columns' . The site is full of history about Aberdeen and the local area, including old photographs, paintings and etching of the local infrastructure. This Etching of the Brig o' Balgownie gives a real impression of the extent of the land reclaimed from the Sea in Aberdeen.


Reading: Nemesis Games, All Tomorrow's Parties

33C3 Lightning talk

I got the confirmation email today, I will be presenting a lightning talk about internet transport at congress. There are about one hundred billion lightning talks at each congress spread over three days, the bar for entry is much lower than a real track talk. I am happy to be included with the likes of the hacker yoga guy from camp. The lightning talk reveals the secret fourth planned item for my trip to hamburg.

With my FOSDEM talks and congress I have been preparing 'external' facing presentations a lot this month. I am now sure that there isn't any fixed length of talk that really works. 55 minutes is a lot of time to speak for, writing a coherent story that will come across in that amount of time is hard.

And yet, a 5 minute lightning talk slow is a horrible thing! There isn't much time to speak, which means there is almost no time at all to get your problems out and your solutions in order.

I am quite sure the lightning talks are live streamed, they are certainly recorded. I will post a link to the timeslot once I know when it is, the live stream just before it happens and the video once it is posted.


Reading: Nemesis Games, Idoru

It is getting closer

Okay, just 14 days to congress how is your preparation going?

I have three projects coming with me:

  • RGB Pixel Display
    • I have the panel built and some initial code running. I still want to connect the panel to the network and do some other cool effects, this has a good start.
  • Slow TV
    • hibby and I spent a couple of hours playing with VLC and python on Sunday. We have a script that can send out a multicast video stream which we can pick up in vlc. We need to get separate audio working and video playlists going before we can say this is ready.
  • Some sort of display showing:
    • I am going to set up a pi today, it will boot into rainbowstream running with image on terminal. I will connect that to the cheap pico projector I have and then I will call it 'done'.

Reading: Nemesis Games, Idoru