Security Basics
Tool to find rouge wireless access points? May 14 2012 03:28PM
Jon D (rekcahpmip gmail com) (7 replies)
Re: Tool to find rouge wireless access points? May 17 2012 11:15PM
Marcus Adams (marcus adams virtuesecurity com) (1 replies)
Re: Tool to find rouge wireless access points? May 18 2012 07:09PM
Vic Vandal (vvandal well com) (1 replies)
Re: Tool to find rouge wireless access points? May 20 2012 03:16PM
Obluda Nemá Jméno Obluda Nemá Jméno Obluda Nemá Jméno (jmeno obluda gmail com) (1 replies)
Re: Tool to find rouge wireless access points? May 20 2012 03:20PM
Obluda Nemá Jméno Obluda Nemá Jméno Obluda Nemá Jméno (jmeno obluda gmail com)
RE: Tool to find rouge wireless access points? May 16 2012 06:50AM
Erik Muttersbach (erik muttersbach net)
Re: Tool to find rouge wireless access points? May 15 2012 08:23PM
Brandon Edmunds (brandonedmunds gmail com)
Re: Tool to find rouge wireless access points? May 15 2012 05:34PM
Patrick Laverty (patrick_laverty brown edu)
Re: Tool to find rouge wireless access points? May 15 2012 04:39PM
Rajiv D (rajiv ceh gmail com) (1 replies)
Re: Tool to find rouge wireless access points? May 15 2012 07:05PM
Vincent Ngundi (vincent ngundi me ke)
Re: Tool to find rouge wireless access points? May 14 2012 08:00PM
Jon D (rekcahpmip gmail com) (2 replies)
Re: Tool to find rouge wireless access points? May 14 2012 08:07PM
xgermx (xgermx gmail com) (2 replies)
RE: Tool to find rouge wireless access points? May 16 2012 06:11PM
Dan Lynch (DLynch placer ca gov)
RE: Tool to find rouge wireless access points? May 15 2012 01:20PM
Mikhail A. Utin (mutin commonwealthcare org)
Re: Tool to find rouge wireless access points? May 14 2012 08:07PM
Jon Schipp (jonschipp gmail com)
*reposted, I forgot to add the list*

You can use nmap to scan for make and model by using nmap's OS
fingerprinting database.

This may help, there's also a section on it in the Gordon's "Nmap:
Network Scanning" book
http://pauldotcom.com/2008/11/discovering-rogue-access-point.html

A starting point would be to find common ports open on common AP
products and search for those and then
do fingerprinting on the resulting hosts. Or you could just scan
everything if that is feasible/necessary in your environment

Something like this may work and allows you to exclude a set of hosts
from the scan.
The below settings are tuned for a reliable, uncongested network.
This can be scripted to run monthly or what have you...

nmap -e en0 -n -PR -PE -PU -PP -PS80,443,53 -PA80,443,53 -sSU -p U:123,53,69,68,626,5353,514,T:21,22,23,80,443,626,5009,10000
-O --reason -T2 --max-retries 0 --max-rtt-timeout 200ms -oG
/var/log/nmap/ap-scan-`date +"%Y%m%d"`.txt --open --excludefile ./exclude.nmap 192.168.1.0/24

Thanks
Jon

On Mon, May 14, 2012 at 4:00 PM, Jon D <rekcahpmip (at) gmail (dot) com [email concealed]> wrote:
>
> Thanks everyone. Good stuff.
> Time to do some tests...
>
>
>
> Thanks,
> Jon
>
> ------------------------------------------------------------------------

> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------

>

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]
Re: Tool to find rouge wireless access points? May 14 2012 07:44PM
Tony (xnikod gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus