Null Byte & Null Space Labs Present: Wi-Fi Hacking, MITM Attacks & the USB Rubber Ducky « Null Byte :: WonderHowTo

Null Byte users have often requested video content, but the question has always been what format would best serve our community. This week, we partnered withNull Space Labs, a hackerspace in Los Angeles, to test the waters by hosting a series of talks on ethical hacking for students in Pasadena Computer Science Club. We invited students and Null Byte writers to deliver talks on Wi-Fi hacking, MITM attacks, and rogue devices like the USB Rubber Ducky.(1) Pasadena CS Students attend Null Byte and Null Space Labs's Ethical Hacking talk. (2) Our "Google Starbucks" network demonstrating how to capture wireless hosts. (3) Kody Kinzie explains the attackers behind Wi-Fi hacking. (4) Ian explaining how to encode IP addresses to hide them from firewalls.Images viaNull ByteWhile our first live stream started slightly delayed, our group of writers and students is excited to bring you the first of our workshops and presentations. Below, you can catch the recorded streams of the events, as well as the decks from each talk where applicable.Wi-Fi Hacking: Who Hacks Wi-Fi & What Tools Do They Use?By Kody KinzieKody Kinzie speaks on Wi-Fi hacking threats in 2017.Image via Null ByteUse of Wi-Fi is incredibly widespread in 2017. In the city of Los Angeles alone, there are hundreds of thousands of wireless networks, many of which touch critical infrastructure. Kody Kinzie is a CS student researching Wi-Fi security, and the tactics people use to break it.Kody explains the tactics currently used to break or bypass the technology that makes Wi-Fi secure, and the motivations behind groups who hack Wi-Fi in 2017. In addition, the basic tools used by each threat group are discussed relative to how much skill is required to use them.Check out these related articles:Wi-Fi Phishing:Get Anyone's Wi-Fi Password Without Cracking Using WifiphisherPassword CrackingCracking WPA2-PSK Passwords Using Aircrack-NgEvil Twin:Capturing WPA Passwords by Targeting Users with a Fluxion AttackCustom Wordlists:How to Crack Passwords, Creating a Custom Wordlist with CrunchReaver Attacks:Hack WPA Wi-Fi Passwords by Cracking the WPS PINMITM Attacks: Network Sniffing Over Routers/SwitchesBy Ian O'NeillIan O'Neill explains MITM attacks to computer science students.Image via Null ByteMan in the Middle attacks intercept and redirect traffic, and can be extremely dangerous when employed correctly. Ian O'Neill explains in detail the fundamentals of a MITM attack, from creating a fake network to downgrading HTTPS connections to HTTP.MITM attacks continue to present a viable threat when users fall for phishing and ignore warnings, in spite of the trend towards HTTPS and more secure internet connections. Take a trip to the dark side with us to explore the hands-on ways an attacker can employ an effective MITM attack.Check out these related articles:SSL Strip :Defeat SSL in Practice with SSL StripMTIM Tools:Build a Man-in-the-Middle Tool with Scapy and PythonMITM Attacks:How to Conduct a Simple Man-in-the-Middle AttackMITM Framework:Build a Pumpkin Pi — The Rogue AP & MITM Framework That Fits in Your PocketRogue Devices: Antivirus Disabler Script on the USB Rubber DuckyBy Tim SchellinTim demonstrates a USB Rubber Ducky payload.Image via Null ByteAntivirus is the first line of defense for most systems, allowing even well-crafted malware to be defeated before deploying a payload. Timothy Shellion is a CS student using the USB Rubber Ducky to design payloads to defeat antivirus, and explains what a rogue device like a USB Rubber Ducky is, and how it works.Timothy demonstrates his simple Duckyscript code to disable antivirus on Windows, and explains how the device can be used to defeat even well-defended systems when physical access is achieved. The potential of this device reach far beyond simply disabling antivirus, and the process of creating a payload for a rogue device is explained.You can see Tim's Duckyscript to disable Windows Antivirus here:DELAY 300GUI sDELAY 300STRING powershellDELAY 500CTRL-SHIFT ENTERDELAY 500STRING get-serviceENTERDELAY 750STRING stop-service -force "avast! antivirus"ENTERDELAY 750ENTERDELAY 500STRING get-service "avast! antivirus"ENTERCheck out these related articles:Load Payloads:Load & Use Keystroke Injection Payloads on the USB Rubber DuckyAutomate Hacking:Automate Hacking on the Raspberry Pi with the USB Rubber DuckySteal Files:Steal macOS Files with the USB Rubber DuckyCustom Firmware:Modify the USB Rubber Ducky with Custom FirmwareWant More Video Content?If you enjoyed this and would like to see more video content, let us know in the comments below. Thank you toNull Space Labs, and Pasadena Computer Science Club for helping us put on our first Null Byte event. If you're in the SoCal area and interested in getting involved in our of our talks or workshops, please reach out to us on Twitter!Follow Null Byte onTwitterandGoogle+Follow WonderHowTo onFacebook,Twitter,Pinterest, andGoogle+Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover photo by Null ByteRelatedHow To:Automate Hacking on the Raspberry Pi with the USB Rubber DuckyHow To:Modify the USB Rubber Ducky with Custom FirmwareHow To:Load & Use Keystroke Injection Payloads on the USB Rubber DuckyHow To:Steal macOS Files with the USB Rubber DuckyHacking macOS:How to Steal Signal Conversations from a MacBook with a USB Rubber DuckyAndroid for Hackers:How to Backdoor Windows 10 Using an Android Phone & USB Rubber DuckyHacking Gear:10 Essential Gadgets Every Hacker Should TryHacking macOS:How to Use One Python Command to Bypass Antivirus Software in 5 SecondsHow To:Build a Beginner Hacking Kit with the Raspberry Pi 3 Model B+News:Hak5 Just Released the Packet SquirrelHacking Android:How to Create a Lab for Android Penetration TestingBuyer's Guide:Top 20 Hacker Holiday Gifts for Christmas 2017How To:Use the USB Rubber Ducky to Disable Antivirus Software & Install RansomwareHow To:Hack MacOS with Digispark Ducky Script PayloadsHow To:Build a Pumpkin Pi — The Rogue AP & MITM Framework That Fits in Your PocketHow To:Run USB Rubber Ducky Scripts on a Super Inexpensive Digispark BoardHow To:Hack WPA WiFi Passwords by Cracking the WPS PINHow To:Steal Usernames & Passwords Stored in Firefox on Windows 10 Using a USB Rubber DuckyHow To:Set Up Kali Linux on the New $10 Raspberry Pi Zero WHow To:Catch USB Rubber Duckies on Your Computer with USBRipHow To:Inject Keystrokes into Logitech Keyboards with an nRF24LU1+ TransceiverVideo:How to Crack Weak Wi-Fi Passwords in Seconds with Airgeddon on Parrot OSHow Null Byte Injections Work:A History of Our NamesakeWeekend Homework:How to Become a Null Byte Contributor (1/29/2012)Farewell Byte:Goodbye Alex, Welcome AllenHow To:A Guide to Steganography, Part 1: How to Hide Secret Messages in ImagesHow To:Mask Your IP Address and Remain Anonymous with OpenVPN for LinuxNull Byte:Never Let Us DieWeekend Homework:How to Become a Null Byte Contributor (1/12/2012)How To:Get Free Wi-Fi from Hotels & MoreHow To:Fix the Unreadable USB Glitch in VirtualBoxWeekend Homework:How to Become a Null Byte ContributorWeekend Homework:How to Become a Null Byte Contributor (2/3/2012)Skyrim Hack:Get Whatever Items You Want By Hacking Your Game SaveHow To:Quickly Encrypt Your Web Browsing Traffic When Connected to Public WiFiWeekend Homework:How to Become a Null Byte Contributor (2/17/2012)News:Null CommunityHow To:Things to Do on WonderHowTo (01/18 - 01/24)How To:Install Linux to a Thumb Drive