piebro/osm-data huggingface dataset:
opened by  (2021-11-06 18:57:51+00:00): Dylan22hewitt"In this section, we will discuss WEP (Wired Equivalent Privacy). It is the oldest one, and it can be easily broken. WEP uses the algorithm called RC4 encryption. In this algorithm, each packet is encrypted at the router or access point and then send out into the air. Once the client receives this packet, the client will be able to transform it back to its original form because it has the key. In other words, we can say that the router encrypts the packet and send it, and the client receives and decrypts it. The Same happens if the client sends something to the router. It will first encrypt the packet using a key, send it to the router, and the router will be able to decrypt it, because it has the key. In this process, if a hacker captures the packet in the middle, then they will get the packet, but they wouldn't be able to see the contents of the packet because they do not have the key.

WEP Introduction

Each packet that is sent into the air has a unique keystream. The unique keystream is generated using a 24- bit IV (Initialization Vector). An initialization vector is a random number that is sent into each packet in plain text form, which is not encrypted. If someone captures the packet, they will not be able to read the packet content because it is encrypted, but they can read the IV in plain text form.

The weakness with the IV is that it is sent in the pain text and it is very short(only 24- bit). In a busy network, there will be a large number of packets sent in the air. At this time 24-bit number is not big enough. The IV will start repeating on a busy network. The repeated IVs can be used to determine the key stream. This makes WEP vulnerable to statistical attacks.

To determine the key stream we can use a tool called as aircrack-ng. This tool is used to determine the key stream. Once we have enough repeated IV, then it will also be able to crack WEP and give us the key to the network.
opened by ElDavo (2021-11-06 18:58:22+00:00): Via Alessandro Manzoni

via StreetComplete 37.0
opened by ElDavo (2021-11-06 18:58:46+00:00): aggiungere strada senza nome

via StreetComplete 37.0
opened by  (2021-11-06 18:59:13+00:00): Dylan22hewitt"In order to crack WEP, we need first to capture the large number of packets that means we can capture a large number of IVs. Once we have done that, we will use a tool called aircrack-ng. This tool will be able to use statistical attacks to determine the key stream and the WEP key for the target network. This method is going to be better when we have more than two packets, and our chances of breaking the key will be higher.

Let's look at the most basic case of cracking a WEP key. To do this, we will set WiFi card in monitor mode. After this, we will run a command airodump-ng wlan0 to see all of the networks that are within our Wi-Fi range and then we will target one of those networks. Where wlan0 stands for the interface. The following output will be displayed after executing this command:

WEP Cracking 

In this figure, the fourth network that has come up is javaTpoint. On this network, we are going to perform our attacks. We are going to run airodump against javaTpoint network by using the following command:

WEP Cracking 

Here, we run airodump against the javaTpoint network with a --bssid as 74:DA:DA:DB:F7:67. We include the --channel, number 11, and we add --write to store all of the packets that we capture into a file, which is wep. After running the above command, the following output will be displayed:

WEP Cracking

This is a busy network. #Data, shows the number of useful packets that contain a different IV and we can use it to crack the key. If the number is higher, then it is more lightly to crack the key for us. In the following section, we can see the clients:

WEP Cracking 

Now we use ls command to list all the file.

WEP Cracking 

We can see that we have the captured file that was specified in the write argument. Now we will launch aircrack-ng against the file that airodump has created for us. We can launch aircrack against it even if we didn't stop airodump. It will keep reading the new packet that airodump is capturing. Use the fol
opened by JensTyller (2021-11-06 18:59:40+00:00): Bike parking

via StreetComplete 37.0
opened by  (2021-11-06 19:00:38+00:00): onosm.org submitted note from a business:
name: آموزشگاه موسیقی دل آواز اصفهان
phone: 00989134337407
website: 
twitter: @delavaz_music_academy
facebook: 
email: farnoushkermanshahian@gmail.com
hours: 9:00_21:00
category: Music Schools
address: esfahan
closed by Sosha1996 (2023-08-05 15:30:05+00:00): this note closed by script for due inactivity. #onosm
opened by  (2021-11-06 19:01:49+00:00): Dylan22"hewitt"In the previous section, we saw how easy it is to crack a WEP key on a busy network. In a busy network, the number of data increases very fast. One problem that we could face is if the network is not busy. If the network is not busy, the number of data will be increasing very very slowly. At that time we're going to fake as an AP that doesn't have any clients connected to it or an AP that has a client connected to it, but the client is not using the network as heavily as the client in the previous section.

Let's look at an example. We will run airodump against the target AP which is javaTpoint. We now have javaTpoint, the same AP that we used before, but the difference is that we've disconnected the clients that were connected to do this attack. As we can see, in the client area, there are no clients connected and the #Data is 0, it didn't even go to 1.

In this section, we want to be able to crack a key like this, with 0 data:

Fake authentication attack 

To solve this problem, what we can do is inject packets into the traffic. When we do this, we can force the AP to create a new packet with the new IVs in them, and then capture these IVs. But we have to authenticate our device with the target AP before we can inject packets. APs have lists of all of the devices that are connected to them. They can ignore any packets that come from a device that is not connected. If a device that doesn't have the key tries to send a packet to the router, the router will just ignore the packet, and it wouldn't even try to see what's inside it. Before we can inject packets into a router, we have to authenticate ourselves with the router. To do this, we're going to use a method called fake authentication.

In the previous section, we already executed airodump. Let's see how we can use fake authentication. In the previous screenshot, we can see that AUTH have no value. Once we have done fake authentication, we will see an OPN show up there, which will mean that we have
opened by  (2021-11-06 19:02:59+00:00): Dylan22hewitt"The AP now accepts packets that we send to it because we've successfully associated ourselves with it by using a fake authentication attack. We are now ready to inject packets into the AP and make the data increase very quickly, in order to decrypt the WEP key.

ARP request replay is the first method of packet injection. In this method, we're going to wait for an AP packet, capture the packet, and inject it into the traffic. Once we do this, the AP will be forced to create a new packet with a new IVs. We will capture the new packets, inject it back into the traffic again, and force the AP to create another packet with another IV. We will be repeating this process until the amount of data is high enough to crack the WEP key.

Using the following command we can launch airodump-ng:

ARP request replay attack

We're going to add a --write command to store all of the packets that we capture into a file which is arp-request-reply-test. When it runs, we will see that the target network has 0 data, it has no clients associated with it, and there is no traffic going through, which means that it's not useful, we can't crack its key.

To solve this problem, we are going to perform a fake authentication attack as shown in the Fake authenticationsection, so that we can start injecting packets into the network, and it will accept them.

That leads us to our next step, which is the ARP request reply step. In this step, we will inject packets into the target network, forcing it to create new packets with new IVs. Following command is used to do this:

ARP request replay attack

This command is very similar to the previous command, but in this command, we're going to use --arpreplayinstead of ?fakeauth. We will also include -b, for BSSID. With this command, we are going to wait for an ARP packet, capture it, and then reinject it out into the air. We can then see that we have captured an ARP packet, inject it, captured another, inject it into the traffic, and so on. The
opened by  (2021-11-06 19:03:52+00:00): Ahora es el Estadio de entrenamiento del Deportivo Cuenca.
opened by  (2021-11-06 19:04:01+00:00): 6
closed by makmar (2022-01-20 11:52:47+00:00): τι 6?
opened by  (2021-11-06 19:04:02+00:00): Dylan22hewitt"In this section, we are going to discuss Wi-Fi Protected Access(WPA) encryption. After WEP, this encryption was designed to address all of the issues that made WEP very easy to crack. In WEP, the main issue is the short IV, which is sent as plain text in each packet. The short IV means that the possibility of having a unique IV in each packet can be exhausted in active network so that when we are injecting packets, we will end up with more than one packet that has the same IV. At that time, aircrack-ng can use statistical attacks to determine the key stream and WEP key for the network.

In WPA, each packet is encrypted using a temporary key or unique key. It means that the number of data packets that we collect is irrelevant. If we collect one million packets, these packets are also not useful because they do not contain any information that we can use to crack the WPA key. WPA2 is the same as WPA. It works with the same methods and using the same method it can be cracked. The only difference between WPA, WPA2 is that WPA2 uses an algorithm called Counter-Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP) for encryption.
opened by  (2021-11-06 19:04:43+00:00): 5-κινηση
closed by makmar (2022-01-20 11:53:52+00:00): ??
opened by pelleg (2021-11-06 19:05:40+00:00): Unable to answer "Does this bench have a backrest?" for https://osm.org/node/1212038462 via StreetComplete 37.0:

kunne se en bænk, måske flyttet pga årstiden
closed by Linus W Frische (2024-09-28 15:05:39+00:00): Rettet.
opened by  (2021-11-06 19:06:27+00:00): dylan22hewitt"In WPA, each packet is encrypted using a unique temporary key. It is not like WEP, where IVs are repeated, and we collect a large number of data packets with the same IVs. In each WPA packet, there is a unique temporary IV, even if we collect 1 million packets, these packets will not be useful for us. These packets don?t contain any information that can help us to determine the actual WPA key.

The only packets that contain useful information and help us to determine the key are the handshake packets. These are the four packets, and these packets will be sent when a new device connects to the target network. For example, suppose we are at home, our device connect to the network using the password, and a process called four-way handshake happens between the AP and the devices. In this process, four packets called the handshake packets, get transferred between the two devices, to authenticate the device connection. We can use a wordlist using the aircrack-ng and test each password in the wordlist by using the handshake. To crack WPA encrypted network, we need two things: we need to capture the handshake, and we need a wordlist that contains passwords
closed by mavl (2021-11-07 03:37:37+00:00): This note does not contain a useful information for OpenStreetMap.
opened by RaccoonFederation (2021-11-06 19:07:06+00:00): these two terraces have the wrong number of houses. there are one or two more

via StreetComplete 37.0
opened by RaccoonFederation (2021-11-06 19:07:06+00:00): defib outside here

via StreetComplete 37.0
opened by  (2021-11-06 19:07:14+00:00): In WPA, each packet is encrypted using a unique temporary key. It is not like WEP, where IVs are repeated, and we collect a large number of data packets with the same IVs. In each WPA packet, there is a unique temporary IV, even if we collect 1 million packets, these packets will not be useful for us. These packets don?t contain any information that can help us to determine the actual WPA key.

The only packets that contain useful information and help us to determine the key are the handshake packets. These are the four packets, and these packets will be sent when a new device connects to the target network. For example, suppose we are at home, our device connect to the network using the password, and a process called four-way handshake happens between the AP and the devices. In this process, four packets called the handshake packets, get transferred between the two devices, to authenticate the device connection. We can use a wordlist using the aircrack-ng and test each password in the wordlist by using the handshake. To crack WPA encrypted network, we need two things: we need to capture the handshake, and we need a wordlist that contains passwords
closed by mavl (2021-11-07 03:37:11+00:00): This note does not contain a useful information for OpenStreetMap.
opened by  (2021-11-06 19:07:55+00:00): Dylan22hewitt"To crack WPA key, firstly we will capture the handshake. Using the airodump-ng, we will capture the handshake, in the same way, that we used it with WEP-encryption networks. Use the following command to capture all the network around us:

Capturing the handshake 

Now we will run airodump-ng against the javaTpoint network with a --bssid as 74:DA:DA:DB:F7:67. We will include the --channel, number 11, then we add --write to store all of the packets that we capture into a file which is wpa_handshake, and then we include the wireless card in monitor mode which is wlan0. The command is as follows:

Capturing the handshake

Once we launch this command, we will have our WPA encrypted network, and we will have the clients connected to the network.

Capturing the handshake 

We can capture the handshake in two ways. First, we can just sit down and wait for a device to connect to the network. Once a device is connected then we can capture the handshake. Second, we can use deauthentication attack which we learned in the previous section, in Pre-connection attacks section.

In a deauthentication attack, we can disconnect any device form a network that is within our Wi-Fi range. If we apply this attack for a very short period of time, we can disconnect a device form the network for a second, the device will try to connect to the network automatically, and even the person using the device will not notice that the device is disconnected or reconnected. Then we will be able to capture the handshake packets. The handshake gets sent every time a device connects to a target network.

Now using the aireplay-ng, we're just going to run a basic authentication attack. We use aireplay-ng --deauth, the name of the attack, and 4 authentication packets to the AP, and disconnect the device from it. Then we're going to put -a, to specify the MAC address of the target AP, and -c, to specify the client MAC address that we want to disconnect. Then we're going to put the name of the W
closed by mavl (2021-11-07 03:36:33+00:00): This note does not contain a useful information for OpenStreetMap.
opened by pelleg (2021-11-06 19:08:15+00:00): svingbaner ud på Øster alle

via StreetComplete 37.0
opened by  (2021-11-06 19:09:04+00:00): Dylan22hewitt"Now we've captured the handshake, all we need to do is create a wordlist to crack the WPA key. A wordlist is just a list of words that aircrack-ng is going to go through, and trying each one against the handshake until it successfully determines the WPA key. If the wordlist is better, the chances of cracking the WPA key will be higher. If the password is not in our wordlist file, we will not be able to determine the WPA key.

To create the wordlist, we're going to use a tool called crunch. The syntax is as follows:

crunch [min] [max] [characters] -o [FileName]
or
crunch [min] [max] [characters] -t [pattern] -o [FileName]

where

crunch is the name of the tool.
[min] specifies the minimum number of characters for the password to be generated.
[max] specifies the maximum number of characters for the password.
characters specify the characters that we want to use in the password. For example, you can put all lowercase characters, all uppercase characters, numbers, and symbols.
-t is optional. It specifies the pattern.
-o option specifies the filename where the passwords are going to be stored.
If we know the part of the password, -t option is very useful. For example: if we're trying to guess the password of someone and we have seen him typing the password, we know that the password starts with a and end with b. Now we can use the pattern option and tell crunch to create passwords that always start with a and end with b and put all possible combinations of the characters that we put in the command.

We're going to use crunch, and then we're going to make a minimum of 6 and maximum of 8. We're going to put 12ab, and store it in test.txt. The crunch is going to create a combination of passwords (minimum of 6 characters and maximum of 8 characters), and it's going to create all possible combination of 12ab. It's going to store all the combination in a file called test.txt. The command will be as follows:

Creating a Wordlist 

The following output will be s
closed by mavl (2021-11-07 03:36:03+00:00): This note does not contain a useful information for OpenStreetMap.
opened by pelleg (2021-11-06 19:09:42+00:00): ombygget kryds til lyskryds, det er tilgængeligt, så der taktil belægning for fodgængere

via StreetComplete 37.0
closed by owiecc (2022-09-06 20:37:24+00:00): fixed in 125874821
opened by  (2021-11-06 19:10:32+00:00): Dylan22hewitt"To crack WPA or WPA2, we need to first capture the handshake from the target AP and second have a wordlist which contains a number of passwords that we are going to try. Now we've captured the handshake, and we have a wordlist ready to use. Now we can use aircrack-ng to crack the key for the target AP. The aircrack-ng will be going through the wordlist file, combine each password with the name of the target AP, and create a Pairwise Master Key(PMK) . This PMK is created by using an algorithm called PBKDF2. It is not like just combining the password and the BSSID. It is encrypted in certain way, and compare the PMK to the handshake. The password that was used is the password for the target AP if the PMK is valid. If the PMK wasn't valid, then aircrack-ng tries the next password.

We will use aircrack-ng, the file name that contains the handshake, wep_handshake-01.cap, -w and the name of the wordlist, text.txt. The command is as follows:

Wordlist cracking

Now click Enter, and aircrack-ng is going to go through the list of the password. It will try all of the passwords, and will combine each password with the name of the target AP to create a PMK, then compare the PMK to the handshake. If the PMK is valid, then the password that was used to create the PMK is the password for the target AP. If the PMK is not valid, then it's just going to try the next password.

In the following screenshot, we can see that the key was found:

Wordlist cracking
closed by mavl (2021-11-07 03:35:33+00:00): This note does not contain a useful information for OpenStreetMap.
opened by  (2021-11-06 19:11:17+00:00): Bankfiliale wurde geschlossen
opened by  (2021-11-06 19:11:42+00:00): Dylan22hewitt-In order to prevent our network from preceding cracking methods explained in the pre-connection attacks and gaining access section, we'll need to access the settings page for our router. Each router has a wep page where we can modify the settings of our router, and it's usually at the IP of the router. First, we're going to get the IP of my computer and to do this we are going to run ifconfig wlan0 command. As seen in the following screenshot, the highlighted part is the IP of the computer:

Securing network from attacks

Now open the browser and navigate to 192.168.1.1. For this example, the IP of the computer is 16. Usually, the IP of the router is the first IP of the subnet. At the moment, it's 192.168.1.0, and we are just going to add the number 1 because that's the first IP in the subnet, and that will take us to the router settings page. At the setting page, it will ask to enter the username and password. To enter username and password, we can login to the router settings.

Sometimes the attacker might be doing deauthentication attack against us. To prevent it, what we can do is connect to the router using an Ethernet cable and modify our security settings and change the encryption, change the password, do all the things that are recommended in order to increase the security. So, the attacker will not be able to attack the network and get the key.

Now, the setting of each router is different. They depend on the model of the router. But usually, the way we change the setting is the same. Most of the cases, the router is always at the first IP of the subnet, we just need to get our IP using the ifconfig command, like we did at the start of this topic. We got the 192.168.1.16 IP, and then we changed the last 16 to 1 to the first IP, and that is IP of our router.

Now, we're going to the WIRELESS NETWORK SETTINGS. As we can see, there are lot of settings that we can change for our network:

Securing network from attacks 

In the above screenshot, we
closed by mavl (2021-11-07 03:34:48+00:00): This note does not contain a useful information for OpenStreetMap.
opened by  (2021-11-06 19:12:35+00:00): Dylan22hewitt"All the attacks that we performed in the pre-connection and gaining access section, we weren't connected to a network. In this section, we are going to be talking about post-connection attack that means the attacks that we can do after connecting to the network. Now, it doesn't matter that the network is a wireless or a wired network and it doesn't matter that the target was using the WEP or WPA key, we can launch all of the attacks that we're going to talk about in this section.

In all the previous attacks, we kept our wireless card in monitor mode, so that we could capture any packet that goes in the air. In this section, we're going to use our wireless card in managed mode because we have access to the network, so we really don't need to capture everything, we only want to capture packets that are directed to us.

In this section, we're going to look at the attacks that can perform when we break through the network. Firstly, we're going to use a tool netdiscover to gather all the important information about the network, and that information will help us to launch attacks. It is used to explore all the clients that are connected to a system. After this, we will learn a tool called Zenmap. This tool has a better interface and is more powerful than netdiscover. This tool is used to gather detailed information about all of the clients connected to the same network.
closed by mavl (2021-11-07 03:34:37+00:00): This note does not contain a useful information for OpenStreetMap.
opened by  (2021-11-06 19:13:05+00:00): onosm.org submitted note from a business:
name: طیف پرتو
phone: 09144201567
website: http://teifparto.ir
twitter: @thejacoub
facebook: -
email: iranprg.ir@gmail.com
hours: شبانه‌روزی
category: Costumes
address: ایران تبریز
closed by kartonage (2021-11-07 13:21:47+00:00): onosm.org duplicate note. (same or similiar note for business at the same or similiar position with no further input)
opened by  (2021-11-06 19:13:39+00:00): onosm.org submitted note from a business:
name: طیف پرتو
phone: 09144201567
website: http://teifparto.ir
twitter: @thejacoub
facebook: -
email: iranprg.ir@gmail.com
hours: شبانه‌روزی
category: Costumes
address: ایران تبریز
closed by Sosha1996 (2023-08-05 20:36:08+00:00): this note closed by script for due inactivity. #onosm
opened by Juliane Roell (2021-11-06 19:14:38+00:00): Eck-Kneipe heißt jetzt "Tropical Palace"
closed by Fumasu (2023-04-01 12:54:31+00:00): geändert