Karma + MSF 3 = I’m never using Wireless again!
Last night I went up to Austin for the AHA! Meeting that is held the last Wednesday of every month. There were only three talks, but it was good stuff none the less. HDM Went first and gave a little demo of what he’s been working on lately. Recently he picked up one of the new eeepc’s from new egg for his wireless en devours and has been playing with it. It’s pretty small and light weight so I’m actually considering purchasing one and using it solely for wireless pen testing.
Lately HD has been working with the creator of KARMA the wireless tool. The Creator wanted to integrate it with an exploit framework and MSF came to mind. HD Did a few demo’s of Karma’s integration with MSF. As clients probe for a wireless access point Karma will respond saying I’m here. At that point, MSF will set up a ruby based SMB server, POP3, IMAP, HTTP, HTTPS, all your essential protocols. The client will get an ip address, and once they start trying to browse the web, or goto a share, or open up email MSF and Karma will start handling every request. He said it was still going to be about a month or two before it’s released. Future plans include auto discovery of what Client side vulns apply to a client, as well as the automatic exploitation of discovered client sides. All in all that was a pretty cool demo.
2 Comments »
RSS feed for comments on this post. TrackBack URI
snap!
Oh my……….
(seriously nice theme by the way!)