Note: If you didn't manage to break through the password, it's not worth the precious audit time to brute force it - simply ask for the password and move on. If it's a WPA network, you can work on cracking the password after hours, if only to demonstrate the amount of time their current password would "protect" them for against a dedicated attacker. OUTPUTS Un-authorized access to the Wireless access point (WAP) List of unused ethernet jacks with network connectivity. OPERATIONAL SECURITY Note: This section is one of the few sections where the SAFETAG audit does go through attack scenarios, from attempting to "break in" to the wireless network to testing exposed ethernet jacks for connectivity. The reasons for this are threefold. First, access to an organization's internal network tends to reveal sensitive data and "shadow" infrastructures (such as dropbox usage) that lead to many recommendations to improve access control and discussions of the value of defense in depth. Second, the specific act of breaking the wifi password allows for a discussion on password security without attacking any specific user's password. Finally, with wireless networks treated as equivalent to wired networks in many offices, reminding the organization that wireless networks extend beyond the physical walls of the office is useful in discussing password rotation and guest network policies. Once you have access to the network, you need to first document how you managed that and share it with the hosts. This is a great moment to discuss passwords in many cases. Confirm that all devices you are accessing/scanning belong to the organization. Clarify timing and seek permission with staff - some activities can tax the network or cause disruptions. PREPARATION Baseline Skills Knowledge of wireless networking and the aircrack suite of tools RESOURCES Wireless Access Guides & Resources Documentation: “Aircrack-ng” (Aircrack-ng Wiki) Documentation: “Airodump-ng” (Aircrack-ng Wiki) Documentation: “Aireplay-ng” (Aircrack-ng Wiki) Tutorial: “Bypassing MAC Filters on WiFi Networks” (techorganic.com) Page 45 of 240