wireless-ids

Wireless IDS 入侵检测系统 Wireless IDS 是一款用 Python 编写的开源工具，可在 Linux 环境下运行。该工具会嗅探您周围的无线流量，以检测可疑活动，例如 WEP/WPA/WPS 攻击数据包。它可以执行以下操作： 检测发送到客户端/接入点的大量取消认证帧，数量异常可能表明存在针对握手过程的 WPA 攻击。 使用广播 MAC 地址持续向接入点发送数据，可能表明存在 WEP 攻击。 无线客户端与接入点之间使用 EAP 认证进行异常频繁的通信，可能表明存在 Reaver / WPSCrack 发起的 WPS 暴力破解攻击。...

EUVD-2006-5393

Malware in sbrugna...

wifi-arsenal

This repository is an offensive tool for WiFi exploitation. It is a collection of tools and scripts for various WiFi-related attacks, including denial of service, encryption attacks, WEP/WPA/WPA2 attacks, WPS attacks, and others. The repository is maintained by 0x90/wifi-arsenal. The repository...

AlienVault Releases Intrusion Detection Systems (IDS) Best Practices

Network security practitioners rely heavily on intrusion detection systems IDS to identify malicious activity on their networks by examining network traffic in real time. IDS are available in Network NIDS and Host HIDS forms, as well as for Wireless WIDS. Host IDS is installed via an agent on the...

[Wireless IDS] Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets

Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to client / access point which unreasonable...

CVE-2006-5408

Multiple cross-site scripting XSS vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to inject arbitrary HTML or web script via unspecified vectors...

CVE-2006-5409

Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5408

Multiple cross-site scripting XSS vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to inject arbitrary HTML or web script via unspecified vectors...