802.11 PIP: A Standard-Compliant Exploit of Layer 1

Searching_ _ _ · Dec 25, 2011

802.11 Packets in Packets

A Standard-Compliant Exploit of Layer 1

New to 2011, Packet-in-Packet exploits allow for injection of raw radio frames into remote wireless networks. In these exploits, an attacker crafts a string that when transmitted over the air creates the symbols of a complete and valid radio packet. When radio interference damages the beginning of the outer packet, the receiver is tricked into seeing only the inner packet, allowing a frame to be remotely injected. The attacker requires no radio, and injection occurs without a software or hardware bug.
...
This lecture presents the first implementation of Packet-in-Packet injection for 802.11B, allowing malicious PHY-Layer frames to be remotely injected. The attack is standards-compliant and compatible with all vendors and drivers.

As a demo, we intend to present a malicious string which can be embedded in any file with lots of slack space, such as an ISO image. When this image is downloaded over HTTP on 802.11B, beacon frames will be injected. For the demo, we will be injecting the SSID stack buffer overflow frames from Uninformed Volume 6.
Click to expand...

802.11 PIP: A Standard-Compliant Exploit of Layer 1 - Chaos Computer Club

Log in or Sign up

802.11 PIP: A Standard-Compliant Exploit of Layer 1

Searching_ _ _ Registered Member

Log in or Sign up

802.11 PIP: A Standard-Compliant Exploit of Layer 1

Searching_ _ _ Registered Member

Useful Searches