Today's the 4th of July so I'm throwing out a quick post since it's been a few days, but I hope all my readers will be happy with another informational piece about securing your own network since, after all, that's what netsec is about!
Below is a simple guide to getting the most security out of your network to protect your information and the users of your network's information.
Setting up your router encryption:
Below is a simple guide to getting the most security out of your network to protect your information and the users of your network's information.
Setting up your router encryption:
If you've read my WEP/WPA2 cracking guide, then you understand how fragile WEP encryption is. In my tutorial I also explained how to crack WPA1/2 passwords, but explained that the passkey must be in the dictionary that you specified whilst entering the "aircrack" command.Safe Internet usage:
When you're selecting which encryption to use, don't even consider WEP. It can be broken in 30 seconds on a half-decent computer. I've successfully broken WEP in under two minutes sitting in a bathroom on a small dell laptop (the guys password was his name and birth-year; there's no difference between ASCII WEP and Hex WEP).
As for what TO use, choose either WPA or WPA2. WPA2 has some slight upgrades from it's predecessor WPA, but there is no noticeable difference whilst cracking WPA2 versus WPA.
When setting up your network password there are some obvious things that you don't want to set it as, such as "password," "admin," "12345," "qwerty," or anything so simple a 10 word passkey list could find.
Your best bet is setting your password with a length AT LEAST 8. Don't just use letters and a number after. Switch it up with symbols too. For instance, an almost unbreakable 8-length password would be "Z9t*F3&w" since it's a completely random selection of letters, numbers, and symbols and definitely would not exist in any normal dictionary or common password list.
If you get into the teens of length, your password becomes exponentially more secure.
If you have a password with a length of 13, assuming we only use numbers 0-9, all the symbols on the top row of our keyboard "`~!@#$%^&*)(_+-=" and a-z and A-Z, if my math is correct that is 78 different combinations per spot, which means that the different possibilities would be 13^78 or 7.71936328 × 10^86 which would take much longer than anyone's lifetime to crack.
These are some simple tips to making your network unbreakable by hackers outside your network, but what about if a hacker is already inside your network?
If you have any experience with Ettercap then you know how easy it is to view a person's traffic and steal valuable information such as passwords and logins. So to counteract this, we as Internet and network users need to use smart surfing and watch what websites we go to as well as be aware of the dangers out there like certain pop-ups installing viruses and malware into our computers.
I'm sure a lot of you have seen certain pop-ups that say something like "your computer is infected, run a free test now!"
These images require a user to click "yes" or even "no" or the exit button in the top right or left (depicted with an X), then once this action has occurred, malicious software is installed into your computer and a fake virus scan runs showing that you have certain viruses, where the ACTUAL virus is the software itself!
To defend against these "phishing" attacks (the word phishing gets its name from fishing where a person throws out a hook enough times, which are the scams, and someone will bite) is to know what's fake and what's not. Know your anti-virus and don't click on popups while browsing the Internet. If you're using Firefox, install Adblock and Noscript, but remember to allow sites you frequent or they may not work correctly. Chrome and Opera also support their own versions of these, so check out the "addon" page for each respective browser.
Being aware of these phishing and other phishing attacks like email spam are important ways to having top notch security.
We must also be aware of unauthorized users in our networks, whether it be in an open network as a guest, or a malicious hacker in our (hopefully) protected network.
Ways to defend against attacks from INSIDE our network include using "HTTPS" sites to log in with sensitive information, instead of the classic "HTTP" type of authentication.
HTTP means hypertext transfer protocol, and the S on the end of HTTPS means "secure."
Even if all your sensitive information is processed through HTTPS, there'sways for hackers to disable the secure connection and steal your information regardless. Using this method of logging in adds another layer of security to our everyday Internet usage, but can still be disabled and worked around as you can see in my post involving Ettercap, SSLStrip, and ARP spoofing to steal secure passwords.
How you can attempt to defend against attacks like the one I explained on my password sniffing post is to make sure you're not being redirected away from HTTPS sites to their unsecure HTTP counterparts. If this is happening I would suggest reviewing the nodes on your network because someone is running a redirection on you with SSLStrip and trying to steal your information!
Another way to detect this attack is to regularly check your network speeds. A side effect of a ARP spoofing redirection attack is that it bogs down your network, even DoSing (denial of service attacking) the network if the computer that is redirecting traffic is slow or cant handle all the packets being passed through. I've noticed another side effect of these attacks that can be watched for and that is, when attempting to log onto HTTPS sites, it redirects you (which isnt very easy to notice if you're a common user), but then doesn't allow you to log in (it just reloads the login page). This is because the forwarding breaks the login page and doesn't allow you to pass your credentials in.
Simple advice yet useful for the common man. I will actually forward it to my dad :)
ReplyDeleteCan't wait to read more!
ReplyDelete@GMSoccerPicks, thanks man! I'm updating it in a few minutes for safer Internet usage, I'm sure that'll help him too!
ReplyDelete@Anon, thanks!
Looks like some great information, can't wait to see what's coming next
ReplyDeleteJust did this. I now feel secure...........
ReplyDeleteI got a laugh out of this. I'm posting from anothers wifi network :).
ReplyDeleteI think I should redirect them to this page..
Finally, someone is thinking of the children.
ReplyDeletevery nice post dude, laughing my ass off
ReplyDeleteExcellent blog dude, mine is related you should follow me as well: http://cryptozen.blogspot.com
ReplyDelete@Mike, already followin' man, looks like good stuff!
ReplyDeleteeveryone really should do this
ReplyDeletei need to do this
ReplyDeleteThanks man, always nice to feel secure in your home.
ReplyDeleteThanks so much for the tips. Everything's been flying around here since we started bathroom remodeling nyc at home. Now I think I can fix our network easily.
ReplyDeleteVery good summary, it's very helpful for someone like myself who is not familiar with network security :)
ReplyDeleteIf you're setting up a network in your home or home-office, you will find everything you need to get you started here. 2.4ghz vs 5ghz wifi
ReplyDelete2016-3-23 leilei
ReplyDeletemichael kors handbags
converse shoes
jimmy choo shoes
cheap oakley sunglasses
rolex replica watches
michael kors outlet
valentino store
fitflops clearance
ralph lauren outlet
longchamp
polo ralph lauren
christian louboutin shoes
ray ban sunglasses
coach outlet store online
armani jeans
stephen curry shoes
prada uk
ralph lauren outlet
christian louboutin uk
coach factory outlet
michael kors outlet
coach factory outlet
coach outlet online
gucci borse
cheap jordans
canada goose sale
louboutin
coach outlet online
ecco shoes
marc jacobs handbags
coach factory outlet
ralph lauren
ray ban sunglasses
coach outlet online
abercrombie & fitch
nike running shoes
michael kors outlet
hollister uk
babyliss flat iron
cheap jordan shoes
soccer jerseys
ReplyDeletetoms outlet
lululemon outlet
michael kors handbags clearance
ray ban sunglasses
air max 90
cartier outlet store
swarovski outlet
louis vuitton outlet store
oakley sunglasses
rolex watches
lebron shoes
michael kors factory outlet
oakley sunglasses
oakley sunglasses
michael kors outlet
hollister clothing store
mulberry outlet
cartier watches for sale
adidas outlet store
ralph lauren polo
rolex watches
true religion outlet
rolex watches for sale
longchamp handbags
mulberry handbags sale
timberland shoes
cazal outlet
omega watches
louis vuitton outlet
longchamp pas cher
cheap oakley sunglasses
michael kors outlet online
michael kors handbags
mulberry sale
chanyuan0523
chenlina20160625
ReplyDeletehollister clothing
polo outlet
kate spade handbags
michael kors purses
michael kors handbags
louis vuitton
ralph lauren outlet
nike huarache
michael kors outlet
cheap oakley sunglasses
fitflop sandals
jordan 8
nike free run
insanity workout
replica watches
oakley sunglasses
polo ralph lauren
cheap ray ban sunglasses
air max 90
ralph lauren polo
designer handbags
kobe 11
kate spade outlet
fitflops sale clearance
kobe bryant shoes
louis vuitton outlet stores
rolex submariner
oakley outlet
louis vuitton outlet stores
louis vuitton handbags
adidas superstars
rolex watches
louis vuitton outlet
coach factory outlet
michael kors handbags
longchamp bags
michael kors outlet
running shoes
coach factory outlet
ghd hair straighteners
as
ray ban sunglasses
ReplyDeleterolex submariner
designer handbags
rolex watches
tods shoes
toms shoes
giuseppe zanotti sneakers
longchamp outlet
michael kors outlet
jordan shoes
louis vuitton outlet
cheap jordan shoes
coach outlet
louis vuitton outlet
ghd flat iron
gucci outlet
coach factory outlet
christian louboutin outlet
gucci handbags
louis vuitton handbags
louis vuitton outlet
nike outlet store
jordan retro
nike air jordan
louis vuitton outlet
replica watches
louis vuitton outlet
kate spade
oakley sunglasses
jordan 11s
polo ralph lauren outlet
nike air max
coach outlet
cheap oakley sunglasses
michael kors handbags
giuseppe zanotti
michael kors handbags
cheap ray ban sunglasses
supra shoes
adidas originals shoes
20167.28wengdongdong
ferragamo shoes
ReplyDeletenike air huarache
longchamp pliage
burberry outlet
omega watches
true religion jeans sale
soccer jerseys
true religion canada
adidas wings
toms shoes
michael kors outlet
hermes outlet store
lebron shoes
michael kors outlet
coach outlet online
ralph lauren outlet
coach outlet online
celine outlet online
soccer jerseys
true religion uk
louis vuitton neverfull
michael kors clearance
hollister clothing
burberry sunglasses on sale
michael kors handbags
michael kors uk
nike soccer shoes
uggs outlet
gucci outlet online
ugg boots
ugg boots
versace sunglasses
uggs outlet
louis vuitton pas cher
ralph lauren polo
20160729caihuali
ralph lauren outlet
ReplyDeletebirkenstocks
omega watches
mcm outlet
true religion outlet
oakley vault sunglasses
true religion jeans
ray ban sunglasses discount
michael kors outlet clearance
valentino shoes on sale
uggs for kids
air max 2016
ugg pas cher
louis vuitton pas cher
michael kors handbags
levis jeans
armani exchange
ugg outlet
birkenstock sandals
lebron james sneakers
coach outlet
hollister clothing
michael kors outlet clearance
birkenstock sandals
coach factory outlet
nike roshe run women
air jordans
cheap nfl jerseys
canada goose outlet
ugg boots
christian louboutin outlet
bottega veneta outlet
cheap uggs
michael kors purses
true religion outlet
birkenstocks
christian louboutin outlet
ugg boots
201698yuanyuan
uggs outlet
ReplyDeletefitflops
uggs outlet
ugg outlet
louis vuitton outlet
adidas yeezy boost 350
true religion
tiffany jewelry
nike roshe run flyknit
ugg outlet
2016.11.17chenlixiang
adidas yeezy boost 350
ReplyDeletelouis vuitton handbags
air max 90
calvin klein outlet
tory burch sale
coach outlet
oakley outlet
jordan shoes
nike blazer sneakers
christian louboutin sale
2017.2.20chenlixiang
nfl jerseys wholesale
ReplyDeleteralph lauren sale clearance
ralph lauren outlet
denver broncos jerseys
yeezy boost
red bottoms shoes
cheap jordans
louis vuitton outlet
christian louboutin shoes
coach outlet online
20170313caiyan
longchamp handbags
ReplyDeletemichael kors
polo ralph lauren outlet
coach factory outlet
coach outlet store
coach outlet online
ray ban glasses
michael kors
michael kors outlet store
coach outlet online
170522yueqin
Pabrik besi unp baja
ReplyDeletePabrik besi unp baja
ironsteelcenter.com
Pabrik besi unp baja
20171027 junda
ReplyDeletepandora charms
michael kors bags
ugg boots clearance
cheap uggs
coach factory outlet
hermes birkin bag
mulberry outlet
prada handbags
canada goose jackets
canada goose jackets
Interesting and nice information, thanks for sharing :)
ReplyDeletePengangkatan Kista Bartholin Tanpa Operasi
Obat Penurun Berat Badan Alami
Pengobatan Keloid Secara Efektif
Pengobatan Luka Gangren Sampai Sembuh
Cara Ampuh Atasi Bopeng
Cara Menyembuhkan Pembengkakan Prostat
kyrie shoes
ReplyDeletetom ford sunglasses
adidas ultra boost uncaged
jordan shoes
ferragamo belt
yeezy boost 350
ferragamo belts
nike air huarache
lebron soldier 11
nike zoom running shoe
I read this article. I think You put a lot of effort to create this article. I appreciate your work.
ReplyDeleteDissertation Writing Services
lacoste polo
ReplyDeleteyeezy 500
birkin bag
lebron 13
adidas pure boost
kd 10
off white x jordan 1
yeezy boost 350
adidas yeezy
michael kors outlet online
His article is very helpful at all thanks
ReplyDeleteCara Mengobati bisul
Cara Mengobati Benjolan Pada Mata Dengan Obat Herbal Paling Ampuh
Obat Biang Keringat Pada Bayi Anak-anak dan dewasa
Obat Asam Urat Paling Ampuh
Cara Menghilangkan Keputihan Secara Alami dan Permanen
Cara Mengobati Hematuria
ReplyDeleteاننا في شركة الرائد للخدمات المنزلية نقدم خدمات ممتازة في الدمام بافضل الاسعار بجودة عالية لمزيد من الخدمات تفضل بزيارة
شركة مكافحة حشرات بالدمام افضل شركة مكافحة حشرات بالدمام
شركة تنظيف سجاد بالدمام شركة تنظيف موكيت بالدمام
شركة تسليك مجاري بالدمام افضل شركة تسليك مجارى بالدمام
شركة مكافحة الفئران بالدمام شركة مكافحة فئران بالدمام
Great Article
ReplyDeleteCyber Security Projects for CSE Students
JavaScript Training in Chennai
Project Centers in Chennai
JavaScript Training in Chennai