Wireless security tools

Wireless Intrusion Prevention Systems (WIPS)

• Also known as Wireless IPS
• Network device
• 📝 Intrusion detection by monitoring the radio spectrum for the presence of unauthorized access points (e.g. evil twins)
• Intrusion prevention by taking steps to mitigate the threat (e.g. deattaching it).
• E.g. • Cisco Adaptive Wireless IPS • WatchGuard WIPS

Wireless Intrusion Detection Systems (WIDS)

• Also known as Wireless IDS
• Monitors radio spectrum used by wireless LANs and alerts whenever a rogue access point is detected.
• Alerts a systems administrator whenever a rogue access point is detected

Wi-Fi security auditing tools

• AirMagnet® WiFi Analyzer PRO
  • Real-time analysis of 802.11a/b/g/n/ac wireless networks
• RFProtect Wireless Intrusion Protection
  • Prevents denial-of-service and man-in-the-middle attacks and mitigates over-the-air security threats.
• FruityWiFi
  • Open source tool to audit wireless networks
  • Allows the user to deploy advanced attacks by directly using the web interface or by sending messages to it.
• Fern Wifi Cracker
  • Security auditing and attack software program
  • Can run attacks such as cracking WEP/WPA/WPS keys
• OSWA-Assistant
  • Organizational System Wirelss Auditor

Wi-Fi predictive planning tools

• Allows to plan and design Wi-Fi 6 networks
• E.g.
  • AirMagnet® Planner
    • Plan networks, estimate budgets, optimize, plan mitigation strategies
  • Cisco Prime Infrastructure
    • Solution for provisioning, monitoring, optimizing, and troubleshooting both wired and wireless devices
  • Ekahau Pro
    • Tool for designing, analyzing, optimizing, and troubleshooting Wi-Fi networks.
  • TamoGraph Site Survey
    • Wireless site survey software tool for collecting, visualizing, and analyzing 802.11 a/b/g/n/ac/ax Wi-Fi data.
  • NetSpot
    • Wi-Fi analysis, and troubleshooting on Mac OS X and Windows.
    • Visualize, manage, troubleshoot, audit, plan, and deploy your wireless networks.

Wi-Fi vulnerability scanning tools

• Zenmap
  • Official Nmap GUI.
• Nessus
  • Read more on vulnerability analysis
• Network Security Toolkit
  • Bootable Fedora with network security tools
• SecPoint® Penetrator™ Vulnerability Scanner & Assessment
  • Comes with WiFi pen-testing tools
• SILICA
  • Automated, WiFi specific, vulnerability assessment and penetration tool.
• WebSploit
  • MITM framework with WiFi attacks
• Airbase-ng
  • Multi-purpose tool aimed at attacking clients as opposed to the Access Point (AP) itself

Wi-Fi security tools for mobile

• Wifi Protector
  • Android WiFi firewall
• WiFiGuard
  • iOS/Android app to scan and detect devices on WiFi network
• Wifi Inspector
  • Android app to scan and detect devices on WiFi network
• ARP Guard
  • Android app for protection against network attacks including ARP posioning.