Download - Du läcker data
![Page 1: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/1.jpg)
Du läcker data!Något om Wifi och säkerhet
![Page 2: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/2.jpg)
Geolokalisering
![Page 3: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/3.jpg)
![Page 4: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/4.jpg)
Geolokalisering
Hur kan “location accuracy” förbättras med Wifi påslaget?
![Page 5: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/5.jpg)
GPS funkar inte inomhus...
Vi är inomhus 90% av tiden.
![Page 6: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/6.jpg)
iPhone lagrar data• Information om Wifi-accesspunkten (MAC, kanal, hidden, RSSI)
• Information om telefonen (latitud, longitud, altitud, horisontell och vertikal noggrannhet, hastighet och kurs)
• Ytterligare information som tidsstämpel, ålder, använd app, och trovärdighet
• Lagras i filen consolidated.db
![Page 7: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/7.jpg)
![Page 8: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/8.jpg)
![Page 9: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/9.jpg)
War driving!
![Page 10: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/10.jpg)
Passiv lyssning på radiotrafik, letandes efter accesspunkter.
Wifi-nät är kartlagda med:
• ESSID
• MAC-adress
• Säkerhets- och autentiseringsprotokoll
• Geografisk position
![Page 11: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/11.jpg)
![Page 12: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/12.jpg)
![Page 13: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/13.jpg)
![Page 14: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/14.jpg)
![Page 15: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/15.jpg)
![Page 16: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/16.jpg)
![Page 17: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/17.jpg)
![Page 18: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/18.jpg)
![Page 19: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/19.jpg)
![Page 20: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/20.jpg)
![Page 21: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/21.jpg)
![Page 22: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/22.jpg)
![Page 23: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/23.jpg)
![Page 24: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/24.jpg)
![Page 25: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/25.jpg)
![Page 26: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/26.jpg)
![Page 28: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/28.jpg)
![Page 29: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/29.jpg)
![Page 30: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/30.jpg)
![Page 31: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/31.jpg)
![Page 32: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/32.jpg)
![Page 33: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/33.jpg)
![Page 34: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/34.jpg)
![Page 35: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/35.jpg)
![Page 36: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/36.jpg)
![Page 37: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/37.jpg)
![Page 38: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/38.jpg)
Något om MAC-adresser
![Page 39: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/39.jpg)
48 bitar
![Page 40: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/40.jpg)
OUI-databasen
![Page 41: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/41.jpg)
Unika OUI
• Antalet möjliga unika OUI: 16777216
• Antalet delegerade OUI: < 20000
• Därmed är antalet möjliga MAC-adresser ~ 2^38 istället för 2^48
![Page 42: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/42.jpg)
MAC-48 används av
• Ethernet
• 802.11-enheter
• Bluetooth
• FDDI
• mm. mm.
![Page 43: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/43.jpg)
EUI-64
• IEEE tycker att MAC-48 är obsolet
• Långsam transition till EUI-64
• Används i Firewire, ZigBee, IPv6 (MAC-48 med prefix FF:FE)
![Page 44: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/44.jpg)
Vad kan alla se om ditt nät?
![Page 45: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/45.jpg)
Kismet
• Lyssnar på “layer 2”
• Kan sniffa 802.11[a|b|g|n]
• Även DECT...
![Page 46: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/46.jpg)
![Page 47: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/47.jpg)
![Page 48: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/48.jpg)
![Page 49: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/49.jpg)
![Page 50: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/50.jpg)
![Page 51: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/51.jpg)
airodump-ng
![Page 52: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/52.jpg)
![Page 53: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/53.jpg)
Knäcka krypteringen
![Page 54: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/54.jpg)
![Page 55: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/55.jpg)
![Page 56: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/56.jpg)
![Page 57: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/57.jpg)
![Page 58: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/58.jpg)
![Page 59: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/59.jpg)
![Page 60: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/60.jpg)
![Page 61: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/61.jpg)
![Page 62: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/62.jpg)
![Page 63: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/63.jpg)
![Page 64: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/64.jpg)
Apple iBeacon
![Page 65: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/65.jpg)
![Page 66: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/66.jpg)
Din telefon då?
![Page 67: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/67.jpg)
tshark -n -i wlan0mon subtype probereq
![Page 68: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/68.jpg)
tshark -n -i wlan0mon subtype probereq
![Page 69: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/69.jpg)
Slå upp i Wigle
![Page 70: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/70.jpg)
CreepyDOL
![Page 71: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/71.jpg)
CreepyDOL System
![Page 72: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/72.jpg)
Snoopy
![Page 73: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/73.jpg)
Färdiga kit
![Page 74: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/74.jpg)
Det blir billigare…
![Page 75: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/75.jpg)
NSA har också system
![Page 76: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/76.jpg)
Slå av Wifi och Bluetooth: IOS
![Page 77: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/77.jpg)
Slå av Wifi och Bluetooth: Android
![Page 78: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/78.jpg)
Ta bort nät du inte använder
• IOS/Apple: Svårighetsgrad hög…
• Android: Lätt
![Page 79: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/79.jpg)
Med automatik…
![Page 80: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/80.jpg)
Med automatik…
![Page 81: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/81.jpg)
Med automatik…
![Page 82: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/82.jpg)
MAC-adressrandomisering
• Microsoft och Apple har infört “MAC-adressrandomisering”
• Beacons använder slumpmässiga MAC-adresser
![Page 83: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/83.jpg)
![Page 84: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/84.jpg)
![Page 85: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/85.jpg)
![Page 86: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/86.jpg)
![Page 87: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/87.jpg)
![Page 88: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/88.jpg)
![Page 89: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/89.jpg)
![Page 90: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/90.jpg)
![Page 91: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/91.jpg)
![Page 92: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/92.jpg)
![Page 93: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/93.jpg)
Spårning…
Online vs Offline
Kostnad
Kakor … är ju gott
![Page 94: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/94.jpg)
Framöver / Bluetooth
![Page 95: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/95.jpg)
SDR
![Page 96: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/96.jpg)
Passiv radar
![Page 97: Du läcker data](https://reader031.vdocuments.pub/reader031/viewer/2022030303/587b5a7d1a28ab38258b459d/html5/thumbnails/97.jpg)
TACK!