Wireless Auditing Laptop: HOWTO
NOTE:
Fedora Core 6 build HOWTO
is also available.
NOTE:
Fedora Core 5 build HOWTO
is also available.
Q. Why create your own
Linux Wireless Audit build?
A. We find it
more flexible to have our own Fedora Core/RedHat based
Wireless Auditing build; one that we can maintain with the latest tools and
utilities. It also great fun setting everything up and configuring it the
way we want it.
For those of you that don't have the time or the inclination to
create your own build there is always the superb (Slackware based) Live Linux
distribution 'Backtrack' (www.remote-exploit.org) which runs direct from CD or can be installed to
the local
hard drive.
Fedora
Core 4 - Installation Guide
Installing Orinoco Cards (orinoco drivers)
Installing Prism Cards (hostap drivers)
Installing Atheros Cards
(mad-wifi drivers)
Enabling
cards at boot time
* Only install the drivers for the cards you own. If
you own all 3 cards, install all 3 drivers!
Choose appropriate
language and keyboard settings. Choose a Custom
Installation. Setup your partitions
using either the Automatic or Manual method. Configure your network
settings as per your ISP (DHCP or static) required for later. Enable the firewall.
Disable SELinux (Not
ideal, but I have known this to cause problems further down the line). Select your
time zone. Choose suitably strong
root password. Enable the following
packages (disabling all others) * items are optional but can be useful for
other tasks Desktops:
Applications:
-
Graphical Internet
-
Office/Productivity
*
-
Sound and Video
-
Graphics *
Servers:
Development:
System:
-
Administration Tools
-
System Tools
-
Printing Support *
Depending on the optional packages you install hard disk usage is between
2 GBs and 2.4 GBs.
Select 'Next' to
initiate the installation, after the installation
is complete simply:
-
Accept the license
agreement
-
Set you local date
and time
-
Configure your
display. This can be a problem area on certain laptop, please consult
google : )
-
It is advisable to
create a user account, rather than running everything as root.
-
Choose default for
next few options and hopefully a login window awaits.
Prior to the next
set of steps
you will need to configure your internet settings (e.g. IP, netmask and default
gateway).
-
From a terminal window
enter (assuming your network settings are working and you have Internet
connectivity):
-
yum update
(this takes time!)
-
To begin downloading
enter 'y' at the 'Is this ok [y/N]:' prompt (this takes time!)
-
To install the
packages enter 'y' at the 'Is this ok [y/N]:' prompt (this takes time!)
-
I would also recommend
disabling the following unnecessary services that start on boot:
-
sendmail
-
cups
-
cups-config-daemon
-
bluetooth
-
portmap
-
nfslock
-
isdn
-
autofs
-
netfs
-
rpcgssd
-
rpcidmapd
-
This will not only
reduce your boot time, but more importantly reduce your footprint from
anyone wishing to attack your system!
-
Do this by either
completing a chkconfig --level 35
[service] off or by using the GUI tool (system-config-services)
-
Ensure you reboot
after the update process, before installing card drivers!
Boot the laptop with
the Orinoco card inserted mkdir /tools/wifi
Browse to http://www.tzi.de/~plasmahh/orinoco.html and download
orinoco-0.13e-SN-10.tar.bz2 to /tools/wifi
The version of
orinoco-0.13e-SN-[version] may vary depending on the version of the kernel
installed with yum update. Choose the appropriate version from:
www.tzi.de/~plasmahh/orinoco.html
cd /tools/wifi bunzip2
orinoco-0.13e-SN-10.tar.bz2 tar xvf
orinoco-0.13e-SN-10.tar cd orinoco-0.13e-SN-10 make (if you receive
an error at this stage ensure your orinoco card is inserted or reboot and try
again). make install cp *.ko
/lib/modules/2.6.[version]_FC4smp/kernel/drivers/net/wireless (overwrite when
prompted)
Eject and reinsert the
Orinoco card
iwconfig should now confirm the card is installed (eth1)
This install should work for Prism 2, 2.5 and 3 cards.
Boot the laptop with the Prism card inserted
Browse to http://hostap.epitest.fi/releases and download the latest
hostap-driver-[version].tar.gz to /root (tested with hostap-driver-0.4.5)
cd /root
tar zxvf hostap-driver-[version].tar.gz
cd hostap-driver-[version]
make
make install
eject and reinsert the Prism card
iwconfig should now confirm the card is installed (wlan0)
Boot the laptop with
the Atheros card installed yum install
sharutils enter y when
prompted 'Is this ok [y/N]: cd /root
cvs -d:pserver:anonymous@cvs.sourceforge.net:/cvsroot/madwifi
login press return when
prompted for password
cvs -z3 -d:pserver:anonymous@cvs.sourceforge.net:/cvsroot/madwifi
co madwifi cd madwifi make make install eject and reinsert the
Atheros card iwconfig should
now confirm the card is installed (ath0)
This section is totally optional and will display errors for any cards not
inserted when booting the system. So you may just leave the build as it
is and bring the cards up manually after booting.
You will need to have entries in /etc/sysconfig/networking/devices and
/etc/sysconfig/network-scripts.
For example I have entries for:
-
ifcfg-eth0 (my on board NIC card)
-
ifcfg-eth1 (my Orinoco card)
-
ifcfg-wlan0 (my Prism card)
-
ifcfg-ath0 (my Atheros card)
These files are simple text scripts and can be created by copying existing
entries:
For example:
cp /etc/sysconfig/networking/devices/ifcfg-eth0
/etc/sysconfig/networking/devices/ifcfg-wlan0
and
cp /etc/sysconfig/network-scripts/ifcfg-eth0
/etc/sysconfig/network-scripts/ifcfg-wlan0
However be sure to edit the newly created files and change the following
lines:
Device=eth0 to Device=wlan0 (eth1 for Orinoco and ath0 for
atheros).
HWADDR=[MAC ADDRESS] to the new MAC address or hash this entry.
IPADDR=[IP Address] to this cards new IP address
Ensure ONBOOT=yes is present
|