Wireless IDS [Intrusion Detection System] - Tutorial / Explaination

※ 주의사항아래 공격 코드는  허가 받지 않은 공간에서는 테스트를 절대 금지합니다.

악의 적인 목적으로 이용할 시 발생할 수 있는 법적 책임은 자신한테 있습니다. 이는 해당 글을 열람할 때 동의하였다는 것을 의미합니다.. 외부에 공개시 법적 조치가 가해질 수 있습니다

For sharing with Pentesters, Wireless trainers and those who likes Wireless hacking, i've written a Python script (Linux) known as Wireless Intrusion Detection System (WIDS) which will capture and analyse your surrounding wireless traffic for suspicious wireless network activities (wireless hacking) such as WEP/WPA/WPS/Evil Twins/Rogue AP and many more. Listed are the newly added features.
- Display similar Access Point's name (SSID) which could have the possibility of WiFi 'Evil Twins'.
- Display of probing SSID by wireless devices
- Detection of Korek Chopchop packets sent by Aircrack-NG (WEP attacks)
- Detection of Fragmentation PRGA packets sent by Aircrack-NG (WEP attacks)
- Detection of possible WPA Downgrade attack by MDK3
- Detection of possible Michael Shutdown exploitation (TKIP) by MDK3
- Detection of Beacon flooding by MDK3
- Detection of possible Authentication DoS by MDK3
- Detection of possible association flooding
- Detection of WPA Migration Attack by Aircrack-NG (WPA Attack)
- Allow logging of events to file.
- Allow disabling of displaying of probing devices
- Wireless devices / Access point's manufacturer Identification basing on the MAC OUI database.

For those who have WIDS installed on your system, simply use 'wids.py --update'

Tutorial and screenshots - http://syworks.blogspot.com/2014/01/wireless-ids-intrusion-detection-system.html
Download - https://github.com/SYWorks/wireless-ids