Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: Hacking Wireless Drivers for Fun and Profit - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Hacking Wireless Drivers for Fun and Profit
An ISC reader pointed out this relatively new exploit vector. At the upcoming BlackHat conference, a duo is going to demonstrate hacking WiFi device drivers to assume control of a target machine.  The combination of device drivers (which sit close to the kernel) and wireless technology makes this vector uniquely possible.  Most devices drivers you couldn't safely attack because devices are attached to the actual hardware, but wireless is meant to work over distance.  The vector is still limited by distance to those close enough to some transmission agent, but with the growing prevalence of free wireless hotspots it is easy to find places where enough laptops congregate to get good results (say a conference or in an airport terminal).  Basically it's a neat little vector of attacks I imagine we'll be seeing more of in the near future.

John Bambenek
bambenek /at/ gmail /dot/ com

262 Posts
ISC Handler
Jul 7th 2006

Sign Up for Free or Log In to start participating in the conversation!