Ethical Hacking · Wireless Networks · WPA/WPA2/WEP

Penetration Testing
WiFi

Through WiFi Penetration Tests, the security of the systems will be evaluated by identifying all security issues that may exist, indicating the most appropriate solution for each of them.

Planning
Definition and identification of the systems to be audited
Audit
Progressive testing until intrusion is achieved
Documentation
Drafting of results obtained
Service

What is a WiFi Penetration Test?

A WiFi penetration test is a controlled security assessment that simulates a real cyberattack on a wireless network to find vulnerabilities before an attacker does.

To this end, the action of an attacker who would want to access the client's systems and information through the wireless communications infrastructure is simulated, using the same tools and methodologies as hackers, but in an "ethical" way. The objective is to evaluate the security level of the information systems and identify the security problems of the analyzed systems.

The client does not provide information about the structure of their networks or the characteristics of their systems: it is the security team performing the audit that obtains this information. In this way, the tests are objective and follow the same steps as a hacker who is attempting to attack the company's systems.

These services require execution on the client's own premises in order to carry out the specific attacks for these technologies. Performing them periodically allows maintaining a high level of security, despite the changes and degradation of security common in information systems.

Internet Security Auditors has been offering Penetration Testing services since 2001, and its extensive experience in executing this service has allowed it to develop a work methodology that has evolved over the years, adapting to the different needs of our clients.

A WiFi Penetration Test consists of the following phases:

Planning
Definition and identification of the systems to be audited.
Auditing
Execution of tests carried out progressively until intrusion is achieved, followed by escalation within the systems.
Documentation
Drafting of all results obtained.
Our services

How we work

The following attacks against WiFi networks will be carried out, performing the following tests at the applicable points.

01Network and systems testing execution
Bypassing MAC filtering protectionMAC address filtering can be bypassed using any of the following tools:
  • SMAC
  • Bwmachak
  • Ifconfig
  • Macchanger
Exploiting WEP-protected networksThe WEP encryption method is exploited using a Wi-Fi card that allows packet injection and the "Aircrack-ng" suite. The following attacks will be carried out:
  • Attack 1: Client authentication
  • Attack 2: Fake authentication
  • Attack 3: Interactive packet replay
  • Attack 4: ARP request replay
  • Attack 5: KoreK chopchop attack (CRC prediction)
Exploiting WPA-protected networksThe intended result is to obtain data such as the Wi-Fi network's WPA key.
Exploiting WPA2-protected networksThe intended result is to obtain data such as the Wi-Fi network's WPA2 key.
Exploiting captive portalsIn this test, various aspects related to such access control are analyzed:
  • At the network level
  • At the application level
02Results
After the execution of the tests, the obtained results are analyzed and the associated documentation is generated.
  • Executive summary of the Audit results.
  • Results obtained in the various tests performed, identifying the security issues found and specifying the conditions under which they were found, so that they can be reproduced (as far as possible) to facilitate their location and resolution.
  • Recommendations to resolve the identified security issues in the most appropriate manner.
  • Classification of the detected security issues according to their risk level.

Scope of service

What this service covers

MAC filtering

Evaluation and evasion of MAC address-based access controls using specialized tools (SMAC, Bwmachak, Macchanger).

WEP encryption

Exploitation of the WEP encryption method using packet injection, fake authentication, interactive packet replay, and chopchop/KoreK attacks with Aircrack-ng.

WPA/WPA2 encryption

Attacks against WPA and WPA2-protected networks to evaluate the robustness of keys and their resistance to dictionary and brute-force attacks.

Captive portals

Analysis of authentication mechanisms and access restrictions in WiFi captive portals, including evasion techniques.

Results and documentation

Executive summary, technical details with reproduction conditions, hazard level classification, and remediation recommendations.

What our clients say

Organizations that trust us

FAQ

Frequently Asked Questions

Is it necessary to be at the client's facilities to perform the tests?

Yes. Unlike other penetration tests, the WiFi Penetration Test requires physical presence at the client's facilities in order to interact directly with the wireless signals and execute attacks specific to these technologies.

Which encryption protocols are being evaluated?

All encryption protocols present in the client's networks are evaluated: WEP, WPA, and WPA2. For each one, the corresponding specific attack techniques are applied, including packet injection, dictionary attacks, and brute force.

Are unauthorized access points detected?

Yes. A fundamental part of the service is the detection of Rogue APs (unauthorized access points) that may be connected to the corporate network without the IT team's knowledge, which poses a significant security risk.

How often should this type of test be performed?

It is recommended to perform these tests periodically to maintain a high level of security, especially in the event of changes to the wireless infrastructure, coverage expansions, or after the detection of unauthorized devices.

Could the tests affect the company's WiFi service?

The tests are conducted in a controlled and progressive manner, coordinating execution windows and rules of engagement with the client in advance to minimize any impact on the organization's wireless communications.

Contact

Do you need to evaluate the security of your WiFi network?

Tell us about your situation and our team will get in touch with you to provide guidance or schedule a technical call.

Offices
Barcelona, Madrid, Bogotá
R
Ricardo Andrés Cárdenas
2 months ago

Working with Internet Security Auditors has been a highly satisfactory experience. Their guidance throughout the migration to ISO/IEC 27001:2022 and the PCI DSS certification process has been fundamental to strengthening our ISMS.

A
Andrés Mejía
3 months ago

Your team combines solid technical expertise with a strong willingness to work collaboratively, which has strengthened our security posture and regulatory compliance.

V
Victoria Villarreal Palazón
4 months ago

You have been our indispensable partner for the implementation of GDPR requirements. I would highlight your availability to resolve questions and your ability to develop a legal framework with concrete and understandable actions.

M
Miguel Acosta
5 months ago

The entire PCI DSS Attestation of Compliance process was extremely fast, efficient, and professional. We undoubtedly recommend your services to any company in need of cybersecurity solutions.

S
Sergio Sainz de la Maza
6 months ago

We have been working with Internet Security Auditors for over 10 years due to their experience, commitment, and accessibility. I recommend them without hesitation.

Request information

We will contact you as soon as possible.
Global Presence

Our offices

Barcelona

C. Santander, 101. Building A-2
E-08030 Barcelona (Spain)

+34 93 305 13 18
Madrid

Arequipa St., 1
28043 Madrid (Spain)

+34 91 763 40 47
Bogotá

Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)

+57 601 638 68 88
25
years of experience in cybersecurity
Contact us