Review of Nokia N800 for Wireless LANs

Bruce asked if I'd write up a review of my experiences with the Nokia N800 - here you go...

Earlier this year Nokia released an updated version of their popular Nokia N770 Internet Tablet. The N800 excels at being a small, light-weight, device capable of WiFi as well as Bluetooth access to the Internet.

I could go on an on about how this little device has changed how we access the Internet in our home. Instead of lugging around laptops, we have a couple of N800s that the kids access for Internet queries, (just what High School did ‘King James’ go to – while watching the playoffs), to googling, to streaming music, conducting mulit-user IM sessions, to just about anything you’d want to use the Internet for – but in a very small package.

The screen resolution is amazing! If the iPhone has this screen, I’ll be in line to buy one. Even though I’m so old now I have to use bi-focals to read the small stuff – I’m comfortable with the N800’s little screen – the resolution makes it possible to fit so much in a little package.

But for the interest of this Blog I’ll move on to the use of the N800 in a wireless analysis mode.

I saw an announcement for a new piece of wireless security gear – called a Silica. This software/hardware bundle puts the intelligent penetration attacks and exploits of Immunity’s Canvas software in a small Nokia. It looked WAY COOL and I *wanted* to have one. But the $3,600 cost felt a bit prohibitive.

I’ve since had a chance to play with a Silica – and was suitably impressed – I still haven’t parted with the $3,600 but here’s a bit of a review of the tool.

This is a customized version of the Canvas tool – shoehorned into this small form-factor Linux device (Nokia N800) It is VERY easy to use. Just turn it on and click the start scan…

It will run through a series of scans of the local wireless networks, then attempt to penetrate using a variety of currently known exploits to find and exploit holes in your wireless LAN. It’s like having a little team of hackers sitting in you hand.

I’ve found it to be easy to run with the Nokia in your pocket. Very unobtrusive! – but in reality it takes up to 20-25 minutes to do a full attack against a single AP. Not like while doing a real penetration test you’ll have an excuse to ‘hang around’ a specific area waiting for the attack to finish. (Though you could easily hide the device and come back to pick it up later – but that $3,600 cost will probably make you think twice about leaving it outside of your view)

The reports it gives are in HTML format – you can just e-mail them to yourself, or copy them off onto the SD cards used by the N800

It does a pretty cool thing when attacking a MAC-Filtered AP – it automatically finds an associated STA and spoofs it MAC address to get associated.

It doesn’t do ANY WEP Cracking or WPA cracking, or anything but the exploits that are in Canvas.

Ok, now for the less expensive, yet still fun stuff using a Nokia N800. As part of our Wireless LAN Security Assessment Toolkit course development. We came across the N800s, fell in love with them, then re-arranged and re-wrote many of our course lab exercises to specifically use the N800s. We added wVoIP, video over IP, as well as catching IM traffic, web browsing, and other conversations sent over wireless to use the N800 as our client of choice when ‘watching’ the open Wireless LANs and re-constructing conversations via packet capture.

Then we thought, “is there anything more we can use the N800s for”?

Since the N800 is just a little Linux computer… we added SSH, Terminal Shell, VNC, FTP, etc. to the system. Then once we got that running, it was a quick couple of steps to get Kismet and Metasploit running!

So just using Open Source software we were able to take the little $400 Nokia N800 and make it ‘like’ a Silica!

Just slip this little ‘bad boy’ in your pocket running kismet and go WarWalking to get all the APs in your area, including finding ‘hidden’ SSIDs. Or, start Metasploit and let ‘r rip – attempting whatever known exploits are available for Metasploit.

(By the way – this is NOT a fast device for Metasploit – but Way Cool to have running)

On the other hand – it makes a great Kismet platform!

We’ve got ours running the classroom with GoogleTalk and Gizmo Project for wVoIP and IM – but you have to have a Wifi access to use it, so this wont’ take the place of your cell phone. (It is possible to pair this device via Bluetooth to a cell phone running G3 speeds – but the easy way is with Wifi)

One more thing that is just *fun* to use the Nokia N800 and Wireless LANs – and I found this out by accident. I was testing in our offices a new access point – so I had the N800 associate to this new AP and started a ‘Hitcast’ session listening to some Internet Radio station. I kind of liked the station and so put the ‘radio’ in my pocket so I could have some tunes with me as I finished up writing up the analysis of this new AP. I checked my watch and realized the mail would have arrived, so I went out to the mailbox – down a long flight of stairs, outside the steel-sided building my office is in, and across the parking lot to the community mailbox to check the mail.

It wasn’t until I was heading back up the stairs and a co-worker commented on my choice of music that I noticed this little wonder continued to stream music the entire way. Thus was born the Audio Site Survey! Just associate, then walk till the music drops… Simple easy and leaves your hands free to work on other things while doing a fairly decent site survey. Cool!

There you go – a quick review of the Nokia N800 and how one might use it with Wireless LANs – if you want to see more about our Wireless LAN Security Assessment Toolkit class, check it out over at www.hotlabs.org/wlsat - as part of Bruce’s Blog you can use the discount code ‘Bruce1071’ to get $1,500 off the class.

Enjoy!

Keith Parsons - Managing Director

Institute for Network Professionals

Editing & Penetration Testing Certification

So right after Sunday School, back to the airport for a series of planes and rental cars getting me to the hotel in Myrtle Beach SC around 3:30am on Monday.

The conference was held at the Myrtle Beach Marriott... nice hotel...

But I got to stay instead at the Fairfield Inn...

The TechnoSecurity conference started on Monday morning - I sat in only one session on Monday, and one session on Tuesday - the rest of the time I was in the hotel room doing testing and editing on the WLSAT course student materials - to make sure the instructions worked on the hardware. Also doing some extra additional labs and adding screen-shots where necessary.

Then on Wed/Thur spent my time 13 hours on Wed sitting in on an ECSA/LPT course - this is high level security assessments and vulnerablity scans... (Ethical Hacking) then another 8 hours on Thur - followed by a 2-hour certification exam. I passed! Yea! So with that one exam (and an FBI character check, passing three other exams, and studying over 1200 pages of text...) I received the Licensed Penetration Tester certification.

I never thought of the title, in the IT industry you hire people to do Penetration Tests all the time, it's the standard way of 'proving' you have strong security and that hackers can't break through your perimeter... but when I mentioned it to Jill on the phone... she started to giggle. I guess it has other conotations...

Karrissa put up a 'joke' sign for me when I came in late Thursday night - the whole family is so proud of my License to do Penetration Testing...

Brent's Graduation - Honeywell

After a quick flight back from Baltimore after the Lacrosse Finals - What a finish!

A day at work, then we had a great day watching Brent's High School Graduation. Karrissa's got the pictures from the Graduation. Then right back on a flight later that afternoon to head back east once again. This time to Ft. Washington PA - about an hour north of Philadelphia.

This was a custom wireless training for the Honeywell folks who install a variety of meters and sensors for the oil refinery and tank farm business. It was great to work with some folks who've been out in the field installing real stuff in hard-core locations. I learned a lot about the hazardous materials handling needs and outdoor wireless equipment.

A quick three-day (Th-Sa) class then back to Orem Saturday night so I could come back and teach Sunday School...

Baltimore - NCAA Lacrosse - Div III and II Championships

After walking nearly 2 miles in 90 degree weather (near 100% humidity) over to the stadium (M&T Bank Stadium where the Baltimore Ravens play) we got to find some nice seats in a bit of shade to watch the first lacrosse game. NCAA Division III - and I've since learned to be in the Division III the student can NOT have any form of scholarship for athlete players. Div II allows for some types of financial aid, but NOT scholarships, and Div I gets to spend the big $$ for student athletes.

Well of course before the start of the game there had to be a singer out there with her own rendition of the Star Spangled Banner. Good voice, country TWANG, and she just couldn't sing the regular notes and had to 'spice it up' - I like the good old-fashion song. I did especially enjoy the words and story behind the song. Being that we were within 2 miles or so of the actual Fort McHenry the song is about. The original poem by Francis Scott Key was initially entitled 'In Defense of Ft. McHenry'. So it had special meaning to me to be able to be here and remember those sacrifices for our country on this special Memorial Day weekend.

We did get to see this original flag that flew over Ft. McHenry
that fateful day back on September 20th, 1814 during the War of 1812
while on a family vacation to Washington DC a few years ago.

Then on to the games - the Div III teams played great Lacrosse, a real joy to watch and see what good teams and individuals can do. Salisbury defeated Cortland State, 15-9 We sat kind of high up in the stands and had a nice view to see how plays and slides moved across the field. Later we went down near the field for a closer look - it was much more like our High School games then.

The second game was a disappointing, boring defensive game nearly 50 shots on goal between both teams and a final score of 6 to 5. (the last score came as an accident when a pass missed it's intended target and sneaked into the goal with 1 second on the clock) Yes - I know that sounds exciting, but even that couldn't make that game better. Le Moyne, edging out Mercyhurst 6-5

Tomorrow will be the Division I title match between Duke and Johns Hopkins - it should be a great match.

I have photos to prove we were there - mine's a bit out of focus, but the sign behind me is in focus. Don't the boys look like they are having fun!!?

Lots of photographers down on the field - but this guy was right up behind me with a 6-shot- per-second camera - I turned around to look at who had the fast camera and this is what I saw...

Baltimore with Brent for NCAA Lacrosse Finals

After getting up at 4:30am to catch a 6:00am flight - I spent the day on planes and airports getting to Baltimore. After checking into the "Lord Baltimore Radisson" and getting a very small room behind the frieght eleveator... I was able to meet up the Brent, Michael Rife, Jake Ferrin and his parents for a nice dinner at the Cheesecake Factory on Baltimore's Inner Harbor. It was very crowded downtown Baltimore last night. The hotel was full of Lacrosse Fans.



Today we'll be heading over to the M&T Stadium where the Raven's play to watch some more Lacrosse (NCAA Division 2 and 3 Championship games) Then Tomorrow is the Division 1 championship game between Duke and Johns Hopkins. Last night the boys bought team logo'd lacrosse shirts and shorts.

It is in the 90s with near 100% humidity... I'm so looking forward to sitting in the sun all day! But the games should be good and I'll enjoy being with Brent and his friends.

Orange County - Class and Jazz

This week's visit was to Orange County - Southern California. I taught for 5 days a set of AirMagnet classes at the Hilton across the street from the John Wayne Airport in Irvine.



Yep - just week of work.

Then since I was flying out on Saturday to Baltimore to meet up with Brent and friends for the NCAA Lacrosse finals... I had an evening free. I went over to Barry & Donna's for dinner... great pork ribs (slathered in my special BBQ sauce - but since they are now 'out' I'm going to have to make another 2007 batch soon)



Then we went to a local Jazz club called 'Steamers' - though it was very hot, very crowded, and had a rude waitress... the Music was great! The lead singer was phenomenal, the supporting instrumentalist inspired and it was a great night out with friends. I think I'm going to have to pick up a CD from Jackie Ryan - I liked her style.



CD Pre-Release for "You and The Night and The Music"
A special evening with the incredible trio that played on the CD: Tamir Hendelman piano, Christoph Luty bass and Jeff Hamilton on drums. Plus special guest, Rickey Woodard on tenor sax.

First WLSAT Class in DC

After a mad rush to finish up the labs, print the student binders, and make all the student kits... we finally held our first new class. Called Wireless LAN Security Assessment Toolkit - WLSAT in Washington DC last week.

We had all four course developers there to teach the specific labs they had written, and so we could use this opportunity as a 'Train the Trainer' to get cross-trained on the items we personally didn't write.

I flew into Baltimore with Jeff and Mark on Sunday. We stopped at IHOP #551 - a terrible choice for a place to eat - the corn tasted of soap, the food was cold, the service atrocious, it was just terrible.

We had 14 students at this first session - all had a great time playing with and learning on their student kits. The Nokia N800 little tablet computers were a hit!

The course flowed much better than I could have anticipated. Yes, we have a bunch of little edits to make, and additional steps to put in different labs, but overall "two thumbs up"!

Not a Road Warrior Week

Ok... I wasn't a road warrior this week. Stayed at home all week working on the course development for our new Wireless LAN Security Assessment Toolkit class. We only have one more week before the first class and we still have LOTS to do.

The class has over 45 hands-on lab exercises and comes with over $13,000 worth of software and hardware. Ryan's been working on inventory and binder cover pages, Karrissa on editing all of our lab exercises, and me ordering up all the stuff for the first couple of classes as well as writing more lab exercises.

I did a new lab exercise on WarDriving... that is driving around with a GPS and a Wireless Card tracking where everyone's Wireless Access Points are located - then putting it on Google Earth... see below.

One more week at home working on this class, then I start a 7-week road trip (home for weekends mostly)

Karrissa & Joe's Institute Graduation

After being on the road for the last two weeks - SoCal with the family, and then Boston for an AirMagnet class all week... I found myself driving up to Logan yesterday to be on hand for Karrissa and Joe's graduation from Institute. We got to play with McKinley as well as have a nice service in the historic Logan Tabernacle.

Then with Joe's parents went to dinner at the 'Iron Gate Grill' - a good time was had by all! Oh yeah, it was also a celebration of Karrissa's Birthday on Friday - Jill enjoyed getting her daughter picture frames and a pair of shoes for presents. Of course she also had to bring along a little something for the grandchild... a pair of little socks with toys in toes.

Then since it was late... and I was still on East Coast time, Ryan gratefully accepted my request to drive home. He's a great driver - I slept till Ogden.

Family Vacation to SoCal

We all love a great vacation!
This week we were fortunate enough to have a family vacation over the kid's spring break to Southern California. Additionally, Janet & Rich and all their kids were down there at the same time with Grandma and Grandpa Parsons. So it was like a bit family reunion - just no time all together for pictures (Sorry Grandma)

Two days in Disneyland, a day at the Long Beach Aquarium and a day at Knott's Berry Farm made for lots of walking, lots of rides, and lots of time spent playing with our grand-daughter McKinley!
It is refreshing to see the boys actually have 'fun' with Alysha. The cousins, and Ben were around most of the time and it seemed like everyone was having a great time.

I'm getting a bit old for some of the level-5 rides - but I did enjoy the Xcellerator (0-80 in 2 seconds) and all the entertainment the parks offered.

I'm now waiting on a 6-hour layover in the SLC airport on my way to teach a set of AirMagnet classes in Boston this week.

Barry's Dinner

"A good time was had by all"

After a week of restaurant and fast food, the family was treated to a nice home-cooked meal! Barry and Donna graciously hosted our family in their home - the candles were set, classical music in the background, a variety of drinks available, trays of fruit and cheese, as well as an entire dinner were waiting for us when we arrived.

Earlier in the day we'd be caught out in the cold and wet of an unseasonable Southern California storm - so spent the day in the Long Beach Aquarium - but that evening we had a warm inviting home to dine in.

Split pea soup, a 'committee salad' and chicken/rice with grilled fresh veggies rounded out the meal. Then the finale capstone was a 'special' winner of an Ice Cream Barry had found - a Raspberry Chocolate that we all enjoyed so much we even had seconds.

Thanks Barry and Donna for an unforgettable evening!

Viva Las Vegas...

Jill and I brought Karrissa, Joe and McKinley down to Las Vegas this weekend to do a tour of the UNLV Dental School - where Joe starts in the fall for four years - and to help them look around for a place to live.

We had a nice little tour of the UNLV facilities - this campus is not down by the airport, but up a little west of I-15 near the center of old town Vegas. The school is fairly new, with new construction on a couple new buildings that should be ready to go in the fall. They have an 'all-computer' training, with all the students with identical Dell D620 laptops, lab space for each student with a 'simulated head' to work on, as well as four clinics for actual live work on volunteer patients. Not that you'd want to sit for three hours for a 30 minute procedure - but that's why they are volunteers.

We then drove around - about 100 miles yesterday... looking at new construction, town homes, old houses, and new houses - today we'll start in on the rental homes. Mostly in the NorthWest area - where the other Dental students recommended Joe and Karrissa go.

Then back to Orem for Easter with the whole family.

McKinley is just a doll - everyone thinks she is just the cutest thing... but I'm a bit biased. She got to go swimming for the first time in the hotel pool with her parents. Grandma (Jill) sure is good with her.

It was a quick trip - but Jill's new Highlander did great - getting 23 mpg!

Ok - I am a 'Major Geek'

I even took the test to prove it!



My son Ryan suggested I take this test... now how'd he know I'd get a good score...

Brent's Lacrosse - Timp Beats Lone Peak in OT

After work this afternoon I was pleased to be able to watch another of Brent's lacrosse games. This one was at home - Timpanogos High School. And better yet, we had a bunch of the family show up, Karrissa & McKinley, Ryan, Alysha and her friend Sherie, Grandpa and Uncle Rich, and then Jill. A nice sunny (albeit a bit windy) spring afternoon. I can't think of where I'd rather be this afternoon!

Cousin Michael Rife was still home sick - but even without him the team won 7-6 in Overtime. Brent played pretty well, not only giving some big hits, but he took a really big hit... but the guy who did it was WAY late and received a long penalty - Brent had to really control himself and not hit right back... but he sure wanted to!

Uncle Rich kept Michael in the game by 'texting' a running comentary so he could 'be there' - the game was to be available via TimpanogosTribune.com under broadcast streaming... but it wasn't working. So Michael was stuck with just texting. I'll have to remember that next time I'm out of town during a game.

Universcale!

Every few months, I come across something on the web that completely blows my mind. This morning, a friend of mine sent me a link to Nikon's Universcale web app. It puts the entire universe into proportion, from the smallest particle to the largest measurements of space.

From the femtometer to the light year, Universcale spans 40 magnitudes of measurement into a single cosmic web app. It's really amazing when you zoom all the way out into stars and galaxies and realize that every time you go a magnitude higher, everything you saw before, from the flea to Mount Everest, is contained in this tiny little grid in the lower-left side of the screen. Of course, the Carl Sagan-should-be-narrating-this planetarium music helps.

If you have a few minutes and want to feel really, really small (or really, really large, or really, really disoriented), check out Universcale. It will eat up your afternoon and enlighten you as to the true size and scope of the cosmos. Not bad for a Flash app.

Family Over for General Conference

We had a big family weekend. Saturday all the kids living at home watched the 10am conference all together - then we worked in the yard together to clear out all the waste from Jill's pruning adventure last weekend. 2pm conference together, then the boys and I went to the Priesthood session (Grandpa was in the same building, but we didn't see him until after) - this year we went to Arby's afterward... next conference we'll try a different place.

Late last night Karrissa, Joe and McKinley came over. Today Jill made her 'Famous' Conference Breakfast. I went down and picked up Keilani Conger to spend the day with us. Brent thinks it's his most favorite breakfast of the entire year! In between sessions we were able to walk down to the park and play with McKinley on the swing.

After the afternoon session the rest of the family came over for Sunday Dinner at our house. I like being home for these family dinners.

I'm actually going to be home for the next two weeks - yea!

Updated Rights...

Sorry for those of you who weren't able to upload comments. I've changed the 'rights' on my blog to allow anyone to comment. (this is for you Mom...)

Thanks for all your comments. If you have a blog you'd like to add - let me know and I'll post it on the right bar of mine for easy access.