Wireless Reconnaissance in Penetration Testing

In many penetration tests, there is a lot of useful information to be gathered from the radios used by organizations. These radios can include two-way radios used by guards, wireless headsets, cordless phones and wireless cameras. Wireless Reconnaissance in Penetration Testing describes the many ways that a penetration tester can gather and apply the information available from radio traffic. Stopping attacks means thinking like an attacker, and understanding all the ways that attackers gather information, or in industry terms profile, specific targets. With information from what equipment to use and how to find frequency information, to tips for reducing radio information leakage, to actual case studies describing how this information can be used to attack computer systems, this book is the go-to resource for penetration testing and radio profiling.

• Author Matthew Neely is a respected and well-known expert and speaker on radio reconnaissance and penetration testing
• Includes real-world case studies of actual penetration tests using radio profiling
• Covers data leakage, frequency, attacks, and information gathering

Most Helpful Customer Reviews

There are two things that really stick out about this book:

1. The authors do an excellent job of applying the theory presented in the book with case studies of real life penetration tests. While there are case studies at the end of many chapters, there is a whole chapter (Chapter 8) dedicated to a penetration test on a casino. Yes, plenty of other books have case studies, but where this one stands out is that it includes additional sections on remediation and lessons learned. This was a welcome addition to the excellent case studies given. Many testers have to face this after the test: “I just broke it, how do I fix it!”. This book gives you some help with the remediation process.

2. Many times throughout the book, the authors go the extra step to cover things that testers might forget about when performing the engagement, such as checking with local laws and making sure your scope and rules of engagement allow you perform that specific test. While you can find plenty of technical books, very few mention proper testing techniques beyond running the tool.

This book clearly reflects that the authors know their trade very well and is very well written and illustrated. Wireless Reconnaissance in Penetration Testing is great for someone just getting into radio (like me) or even the seasoned amateur radio operator. There is plenty of content outside the theory chapter, both on the radio side and the penetration test side. This is the first and only book I have seen combining radio theory with penetration testing and it should quickly become the standard read on this topic. Well done Matthew, Alex, and Chris!