SniffAir – An Open-Source Framework for Wireless Security Assessments

No ratings

Presented at GrrCon2018 2018 by

Matthew Daracott

As the amount of wireless devices continues to increase, so does the amount of wireless traffic. It’s quite easy for malicious traffic to be obscured by the amount of benign traffic out there. SniffAir is an open-source wireless security framework which provides the ability to easily parse passively collected wireless data as well as launch sophisticated wireless attacks. SniffAir takes care of the hassle associated with managing large or multiple pcap files while thoroughly cross-examining and analyzing the traffic, looking for potential security flaws. Along with the prebuilt queries, SniffAir allows users to create custom queries for analyzing the wireless data stored in the backend SQL database. SniffAir is built on the concept of using these queries to extract data for wireless penetration test reports. The data can also be leveraged in setting up sophisticated wireless attacks included in SniffAir as modules.