
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew

Correct I will be there and I won't need a hotel.
Dustin
On 2/14/14 3:25 PM, "Andrew Goble" goble@dixie.edu wrote:
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

I'm investigating usb wireless cards, have ordered a couple that will run on the RPi without a powered USB hub and do hostapd. This will be killer for a backpack setup. They make more powerful USB wireless cards, but the big ones all require a powered USB hub.
I imagine that we'll still want to use the big AP / inverter combo for any gas station setups.
If you have any recommendations for a battery power-supply for the Pi, let me know. Maybe somebody makes one that is both a power supply and a powered USB hub.
Thanks, Andrew
On 02/14/2014 03:25 PM, Andrew Goble wrote:
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

Have heard good things about the Limefuel/Limeade batteries. The following is one of the larger models they provide, might be overkill.
http://www.amazon.com/External-Battery-Pack-L180X-Thunderbolt/dp/B00C78YJQY /
Jake
On 2/24/14 3:07 PM, "Andrew Goble" goble@dixie.edu wrote:
I'm investigating usb wireless cards, have ordered a couple that will run on the RPi without a powered USB hub and do hostapd. This will be killer for a backpack setup. They make more powerful USB wireless cards, but the big ones all require a powered USB hub.
I imagine that we'll still want to use the big AP / inverter combo for any gas station setups.
If you have any recommendations for a battery power-supply for the Pi, let me know. Maybe somebody makes one that is both a power supply and a powered USB hub.
Thanks, Andrew
On 02/14/2014 03:25 PM, Andrew Goble wrote:
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

I just bought this on for my trip to Mexico. I've been pretty happy with it.
Anker 2nd Gen Astro Pro 15000mAh Quad-Port External Battery http://amzn.com/B005NGKR54
Andrew - So what apps/OS/devices do you have cobbled together to get this thing to work currently? Any write-ups or anything you started from? I'd like to build one for in house use too.
- Corey
On Mar 3, 2014, at 1:54 PM, Jake Johansen jake.johansen@utah.edu wrote:
Have heard good things about the Limefuel/Limeade batteries. The following is one of the larger models they provide, might be overkill.
http://www.amazon.com/External-Battery-Pack-L180X-Thunderbolt/dp/B00C78YJQY /
Jake
On 2/24/14 3:07 PM, "Andrew Goble" goble@dixie.edu wrote:
I'm investigating usb wireless cards, have ordered a couple that will run on the RPi without a powered USB hub and do hostapd. This will be killer for a backpack setup. They make more powerful USB wireless cards, but the big ones all require a powered USB hub.
I imagine that we'll still want to use the big AP / inverter combo for any gas station setups.
If you have any recommendations for a battery power-supply for the Pi, let me know. Maybe somebody makes one that is both a power supply and a powered USB hub.
Thanks, Andrew
On 02/14/2014 03:25 PM, Andrew Goble wrote:
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

At past assessments it's been the same old engenius AP tethered up to either a laptop or a rPI running FreeRADIUS with the WPE patch applied. It works great but you're tethered to AC power.
For devices that are neglecting to verify certificates, this dumps the mschapv2 challenge/response pair into a log file, which I then process with a nasty regex to get a netntlm hash that can be fed to hashcat or John. If the password is weak, then cracking with wordlists on commodity hardware has yielded good results.
I've bought a couple of small wireless usb adapters that can operate directly off a rPI and I will be testing when they come in. The ideal scenario would be an rPI running FreeRADIUS-WPE and hostapd in a backpack running off a battery pack. It won't have nearly the power that the engenius AP has, but will be very portable and out-of-sight.
I promised Jake a few weeks ago I'd write all this up... I'll renew my promise, we've got a wiki on the strike package now and I'll get it put together and posted there.
Thanks, Andrew
On 03/03/2014 02:26 PM, Corey Roach (ISO) wrote:
I just bought this on for my trip to Mexico. I've been pretty happy with it.
Anker 2nd Gen Astro Pro 15000mAh Quad-Port External Battery http://amzn.com/B005NGKR54
Andrew - So what apps/OS/devices do you have cobbled together to get this thing to work currently? Any write-ups or anything you started from? I'd like to build one for in house use too.
- Corey
On Mar 3, 2014, at 1:54 PM, Jake Johansen jake.johansen@utah.edu wrote:
Have heard good things about the Limefuel/Limeade batteries. The following is one of the larger models they provide, might be overkill.
http://www.amazon.com/External-Battery-Pack-L180X-Thunderbolt/dp/B00C78YJQY /
Jake
On 2/24/14 3:07 PM, "Andrew Goble" goble@dixie.edu wrote:
I'm investigating usb wireless cards, have ordered a couple that will run on the RPi without a powered USB hub and do hostapd. This will be killer for a backpack setup. They make more powerful USB wireless cards, but the big ones all require a powered USB hub.
I imagine that we'll still want to use the big AP / inverter combo for any gas station setups.
If you have any recommendations for a battery power-supply for the Pi, let me know. Maybe somebody makes one that is both a power supply and a powered USB hub.
Thanks, Andrew
On 02/14/2014 03:25 PM, Andrew Goble wrote:
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

Did you notice that the demo certificate on slide 29 of http://www.willhackforsushi.com/presentations/PEAP_Shmoocon2008_Wright_Antoniewicz.pdf is radius01.utah.edu?
- Corey
On Mar 3, 2014, at 3:39 PM, Andrew Goble goble@dixie.edu wrote:
At past assessments it's been the same old engenius AP tethered up to either a laptop or a rPI running FreeRADIUS with the WPE patch applied. It works great but you're tethered to AC power.
For devices that are neglecting to verify certificates, this dumps the mschapv2 challenge/response pair into a log file, which I then process with a nasty regex to get a netntlm hash that can be fed to hashcat or John. If the password is weak, then cracking with wordlists on commodity hardware has yielded good results.
I've bought a couple of small wireless usb adapters that can operate directly off a rPI and I will be testing when they come in. The ideal scenario would be an rPI running FreeRADIUS-WPE and hostapd in a backpack running off a battery pack. It won't have nearly the power that the engenius AP has, but will be very portable and out-of-sight.
I promised Jake a few weeks ago I'd write all this up... I'll renew my promise, we've got a wiki on the strike package now and I'll get it put together and posted there.
Thanks, Andrew
On 03/03/2014 02:26 PM, Corey Roach (ISO) wrote:
I just bought this on for my trip to Mexico. I've been pretty happy with it.
Anker 2nd Gen Astro Pro 15000mAh Quad-Port External Battery http://amzn.com/B005NGKR54
Andrew - So what apps/OS/devices do you have cobbled together to get this thing to work currently? Any write-ups or anything you started from? I'd like to build one for in house use too.
- Corey
On Mar 3, 2014, at 1:54 PM, Jake Johansen jake.johansen@utah.edu wrote:
Have heard good things about the Limefuel/Limeade batteries. The following is one of the larger models they provide, might be overkill.
http://www.amazon.com/External-Battery-Pack-L180X-Thunderbolt/dp/B00C78YJQY /
Jake
On 2/24/14 3:07 PM, "Andrew Goble" goble@dixie.edu wrote:
I'm investigating usb wireless cards, have ordered a couple that will run on the RPi without a powered USB hub and do hostapd. This will be killer for a backpack setup. They make more powerful USB wireless cards, but the big ones all require a powered USB hub.
I imagine that we'll still want to use the big AP / inverter combo for any gas station setups.
If you have any recommendations for a battery power-supply for the Pi, let me know. Maybe somebody makes one that is both a power supply and a powered USB hub.
Thanks, Andrew
On 02/14/2014 03:25 PM, Andrew Goble wrote:
I heard back from Bill at SLCC, the week in March works best for them, I think he'd have preferred the April date but an important chunk of his staff is out for Ellucien Live or something like that.
Plan for March 24 - 28 for SLCC's assessment. I'll start working on hotels and logistics. Just to confirm, Dustin is coming from the U? And I don't need to make hotel reservations for Dustin or Dave, right?
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
participants (4)
-
Andrew Goble
-
Corey Roach (ISO)
-
Dustin Udy
-
Jake Johansen