Hello everyone and welcome to part ten of my land ethical hacking.
In this part we're going to look at creating a fake access point.
So basically we're going to create a fake Wi-Fi router or hotspot that people can connect to and it
will not have any password or Wi-Fi key.
So when someone wants to connect to it they will connect straight to it on the Internet will in fact
work.
So it will look like just a free internet hotspot for them because there'll be no key.
They can just connect to it and use the Internet but it's fake.
So basically we will control all the packets that flow through the devices and through the Wi-Fi hotspots
which enables us to actually capture sensitive packets of information and analyze them and to do this.
We're going to need to download something called Munna to.
It makes the process very simple for us because it will automatically create the new access point and
there's options to start SSL strip file.
And there's some some of it or sometimes it even attempts to bypass H S T S which is commonly used by
g mail and Facebook at Manor uses three main scripts.
So start no or shame.
Basically this will start an access point so devices will be able to detect it.
And when you click on your Wi-Fi on Windows 10 and all the Wi-Fi reads just come up and you can choose
which one you want to connect to.
It will appear the fake one will appear boat when you can activate there'll be no internet access so
there's not much point to that.
We are going to be using that simple.
This one here.
So it's just going to start a normal access point using an interconnection internet connection with
upstream interface.
But there's also another one which is not full on this one will use the extra bypass or it will use
the bypasses for the security and started SSL strip SSL splits and phylum which I'll discuss later in
the video.
So if I go to the next slide these are the commands.
So when you're on Kelly Linux you could type a P T GET UP GET install an M minor tool kit that will
install manner then we need to do some modifications to the conflict files and the last script here
plus command is bash and then this you are L to the not simple or the start that simple one because
that's the one we're going to use in the video.
So I'm just gonna go onto the color Linux machine and once I open that we'll show you how to install
it modify it and actually start this fake access point.
So I thought it was important for you to understand the theory behind how this is actually working.
So say computer 1 in this diagram is your neighbor.
They are searching for Wi-Fi connections and they see this one pop up.
Now this is the fake one we have created as ball.
Basically what we're doing is we're using a wireless card and we'll make it act like a Wi-Fi router
so they will see this router and think oh I'll connect to it because it looks like free internet they
haven't put a K on it so I'll just connect once they can actually the machine will know they've connected
to it.
And if they send a request to Google we'll send the request to the wireless card in this case not a
real Wi-Fi router.
The wireless card will then relay that back onto the hacker machine and the hacker machine will need
to be connected to the Internet through a different means through different means.
So the hacker machine might have two wireless cards one of them's acting as the Wi-Fi router and then
the other one's actually connected to a real Wi-Fi router so that way the the computer or the neighbor
in this case that is connected will still got Wi-Fi connection because once they send the request to
the wireless card that's acting as a Wi-Fi router and they send that sends that gets sent onto the hacker
machine.
The hacker machine will then send that on to the Internet through the all the connection.
So you could have two wireless cards connected to your host machine or your hacker machine or you could
have the wireless card and the wired connection because this you cannot connect to your actual router
through this wireless call that is being used as a way if I reach it because it's just being used.
You can't use it two things at once.
So hopefully this does give it a basic understanding of how it works both in my case I'm using Kelly
Linux on a virtual machine.
So I have my wireless card connected to my host machine.
Now this this wireless kind of got connected right in front of me is going to act like a Wi-Fi router.
I've got an internal wireless card in my actual host machine that runs Windows 10 that gives internet
connection to the Cali Linux virtual machine through a bridge.
Now that is why you may see why connected is because it uses the internal connection from your host
machine.
But if you're on the virtual machine and you have two Wi-Fi card you can use one to connect to an actual
router and then the older one has a Wi-Fi card.
So hopefully that clears it up hopefully it gives you a bit more of an understanding of what we're actually
doing here.
And I will see you on the Kelly Linux machine.
So now that you've opened up Kelly Linux we can actually install the Manitou kit now.
So to do so it's just the same as the first come under shown you in the PowerPoint so it's OK to APC
hyphen gets to install the minor hyphen tool kit when you click and to install it.
So if you click enter now I've already installed it as you can see here it says Manitou here is already
the newest version.
Just give it a second fear because if it's a first time and stolen it we'll take a little or a few seconds
depending on how powerful your machine is or whether you use in virtual machine.
But it shouldn't take no longer than a few minutes.
I can type or you'll know what it's completed installation when a new line pops up like this.
Underneath all the white text then you can type clear which will wipe the terminal clean so you can
start again next we need to open the details of the fake access points in the config file so to do so
we're gonna type belief pad no leave pad is just a simple text.
So we're telling the file to open with this application so we'll do Leif Padgett then forward slash
ATC forward slash mana hyphen toolkit called less forward slash.
It's I can't speak today then do host APD hyphen other then c o an F the comic click enter and it will
open the config so the most important information on this conflict file is the first bit of information
here which I've highlighted the interface is the card that's going to act like the Wi-Fi router it's
going gonna mimic or Wi-Fi reachable.
In this case it's just a wireless card.
So if I go back to the terminal and if I open another terminal and type I don't see a conflict if I
just zoom in a little bit here
as you can see the W line 0 is my wireless card I've got it in managed mode so there's no messing with
that monitor mode anymore because the cash in packets is that is over so make sure it's in managed and
make sure is connected to your virtual machine so as you can see here it says Wi-Fi not connected what
I mean by it's connected to the virtual machine is that you can actually detect networks and the virtual
machine does detect that you've connected the wireless card 88 0 in this case is my wired connection
or as you can see here is as wide connected so ITI hedge zero is my internal host machine's wireless
card which is connected to a real router that is the bridge connection I was talking about so there's
sort of like relays from the fake access point to my E.T. hedge zero which is connected to my host device
which is then connected to my real Wi-Fi router now it can close out of there because if we go back
to the config file you can see it appear the interface interfaces to be land zero.
So this is the call that we want to use.
That's correct.
As you can see from that I w Compaq we can leave the B SSI do the same.
That's just the Mac address.
We can leave the driver the same and the ISIS I.D. or SSI D.
In this case is Internet.
So this is the name of the Wi-Fi connection so if I go to Y and Wi-Fi not connected and select the network
the SSA I.D. is the name search you can see the first one on this less on this list is sky C 9 DDD but
this fake one will just be called Internet and we're going to change it and we'll use channel 6.
So I'm not really going to change anything in this conflict file but it's just important for you to
know this stop in case you need to make changes so you can call this whatever you want but I'm going
to leave it as Internet.
So I'm just gonna close out of that and the next one we can open am let's open the will the conflict
files now so if we do leave Pat them will do forward slash U S are instead of ATC and share then forward
slash again manner hyphen toolkit
run hyphen manner then do start hyphen not hyphen simple dot as page should I click this will click
enter the upstream is the card that is basically the call giving the how can I say this 88 0 is the
card that's giving the hockey machine Internet so for 88 0 or the hockey machine to actually have Internet
access and these have 2 cards like I've explained so 88 0 is my host machines internal wireless card
which is connected to my actual real router the fake router is my wireless card and the wireless card
sends signals to the internal card that sends signals to the real router that sends a signal back this
way it gives internet connection to the person connected to the fake walk access point bought all the
packets flowing through the hacker machine to the Wi-Fi router and embark.
So we're like the middleman between the victim computer connecting to the fake access point and the
real router we're in the middle capture and all the information.
Think of it like that it might make more sense however I'm going to need to change this so I'm going
to keep eating the area the same because that is the breached connection or the wired connected that
I'm using through my virtual machine.
So think of 88 0 as my host machine internal wireless card which is connected to a real Wi-Fi router
P.H. why is the wireless card.
Now it's called W. Lam one here.
So I'm gonna rename it it'll be land zero click file and then click save so I can close out of that.
No.
But you.
Just like I said you just kind of make sure that your extremes correct.
So if you have a second wireless card that might be called Toby line 10.
Toby line two.
You could have as many as you want then you will need to change the upstream in this config file so
I can close out of the click type clear.
Click enter and now we can actually run this fake access point.
So I'm gonna to type bash then I'm gonna do forward slash U S R forward so I share forward slash manner
hyphen tool kit forward slash one hyphen manner both slash start if not even simple dot s page click
enter and it's gonna start to actually begin configuring this fake access point so it's enabled my wireless
card is currently acting as a wireless router or just a Wi-Fi router.
Now if we it's kind of it's finding all devices that connected to my host machines connection so my
host machine like I said is connected to my main Wi-Fi router which is this one here so it's it's just
got all devices that are connected to it but now if I go my separate laptop.
So if we think of this laptop as like a neighbor that's connecting or searching for Wi-Fi routers you
will see that the Internet will pop up.
So I will just show you my MacBook now and we'll see what we've actually done so now that we're on the
MacBook.
Think of this as like the neighbor's computer so the neighbors searching for Wi-Fi spots.
And if you go up to the Wi-Fi connections you can see there's a new one here called Internet.
Now that corresponds to the fake access point that we created.
Remember I didn't change the name.
And if we can actually
so connectivity train it's just trying to connect to it.
Now give it a few seconds.
It's connected as you can see here the network name is exactly the same which is Internet.
So now basically all the pockets are flowing through this device that are flowing through my.
Basically the hacker device then through to my real router back through.
So like I said it's hard to sort of grasp but just think of like the hacker as a middleman.
It's Catrin only information coming from the Klein computer or the victim computer.
And then it's captured all the information coming back from the real router so just approved that the
Internet actually does work.
Ignore OBSS just skip past it and go to the Wi-Fi.
I mean the Web browser they click on Google and you can see the internet works.
So get an internet connection I can.
I can go on any websites I can go on I can log into anything.
It's just like a real Internet connection.
Now this person may be thinking Oh great you've got free internet.
There's no key they must have forgotten a keyboard.
Obviously they haven't realized that they've just connected to a honeypot which is a fake or like a
think of it like a trap.
Basically so if now this client or this neighbor goes and logs into PayPal we can do some attacks on
the find out the log in information.
We can do loads and loads of things.
This will be explained later in the course once we go on to poisoning an actual client attacks post
connection book.
Hopefully this video did help maybe you learn something from it if it didn't explain it very well please
leave it.
Leave a comment and I'll try and explain it better or show articles that explain it better.
So that was it really for this video.
If it did help please leave a like comment subscribe to the latest videos and I will see you in the
next video.