‫Excellent.
‫So a wireless network is a computer network that uses wireless data connections between network note.
‫Wireless networks are generally implemented and administered using radio communication.
‫And with this method, the costly process of introducing cables into a building can well, obviously
‫be avoided.
‫A wireless local area network, W Lin.
‫Links two or more devices over a short distance using a wireless distribution method, usually providing
‫a connection through an access point for internet access.
‫I Tripoli 8.2.1 one is a set of Mack and physical layer specifications for implementing wireless LAN
‫computer communication.
‫Now they're the world's most widely used wireless computer networking standards used in most home and
‫office networks to allow laptops, printers, smartphones to talk to each other and access the internet
‫without being connected to any wires.
‫So for this, I'm just trying.
‫Keep it simple, so I won't talk about the entire, you know, two 11 family or the technical details
‫beneath them.
‫I just want to let you know that the most popular are those defined by the ATO to 11 B and the ATO to
‫11g protocols, which are amendments to the original standard.
‫So, 8.2.1 one Dash one nine nine seven was the first wireless networking standard.
‫But eight 02, 11 B was the first widely accepted one, followed by eight to 11 g and then eight to
‫11 in.
‫Eight 00 to 11 in is an amendment that improves upon the previous eight 00 to 11 standards by adding
‫multiple input, multiple output antennas M.T.
‫So minty, it's basically a method for multiplying the capacity of a radio link using multiple transmit
‫and receive antennas.
‫Nowadays, eight 00 to 11 AC is popular, so it builds on the eight 00 to 11 end and includes wider
‫channels in the five gigahertz band.
‫The segment of the radio frequency spectrum used by eight 00 to 11.
‫Varies pretty much between countries.
‫For example, in the U.S., 8.2.1 1a and 8.2.1 one G devices may be operated without a license as allowed
‫in the regulations.
‫Wireless networks are identified using a service set identifier or SSA ID, or I'll call it a sit.
‫An acid is the primary name associated with an eight 00 to 11 wireless LAN, including home networks
‫and public hotspots.
‫Client devices use this name to identify and join wireless networks.
‫Now there are multiple kinds of acids.
‫Used by itself, the term Essid refers to the name of a wireless network, whether it be a point to
‫point network made of only individual wireless clients into communicating or an infrastructure network
‫with clients relying on access points.
‫So getting more specific, we have basic acids or B acids, which are the Mac address of the access
‫point.
‫The 48 bit number that uniquely identifies every wireless and every wire line, for that matter, network
‫interface.
‫The extended acid, or Essid, is a unique name applied to one or more access points offering the same
‫service, such as access to a single wire line network.
‫Now, in some deployments, unique pieces are applied to each individual access point.
‫In others, all access points should offer access to the same wireline network are given identical E-Z
‫values to help foster roaming between the various access points.
‫But generally speaking, when analyzing wireless LANs, we want to discover the BSP, said the Mac address.
‫And they said the name applied to the wireless network as a whole, with a unique value typically applied
‫to each individual access point.
‫Now, since this is a cause for penetration testers, we really need to talk about the weaknesses of
‫the wireless network infrastructure.
‫So here are some of the most significant vectors for wireless attacks.
‫Denial of service.
‫Blocking legitimate users on a wireless LAN is trivially easy.
‫Even if the network is carefully constructed.
‫Rogue access points employees sometimes set up unauthorized access points in an enterprise environment
‫to bypass the legitimate wireless infrastructure or to gain wireless access when such an infrastructure
‫isn't provided by the enterprise.
‫No penetration testers and ethical hackers alike are sometimes required to sweep an organization's physical
‫infrastructure to find these unauthorized access points.
‫Lack of or improper configuration of wireless access points.
‫Right, so if access points are not configured appropriately, attackers can have a much easier time
‫of employing any of the rest of these attack vectors.
‫Traffic captured intercept.
‫In a wireless LAN, the hacker can get access to the data link layer layer two communications as long
‫as he or she is in physical proximity of the device for merely capturing packets.
‫That proximity for a wireless LAN could be a mile or more.
‫Numerous wireless sniffing tools can be used in such attacks.
‫Crypto attacks, some wireless encryption protocols suffer from significant security weaknesses, such
‫as the wired equivalent privacy web protocol.
‫Attackers can gather Web traffic and by exploiting flaws in the way cryptographic initialization vectors
‫are exchanged.
‫Crack the keys to gain access to the data and the network.
‫Client duping.
‫Some tests call for penetration tester or ethical hacker to set up a bogus access point to see if clients
‫will trust it and then use it to access the rest of the network.
‫The attacker can then sit in the middle of all the communications, harvesting them or changing the
‫data as it passes by.