Hello everybody.
And welcome back to the last video in the wireless penetration testing section.
Now what I want to show you in this video is what security measures you can take in order to prevent
some of the attacks.
Now first thing that you might actually ask yourself is why is the new indication attack even possible.
Well there is not really a measure that you can take in order to prevent it.
But there is a certain vision which is a ATO to dot eleven W which you can switch to in order to protect
yourself from the authentication tech.
It basically works as it uses the protected management frames which can detect and prevent due to indication
attack.
There is no other known security measure that you can take in order to prevent it from the beautification
attack now.
Now I believe that the BPA three security measures will have some kind of protection against the indication
attack but we will have to wait for it to come out in public before we actually see that.
So the next thing I want to show you is basically let me just go to my to my router so when I do that
168 that 1 one and our log into my router right here and I will show you some security measures.
You shouldn't do.
Now some people let me just log in some people for example think that if they put their network in hidden
or if they hide their network name that they will be safe.
So basically the attack that I showed you in the previous video which was discovering the hidden network
name and connecting to the hidden network with just a name.
Some people think that it is a security measure in and in reality it is even easier to hack that kind
of a network than our simple network with our BPA to password.
So as we can see right here let me just find it wireless LAN and you can see right here under the since
I did and still changing the settings from the previous attack I have here broadcast as this idea.
No which for me stands for the network being hidden.
Now for you it might be something different and it might be in some other sections since this router
is not the same as your outer.
This is an old wrapper so it doesn't have a bunch of the options.
It is very easy to find.
The broadcast SCADA this idea option what you want to do is for sure click here on yes.
And basically let me just find right here where did I change it
the altercation type.
Right here.
You do not want to have an open system ever.
You do not want to have on web 64 bits or basically anywhere.
You most likely for now on one to have on VBA to minus B escape for private Shirky.
So you want to have a passport for it and you want to have a strong password for it.
So it makes the symbols numbers and letters and make it as long as you can.
And also remember it.
So this is the strongest at the moment.
Security measure DPP 2 and the strong password which if you have a strong password it will take a hacker
days or perhaps weeks in order to crack your password.
The longer the password the harder for it the longer the password and the more symbols and letters and
numbers it has the harder it will be for it for the hacker to crack it.
If you have a password or for me for example numbers it will be very easy to crack it for anyone with
a little bit of knowledge now as I said.
So the networks will not protect you.
So let me just submit this right here.
Since I said back to the DPA to a security measure and with the password the next thing that I want
to talk about is the MAC filtering which is right here.
Now you might think that the MAC filtering will be enough to actually prevent a hacker to get into your
wireless network.
Now it might be enough if you also specify the password for the wireless.
But if you only put the MAC filtering without the password basically anyone with a little bit of knowledge.
And for now on you as well can change your mac address as assured you even before how you can do that.
And would you change MAC address.
You can basically bypass the MAC filtering.
Now if you have to use a mac filtering now there is basically a black listing and white listing blacklisting
is basically blocking a certain MAC addresses from connecting to a wireless access point and white listing
is allowing certain MAC addresses to connect to wireless access point.
Now it would be better to use a whitelist but both of them can be cracked very easily as we can just
run the aero dump program and see the clients connected to the network and see their MAC addresses.
Then we could do authenticate those clients or basically just one client and we can change our mac address
with the Mac changer as it showed in the previous story also basically Mac changer is a simple program.
Let me just show you right here.
So just typing your Mac changer and it will give you a bunch of the options.
You can type dash dash help and it'll basically give you the option to spoof a MAC address with these
minus M option.
You can type any mac address you want and basically you would type the MAC address of decline that is
connected to the wireless access point that uses the list and basically then you know to authenticate
the client and you connect with his mac address it is simple to bypass.
Another thing which you shouldn't do or basically another thing that you should do is if you want another
security measure you could use the enterprise virus.
Now the enterprise you might ask why should we use that.
Well basically every user has different passport in enterprise even if someone got the password or hacked
the password of some user he would only be able to target one user
so it is also a thing to reconsider using since it does provide provide a certain level of security.
No.
Basically as I said if you were to get a password from one user you wouldn't be able to do much.
You wouldn't be able to run the man in the middle attacks for example.
So it is a good security measure.
But I believe not many of us or basically almost nobody at home has the Wireless Enterprise.
So you can reconsider using that net debt be it fully preventing the attacks that we covered right here.
Now hopefully DDP you will provide us with a lot more security even though the BP Two is enough.
Basically the BP tool will provide you enough security if you use a strong password.
If you as a weak password not even we pay three can prevent the device exploit getting exploited or
compromised.
So that will be about it for these security measures to be with this we finished the six point section
or basically hacking device X point.
We will also cover as I said the evil twin attack later on we will do it manually.
I will show you what all the files you will need to do that but more about that later on.
And we will continue hacking in the next lectures.
Uh hope I see you there and take care.
Bye.