Now let's try to break into a WPA network.
We'll start with detecting available access points.
To do this click on the listening icon again.
Two monitors pop up.
We've seen them already.
This time we're not interested in what network since we already know the key to the detect network.
We'll focus on WPA.
It works this time.
The program has detected two such networks.
One of the networks is actively used at the moment.
The BSA idea of the first network is Deedy underscored w r t and a D is the value of the end of its
MAC address.
We compare it against the end of the address that can be seen at the bottom.
They match we can conclude that the first network is the one being actively used.
The next step is to click on an icon you can see below in the main window
will select the DD w r t network in the new window.
Breaking into a WPA protected VLAN amounts to cracking a pre-shared key in the case of WEP which is
constantly vulnerable to attacks.
Even a good configuration of all settings doesn't mitigate the risks with WPA networks.
The attack is based on the assumption that the queue will be easy to crack and that it can be found
on a wordlist of a given language.
As you can see we have two such lists prepared.
One is shorter.
The other is longer.
For the purposes of this presentation will start with the short list.
Everything has been configured.
It's enough now to click on attack the attack can be apparent.
In this case if a network user is really using it actively for example downloading large files there
is a possibility that our actions will disconnect and reconnect him to the network experience a connection
drop as Wi-Fi users were used to a connection disappearing sometimes and that it can become weaker or
slower.
In this case we're trying to force a user to reauthorize allocate well check each time whether the password
submitted by the user can be found on our shortlist
as it turns out it can.
The password for the attack network is password.
The two presentations provided examples of typical infrastructure attacks.
Breaking into Wi-Fi networks you were able to see for yourself that protecting Wi-Fi is up to you entirely
appropriate countermeasures can simply be not using WEP and in the case you're already using WPA.
Deploying a second version of the protocol along with implementing strong passwords.
The best solution is to authenticate users through a radius server.
Thank you.