And the previous video we saw how we can use airdrome and get to see all the networks that are within
our life range and collect information about these networks such as the SS ID the channel the distance
between us and that access point the encryption the users and so on.
Now after we do that we'll see.
Usually we'll see a certain network that we want to target or a number of networks that we want to target.
So once we have our target it's more useful to run aero dump energy on that network only instead of
running it on all the networks around us.
So in this video we'll see how we can do that.
So I have my output here from just running air.
Don't you want zero on all networks around me.
And I'm going to target this network.
So that's my home network.
The use PC is 62.
I'm going to start sniffing on that network on the inside of thing on all networks around me to do this.
We're going to use the same program.
So is airdrome and Jew.
And then we're going to specify the channel.
So I'm going to give the channel and the channel here is number two as you can see here.
And then I'm going to specify the B as you which is the MAC address of the target network and it's this.
So we're going to copy paste it and then I'm going to add Arite option and this tells Eric don't get
to log all the packets that captures into a file and the file name is.
I'm going to call it now so let's call the test UPC.
And then we put the name of our wife I coached with monitor mode and it's nonzero.
So don't Pendu same as the program that we used before channel we put the channel of the target access
point and B as this ID we put the MAC address of the target point access point and right we put the
file name that we want all the packets to be started on and then we'd have 1 0 in the name of our Wi-Fi
because we monitor mode.
So I'm going to hit enter and as you can see the only network that shows up is your PC 62.
We don't have any other networks with us.
And we can now have a look on this section in the previous video and we had too many networks here so
we only had one section in the roadmap and this section was missing.
Here's the second section.
So the first section as we saw in the previous video contains all the access points that are within
our Wi-Fi range.
The section here.
Now the second section contains all the clients that are associated with the access points here.
So and here this is this is not a network.
This is a client and it's connected to this network.
We know that because we see the business idea here does the MAC address of the network that this client
is connected to.
So the market for us here is the same as the market address here.
So that means this client is connected to this network.
Now this the station is the MAC address of the client.
So this is the MAC address of the device that is connected to the network.
Power is the distance between us and this device rate is the maximum speed that this device is running
on.
Lost is the number of packets that we lost or carbon capture from the target device and frames is the
number of useful packets that we collected from that device they will talking to.
We'll talk more about frames and data.
As I said when we start talking about WEP cracking.
So I just want to show you now the two main parts again so the first main priority is the access points
that are within our fire range.
The second main part of airdrome is declines are associated with these access points.
We have the MAC address of the access point here and the MAC address of the actual client in here.
Now I'm going to control-C.
So now all the data has been loaded into a file called test PC.
I'm going to use LS which is a command to list files in Linux and just list the files that are created.
So at the start after it and we see them created automatically created for for file format.
So in our command we only specify the file name as test PC.
We can see that arrow don't automatically added 0 1 to the file name.
It adds this just in case there is another file that has the same name.
And then we have four different file formats.
The caps is Kismat and Kismet takes them out.
Let's go have a look on the files here in my home directory
so you could do that.
Yes.
So that's the files here and there in the home directory because my terminal is working in the home
directory.
We go PWT we see we're in the root directory.
OK.
Now after we sniff those packets we can use a program a program such as Wireshark to analyze these packets
and see what information we gather.
The problem is in this specific network it's using WPA encryption.
So all the packets are encrypted and we want to be able to decrypt them unless we have the key.
So when God talk about how we correctly key in section 2 of this course and we're going to talk about
how we use wireshark in section 3 of this curse.
So I'm just gonna run wireshark just to give you a quick look on how the packets show up.
So they're not going to be useful.
They're all going to be encrypted so they won't really be any use to us so I'm going to go on the open
file test file name and open that I don't we see here we can get some information so we can see for
example here the source device is a Broadcom device and it's going to it's just being broadcasted here.
We can see here we have an Apple device communicating with the Broadcom.
That's as much as you'll get and get mac addresses you'll get maybe devices manufacturers.
Very very simple information.
All this because the network is encrypted.
We're talking we're gonna talk about how we can decrypt then how we can get very sensitive information
after we connect to the network.
If it's an open network you can connect to it straight away and jumped to power through you or we're
going to talk about these peripheral attacks for now.
Just wanted to give you a quick look on how the packets look when the network is encrypted.
Don't be scared of wire sharp we're going to talk about it again in the Third Section.
We're going to explain everything about it.
So for now I just wanted to show you a quick look on what the packets looked like.