Ended up there we see how to use air or dump energy to list all the networks around us and display useful
information about them.
Usually we do this in order to see our target network see the signal strength see how how far we are
from it and then start targeting this target network.
Now in this example I'm going to assume that my target network is this one right here.
This is actually the network that my host machine is connected to.
And now that I have my target network and I have some basic information about it let's see how we can
run or dump energy against this network.
Onlly not a guest on networks and this way we'll be able to gather more information about it.
So to do this first of all I'm going to have to write the name of my program which is a dump energy.
Then go on to specify a specific B S S eidy or a specific MAC address for error dump energy to sniff
data from.
So my target network has been this idea of this.
We can see it here and there on the BSA side.
So I'm going to copy it and then I'm going to do dash dash.
SS idae I'm going to give it the obss idea that I just copied.
Next I'm gonna specify a Channel 4 error dump energy to sniff on again.
If you look under the Channel column in here we can assume my target network is on channel 2 so I'm
going to do a dash dash Channel.
To.
So now we're still on air.
And that I want to sniff data on Channel 2 and on LIVE FROM a network that has this SS I.D..
I'm also going to tell error dump energy that I want you to store all the data that you're going to
gather for me in a file so I'm going to see a dash dash right and then I'm going to type a file name
and let's call this test.
And at the end as usual I need to give it the name of my wireless adaptor in monitor mode which is more
n0 in my case.
So very simple command.
Let's go over it one more time.
Would do an error dump and that's the name of the program that I use.
Intel and Onley want you to sniff data from a specific.
Yes yes I did.
Then I'm giving it the obss idea of my target.
Then I'm Telenet.
I want you to on this data from a specific channel and I'm given a channel that I want to sniff data
from.
Again we can go from here it's number two finally until and if I want you to write all the data that
you're going to capture in a file that we're going to call a test and then I'm giving it my wireless
adapter in monitor mode which is more than zero.
Now I'm going to hit enter and as you see unlike the last time error Dopp energy is only shown me one
network in here.
This is the network that I wanted it to sniff data on.
And we can also see we have a completely new section right now.
So when I write an error dump entry in the previous lecture you seen I had the networks in here and
I had nothing here at the bottom.
But now you can see we have more entries in here at the second section of aero on energy.
And basically anything that you see here in second section.
These are the clients or the devices connected to this network.
So right now we can see this network has three devices connected to it and you can see the MAC addresses
of these devices under the station so you can see all of these devices connected to the same network.
So the obss idea is still the same.
This is the mike address of the network.
And under the station we have the different clients or different devices connected to this network.
We can also see the power.
So this is the signal strength of each of these devices.
We can see the speed we can see the amount of the last we can see the amount of frames or packets that
we have captured and we can see if any of these devices are still probing for networks.
So sometimes when you're on air a dump energy a guest or networks you would still see this section and
you'd see that some devices are connected and they're literally trying or looking for networks.
So you'd see the name of the networks that they're looking for under the proehl.
Now if I had controllers see a dump and you will quit it will stop working.
What I should have new files in my current working directory that contained the data that we just captured
because I remember when we were under command we use the right option in here to store the data in a
file called first.
So if I just do this to list all the files in my current working directory you can see I have four files
all of them stacked with test but they all have different extensions.
So we have this yes we we have a nest egg smell.
We have a car and we have a kingsmead SEE US v.
Now also notice that there are dump energy automatically appended minus zero or Wyrm to each of these
files.
So in the future when you go and try to use the capture file Make sure you append to dachas year or
one to the file name that you specify in the command.
Now the main files are going to be using is the cap file.
Again this file contains the data that we captured during the period that era dump energy was working
on in here.
And basically this file should contain everything that was sent to and from my target network so it
should continue or LS chat messages user name is passwords or anything that any of these devices did
on the Internet.
Because anything that they have to do will have to be sent to the rafter.
As we've seen before.
The only problem is if you look at the encryption in here you can see that my target network uses WPA
to encryption.
So all of the data sent between the writer and the clients is encrypted.
So let me show you what I mean.
I'm going to use a tool called wire Shariff to analyze the data.
And don't worry about how to use wire a shark.
We all talk about it in details later on.
Right now I just want to make sure that you understand the idea that now we're able to capture all these
packets.
The problem is these packets are encrypted so I'm going to do why are sharrock to runway or shark.
And then I'm going to open my capture file.
So I'm going to go to file open.
And it's already in my rectory.
So I'm just going to scroll down and select my first one car.
I'm going to open it and I'll just put this in full screen.
And as you can see if you click on any of these packets you can see we really have no useful data.
You can see everything looks like gibberish.
And we can't read a thing even though these packets might contain user names passwords or your elves.
The only useful thing that we can see here is the device manufacturer.
So we know one of the devices connected to the network that has this specific mac address.
So is the one that ends with E.
And if we go up we can see that it's this specific device we know now it is an Apple device so it could
be an Apple computer or it could be an iPhone or own iPad.
And this is actually my MacBook computer.
That is the host machine.
Again we can see we also have a device that's used and how are we chipsets this can be it can be a phone
or it could be out there.
And if you look at the MAC address here and compare it to the MAC address is that we have here you can
see that this is actually under the BSA cida.
So this is the MAC address of the routier.
So now we know that the brand of my writer is how are we so we can gather more information by opening
this file in Y or shark can we can can I guess what computer is out there and what operating systems
they use was what.
This is not detailed enough.
And the main problem with this is the fact that the network is using encryption now in the next section
or are going to be talking about how to break this encryption.
And once we do you'll see how we can see the passwords the user names in plain text and you'll also
see how we can map all of the computers on the same network gather detailed information about them hack
in to them and do some really really cool stuff.
Now you should guess by everything that I said so far if this network was an open network if it was
a network that does not use any passwords then you wouldn't have been able to actually see all of your
L's and everything that they do in here.
But again if you can connect to the network without a password then you'll automatically be the post
connection section section.
Like I said we're going to talk about some really really cool attacks that you can do whilst you have
the password or once you can connect to the network.
So don't worry about why Rashad.
For now I just wanted to make sure that you understand why encryption is useful and why it's used and
why we can't see much now because we don't know the key.
We will talk about why a shuriken all of that later on in the next section.