Now before leaving this section and moving to the gaining access section where I'm going to teach you
how to break the different encryption's and gain access to networks.
I want to spend one more lecture talking about a really useful attack that still falls under the preconvention
attacks under this section.
The attack that I want to talk about is the authentication attack.
This attack allows us to disconnect any device from any network before it connected to any of these
networks.
And we need to know the password for the network to do this.
We go on to pretend to be the client we want to disconnect.
Why change in our a MAC address to the MAC address of that client and tell them that I want to disconnect
from you.
Then we're going to pretend to be the writer again by changing our MAC address to their out there as
MAC address until the client that you request requested to be disconnected.
So I'm going to disconnect you.
This will allow us to successfully disconnect or authenticate any client from any network.
Now we're actually not going to do this manually.
Were going to use a tool called aeroplane energy to do that.
From the previous lecture we know that this MAC address right here belongs to an Apple computer.
And like I said this Apple Computer is actually my computer right here.
As you can see this host machine is connected to this network right here which is the same as the one
that you see here.
And it actually has Internet access.
So if I just look for a test you'll see that I'm connected and I can look for things I can use Google.
So I have a proper working Internet connection.
Now we're going to come back here and we're going to use a tool called atripla energy to launch the
authentication tag.
And this Kinect this Mac computer from the Internet.
So we're going to type the name of the program which is a replace energy.
Well going to tell it that I want to run Eddie authentication attack.
Then I'm going to give you the number of authentication packets that I want to send.
So I'm going to give it a really large number so that it keeps sending packets to both thereafter and
the target device therefore I'll disconnect my toungoo device for a very long period of time.
And the only way to get it back to Connect is to control See and quit the play energy.
Next I'm going to give it a play engy the MAC address of my target network.
So I'm going to do a dash A and give it the MAC address which I'm going to copy from here.
Then I'm going to use dash C to give it the MAC address of the client that I wanted this Kinect and
the client that I wanted this Kinect is this client right here which is the Apple computer.
Like we said.
So I'm going to copied and pasted here.
And finally I'm going to give it the name of my wireless adapter in monitoring mode and in my case it's
called zero.
So a very very simple command were type in a play n g.
This is the name of the program that we're going to use.
We're are doing that the Off to tell any play energy that I want to write edit authentication.
I'm giving it a really large number off packets so that it keeps sending the authentication packets
to both the writer and the client and keep the client disconnected.
I'm using Dyche a.
To specify the MAC address of the tarrega Throughout the target access point.
Then I'm using by C to specify the MAC address of the client.
Finally I'm giving it more than zero which is the name of my wireless adapter in wanting to mode.
Now you can run the command like this.
And in most cases it would work.
But in very rare cases This command will fail unless air or dump energy is running against the target
network.
So what I'm going to do now is I'm going to go back to my first terminal in here and I'm going to run
air or dump energy use and become mad that we've seen before and I don't want to write anything to our
file so I'm going to remove the right argument.
So just do one normal error.
And you command.
I'm literally just give it the obss idea of my target network and I'm giving it the tarrega channel
and then I'm just going to hit enter.
We see how to do this.
We spent a full lecture on it.
That's why I did it through the quake and then I'm going to go back to the command that we wrote so
far and I'm going to hit enter now as you can see airplay energy its Tell me that it's sending the authentication
packets.
And if we go back here and look up.
You can see that I actually lost my connection and I'm trying to connect back.
So obviously if I try to look for anything.
So let's say test too you'll see.
I'll get stuck and nothing will load for me.
So the only way for me to connect back is if I go by key.
If I quit this by doing controlled C quit this again.
And now my machine should be able to connect back and restore its connection.
This is actually very very handy in so many ways.
It's a very useful social engineer in cases where are you could this Kinect clients from the target
network and then call the user and pretend to be a person from the i.t. department and ask them to install
a virus or a back door tell them that this would fix their issue.
You could also said create another fake access point and get them to connect to the fake access point
and then start spying on them from that access point.
And we'll see how to do that later on in the course.
And you could also use this to capture the handshake which is what happened in here actually.
And this is vital when it comes to WPA cracking.
And we'll talk about this what we get to the WPA a crime section.
So like I said this is a small attack that can be used as a clogging to other attacks or to make other
attacks possible.