Moving on to this chapter about how to attack modern wireless networks.
We will discuss several things the web protocol WPA WPA to unnerve Libya three W.P. s..
And we will discuss as well different tools several standards actually exist to allow the interaction
between different Wi-Fi devices or wireless enabled devices.
The most famous standard is the Triple E eight or two point one one with its various specifications
like the a b g and and actually this standard doesn't specify anything related to security from here.
Researchers have to come up with extensions and develop extensions in order to allow the establishment
of certain security mechanisms and actually these extensions are called WPP WPA WPA HQ and recently
WPA 3 has been approved since the beginning of 2013.
Security in a network where no physical security exists is really a big issue and you are exposed to
different kind of attacks such as men in the middle attack.
Someone can capture your session and redirect you to somewhere else.
So it's really important to know about wireless security.
A quick comparison between WEP WPA and wpa 2 as you can see the names WPP was introduced in the 90s
while WPA to in 2004 and then WPA a 2005 the cipher is our for for a weapon WPA and it's the enhanced
A S for WPA troops as you can see it wpa 2 was going to be the most secure security extension a key
size varies from 40 bits and WPP to 1 to admits in WPA and wpa 2.
And the key is static in web.
So for that it's sprawl much susceptible to attacks while the key encryption key changes uniquely in
WPA and WPA to WPA as when we say WPA.
It's actually why fight protected set up so you can see here on the screen some routers are enabled
with this WP Yes hardware button and you can as well enable it and some of the rotors from the set up
itself from the application itself you can go here.
This is my router here you can go to wireless AWP as you can click on it to disable WB as you move it
to enable it.
What does this button actually do.
Well this button enables you to access your rotor in a fast way so you don't go to go to the extensions
WEP WPA and WPA to actually if you have WPA enabled it will not work on the web.
Extension enables doctors so one swap is enabled WP is disabled by default so it actually works on WP
8.
Also that would be a two routers so it's about double as it has 8 digit bends and it allows you to connect
in a fast way to your right.
So again this is we can see if you were able to crack AWP as spin you can have access to the rafters
regardless of the actual there or the common phrase used.
So even if you change the common phrase in WP 8 you can still run some applications in Cali that we
will see later on in the chopper that it can recover the password in a means of seconds not even minutes.
So this is again an important thing to know about why it disrupted the tools that we've been using for
the attacks are listed here.
So actually do any of these tools can perform WPA dedicated to web and WP setups for the sake of exposing
you to different tools.
I'll be using a different tool for each kind of attack.
So for the WPA to attack and we will use these applications Amon our dump and aeroplanes so everyone
actually puts the wireless card you'd wireless card into monitoring mode so it will monitor what's going
on around you.
The air dump will actually save the traffic that's going on around you to be camp fire and the air play
will enable you to inject some packets into this traffic.
We will see this into details for the web attack.
We will be using a tool called Fern Wi-Fi.
It's a simple tool where it can crack and recover the web keys so we'll do this into details as well
and as fully WP as hacking we will use an application called Riva doing some wireless attacks especially
that we're using the virtual Kali image on VM where so I fixed some issues actually using the virtual
machine goes by before the virtual machine.
Kelly doesn't have access to my built in network Corp as you can see here.
There is no connectivity to the wireless network so I had to get an external buy five years be Wi-Fi
adapter and connected and you can actually connect it as well.
From this menu here is a typical link wireless just built up there.
Just press connect and you will be able to have a Wi-Fi connection here.
So after plugging the use be wireless card you should be able to see the connection from here or you
go to the terminal and issue the command em on Dash and G and you'll be able to see the interface here.
Actually remove the card now but what I've done is that because of face issues using the term Wes Clark
I've created a life Collie beautiful USP.
From there you can actually boot your laptop from this SB disk and have access directly to the internal
wireless card without going through the hassle of having an external wireless card etc..
Because it was giving some errors and it's easy to do that.
Actually you just go to the Internet Explorer or from here and go to the Cali download page
and just go there and download the relevant image that you have and then go to source for it and download
this application when 32 disk images.
Download this application here and open it from the desktop.
It's a very simple application you just select the image that you've downloaded here and then select
the USB drive and then press right it will write it will create a beautiful yes be this with counter
image on make sure to change the sequence of boot on your laptop.
And here we go you can boot directly from.
It's important as well to know before going ahead with the actual examples here that Wi-Fi use is a
four way handshake as opposed to the trivial three way handshake we've seen earlier going into the details
of how this handshake is established is beyond this course but it's important to know this as a prerequisite.
There's a four way handshake being established or being negotiated before the connection is established.