Hey there.
I'm Ricardo.
I'm a cybersecurity specialist,
and I'll be showing you how to use the aircrack‑ng to get
initial access to wireless networks.
Testing Wi‑Fi networks is extremely important because in the majority of the
cases it will give access right into the internal network.
And the best part is you don't even need to be physically
inside of the office to get access the network.
You can just park your car close by and hack away.
Aircrack‑ng is one of the most used frameworks for
wireless security assessments.
This tool was developed by Thomas d'Otreppe, which is also known as Mr.
X.
And thanks to him, my life as a red team specialist is way easier.
Also, I learned a lot from Thomas in DEF CON talks,
so if you haven't checked them out, I do recommend them.
So, thanks, Thomas.
The aircrack‑ng is actually a fork from the original aircrack 2,
and this fork became the most famous Wi‑Fi assessment tool.
The aircrack‑ng is a complete suite of tools to assess Wi‑Fi network security.
This framework contains a lot of tools that can be used to monitor,
attack, test, and crack wireless networks.
What I love about this tool is that it's very simple to launch
attacks. And also, because it's a command‑line tool, you can create
your own scripts to automate the whole process.
The aircrack‑ng is an open source tool for Wi‑Fi security assessments.
It is available under general license, meaning that you can use it for free.
The aircrack‑ng is the most used tool by wireless penetration testers.
As you see, it has tons of features.
Also,
this framework is included in the majority of the Linux security distributions,
such as the Kali Linux and the Parrot Linux.
But if you want to install it in your favorite operation system,
you can just download it directly from this GitHub repository.
Also,
you can use the aircrack to crack both WPE networks and
WPA networks. And if you're successful,
it can give you initial access to the company network.
So, if you're familiar with the red team kill chain,
the aircrack‑ng suite can be used in the recon, as
well as the exploitation phases,
which means with aircrack you can find potential target
networks and exploit some of the WPE and WPA
vulnerabilities to get the Wi‑Fi password,
which then will give access to the internal network.
So, if we map the techniques that we learn in this
course to the MITRE ATT&CK framework, you see that we cover three areas.
The main one is the initial access, or more specifically,
the technique T1465, which is attcks to Wi‑Fi access points.
Also, as the aircrack can be used to brute force WPA2 passwords,
we can also map the aircrack to the T1110 technique,
which is brute force techniques.
And last, but not least,
you'll learn how to use the aircrack‑ng to cause a
denial‑of‑service in a Wi‑Fi network,
which is the technique T1464 in the MITRE ATT&CK framework.
I want to quickly show you how attacking wireless networks
can help you on your red team engagement. Imagine you're
trying to compromise Globomantics, which is a medium‑sized consultancy company.
Their network looks like this one you're seeing in this slide.
Basically, most of employees have laptops,
and for this reason, when they're in the office,
they use the corporate Wi‑Fi to access the internal service.
You, as an attacker, can try to attack the Wi‑Fi
access point to get its password.
If you're successful, you have access to their Wi‑Fi,
and we have the same level of access then the other employees.
And with that, you're in the internal network,
meaning that you go ahead and try to hack the internal servers. Pretty cool,
right?
But before getting to the technical part of this course,
I want to keep in mind that hacking to Wi‑Fi networks without
authorization is illegal in most of the countries.
And this means that if you hack into someone's Wi‑Fi,
you may go to jail, and that's not cool.
So, it is important to stay legal. First, if you're
working on a red team project,
make sure you have a letter of engagement from the client
detailing the dates that the test will be executed,
as well as the type of attacks that are in scope.
Also,
it is important to have a formal document signed by the client detailing
and authorizing the attacks that you'll be performing.
And this is the document that differentiates a criminal from professional
red team specialist. And as a personal recommendation,
always consult the client before executing any
attack that may impact the network.
So, the bottom line, don't be a criminal.
To follow the demos in this course, you need two things.
The first one is a laptop or a virtual machine with Kali Linux.
In theory, you can use any Linux distribution you want,
as long as you install aircrack on it.
However,
I do like to use Kali Linux because everything in
preinstalled and ready to use. Here, in this case,
I'm using the Kali Linux version 2020.1, but you can
use any Kali Linux version you want.
All of them have the aircrack‑ng. Also, I do recommend you
having an up‑to‑date operational system.
For that, just open the terminal and run apt‑get update and then apt‑get upgrade.
This will install any updates and upgrades in the operational system.
The second requirement is a Wi‑Fi network card that supports monitor mode.
If you're familiar with monitor mode,
it basically means that the network card should be able to sniff
wireless traffic and inject packets into the wireless network.
Just google network card monitor mode,
and you'll find a list of all the network cards that supports monitor mode.
My two favorite network cards for this are the TP‑Link 722N and the Alfa 036NH.
Both of them are supported by Kali Linux and the aircrack.
And in this demo, I'll be using the TP‑Link one,
which I paid less than $15 on Amazon.
So, if you're ready,
let's go to Kali Linux and see how to crack some Wi‑Fi networks.