Hi.
Welcome back.
In this lecture we are not breaking WP security with fake light.
There is no computer associate war connected with Internet on that explained in the previous lecture.
We learn how to breaking WPC Katie with active mind in this video.
I'm going to use two different attack method.
First one is called core Chop Chop attack and another one is fragmentation attack that chop chop.
Attack can decrypt WP data packet without knowing the key.
And it worked on dynamic WP also.
However this attack doesn't cover WP cute self as you see later in this video.
It just revealed a plain text.
So what are your players gonna do.
You're just gonna try to guess raced off the missing data as first packet hater are predictable if you
kept your IP packet your plate check some of the header is correct after guessing are missing part.
The only other thing to do with this attack is it's going to require at least one did a packet from
the access point.
So we're gonna go ahead.
I'm good I'm walking through the attack so first open up a terminal and type if config
I'm gonna use this well in one interface for the setting.
Now so this code into monitor mode so I'm typing Jarmon dash and G then this type.
Type start space then your interface name then presenter mine is while in 1.
My code is down one of trauma
as you can see in my new interface.
Name is monster now scan the network for wireless access point air Ram dash Angie space then type interface
name then press center minus mods you can go ahead and we can stop this weight control.
Plus see we found our target access point.
Now I'm gonna write down some detail about my target in a text editor so that I can use that for later
I'm gonna monitor these particular Wi-Fi access point so type error dump Dash.
Angie that is space dash dash.
Be a society then type the Mac address.
I'm gonna copy and paste
dash C for channel then type does stuff you for right to find
then type the interface name minus 1 0 then PRESENTER Now it's monitoring this channel and for this
edit we don't have any client connected so we're gonna have to generate our own data.
Now we're gonna create our own packet that we can very plain to the network then you have the right
plane for track the password we need for roughly around 30 to 40 thousand data.
Now we are going to associate a computer with access point so tight.
Your play dash and G then space one for the fake authentication then space 60s for time delay then a
space dash E for access point MAC address
then type the interface name manage monster then presenter.
Now we're going to look for a specific packet that you're gonna be on location so running comment type
airplane dash Angie space then type dash for 4 Chop Chop outer
then type dash B
then tie backs point Mac interests then tie dash H for client mac address
it shall be my interface MAC address and as you can see here this is the client MAC address I'm gonna
copy and paste
then type the interface name Mosier then percenter
not type Y for years to use packet.
So this is gonna go ahead and look for packet.
And one thing is so easy to understand that short amount of packet is taking short time and a use amount
of packet take longer time
and I'm gonna pause the video until Leaf's hundred person done and after that I will continue
okay.
So as you can see here my access point was appearing in a drop packet shorter than 40 parts.
So from here I'm gonna go ahead and we can create our own packaging that is going to play into the network
to get that data 2k lined.
Now we are going to type a comment packet force dash and G and if we hit enter it shows off the models
that we're going to use in this comment.
See here ERP for forcing ERP packet UDP for forcing UDP packet and ICMP which is a pink packet.
No.
And custom if you want to build a custom packet.
Now I'm going to type it common for for senior pay packet.
So type packet force and dash AMG space dash 0 is for forcing an error packet space dash a then type
the access point mac address
that is space dash each for climactic press
a space that's key for destination ip address
type to broadcast IP address
space and then type Dash I for source IP address type broadcast IP addresses key that is space necessary
for specify that case stream finally
so copy and paste the finding
then type space and DSW for right package to pick a fight typing finding then presenter.
Now we're going to type a comment.
Your play dash and G dash to shill for C4 use this off your dash LG and then PRESENTER And now as you
can see here does too which use for interactive packet Wordplay.
Now we are gonna do replay the network.
So type of comment.
Yeah.
Dash.
Angie space dash to ease for it in our tip package replay dash our for the packet Daddy won a replay
space then typedef by the name
then type the interface name minus mojo and then PRESENTER We're gonna use this packet.
So type Y and then presenter and as you can see here we are injecting Packard and it's climbing up very
fast.
Now we are gonna crack W.P. key so type the comment error correct.
Dash and G.
Space the final name of your capture file
then presenter.
Now it's gonna take the data that you're collecting and it's gonna try to crack the key.
I had created enough data packets so that the key has been cracked.
Immediately
now copy the key and paste into a text file
and remove the hyping from the key.
Now use the key to connect to the targeted wireless network.
And I'm gonna use it right now
okay.
Finally see here.
I'm connected now with my victim network.
I'm using his network.
So let's check my internet connectivity and pinging to Google dot com
okay.
I got the ping response so I'm okay with my internet connection.
So guys now we know how to break WP security with fake client and that's all for this lecture.
So see the next one.