Original subtitles

1 1

Now that we have enabled monitor mode 2

2

on our wireless interface, 3

3

we are able to capture all the wifi packets 4

4

sent within our range, 5

5

even if the packet is not directed to our computer, 6

6

even if we're not connected to the target network, 7

7

and even without knowing the key 8

8

or the password to the target network. 9

9

So all we need right now is a program 10

10

that can capture these packets for us. 11

11

The program that we're going to use is called Airodump-NG. 12

12

It's part of the Aircrack-NG suit, 13

13

and it's a packet-sniffer, 14

14

so it's basically a program designed 15

15

to capture packets while you're in monitor mode. 16

16

So it will allow us to see 17

17

all the wireless networks around us, 18

18

and show us detailed information about it's MAC address, 19

19

it's channel, it's encryption, 20

20

the clients connected to this network, and so on. 21

21

So, let me show you how we're gonna use it. 22

22

First of all, you need to enable monitor mode 23

23

on your wireless adapter, as shown in the previous lectures. 24

24

So, if I go to my Kali machine, and run iwconfig 25

25

to list all the wireless devices on this computer, 26

26

you'll see that I have an interface called mon0, 27

27

and this interface is in monitor mode. 28

28

Now dependent on the way that you enabled monitor mode, 29

29

this can be called lan0, it can be called lan0mon, 30

30

it doesn't really matter. 31

31

You just wanna make sure you enable monitor mode 32

32

using one of the methods shown before, 33

33

and then, use the name of the adapter 34

34

that is in monitor mode when you run Airodump-NG. 35

35

Now to run Airodump-NG, 36

36

we're just gonna type the name of the program, 37

37

which is airodump-ng, 38

38

followed by the name of my wireless adapter 39

39

in monitor mode, which is mon0, as you can see in here. 40

40

So the command is very simple. 41

41

We're typing the program name, which is airodump-ng, 42

42

followed by the name of my interface in monitor mode. 43

43

If I hit Enter, you'll see it'll start working, 44

44

discovering all the wireless networks around me, 45

45

and displaying useful information about them. 46

46

This program will continue working unless you quit it, 47

47

and to quit this program, 48

48

you have to press Control+C from your keyboard. 49

49

You can actually use Control+C 50

50

to quit any running program in your terminal. 51

51

Now that we stopped the program, let's analyze the output 52

52

so we understand what it's showing us. 53

53

So first of all, if we look at this column, 54

54

the ESSID column, it should be a little bit familiar to you, 55

55

and basically this shows us 56

56

the names of the wireless networks around us. 57

57

So if I just go to my Mac machine 58

58

and look for wireless networks, 59

59

you'll see the same names that we see in here 60

60

displayed under the ESSID. 61

61

Now all of the other columns show us more information 62

62

about the network name that you see in here, 63

63

and this information will actually be very useful to us 64

64

as we go through the course. 65

65

The first column, the BSSID, 66

66

shows us the MAC address of the target network. 67

67

Next, we have the PwR. 68

68

So this is the signal strength, or the power, 69

69

of the network. 70

70

Now the higher the number, the better signal we have. 71

71

So for example, the network with the best signal right here 72

72

is this one. 73

73

Next, we have the beacons. 74

74

These are frames, sent by the network 75

75

in order to broadcast it's existence. 76

76

So every network, even if it's set to be hidden, 77

77

always sends these type of frames, 78

78

basically broadcasting it's existence, 79

79

and telling all the wireless devices around it 80

80

that "I exist, I have this BSSID. 81

81

"I work on this channel, I use this encryption, 82

82

"and my name is this." 83

83

Next, we have the number of data packets, or data frames, 84

84

and these are the useful packets 85

85

that we'll talk about later on, 86

86

once we get to the cracking section. 87

87

This column represents the number of data packets 88

88

that we collected in the past 10 seconds. 89

89

Next we have the channel, 90

90

which is the channel that the network works on. 91

91

So for example, this network right here, the Test AP, 92

92

works on channel 6. 93

93

This network works on channel 1, and so on. 94

94

Next, we have the maximum speed supported by the network. 95

95

The encryption is a very important column, 96

96

and it shows us the encryption used by the network. 97

97

So we can see that the Test AP network is using WPA. 98

98

We can see we have a network that uses WEP. 99

99

We can see this network right here is an open network, 100

100

so it doesn't use encryption. 101

101

We don't even need a password to connect to it. 102

102

And we can see we have a WPA2 network right here. 103

103

CIPHER is the cipher used in the network. 104

104

So we can see here we have CCMP, we have WEP, 105

105

and we have CCMP again here. 106

106

AUTH is the authentication used on that network, 107

107

and in here we can see it's PSK, Pre-Shared Key, 108

108

and MGT for this network. 109

109

Now don't worry about the ENC, the CIPHER and the AUTH. 110

110

We will talk about breaking into all these networks, 111

111

into WEP, WPA, and WPA2, 112

112

in the gaining access section. 113

113

And finally, you can see we have the ESSID section, 114

114

which shows the name of the network. 115

115

So this is what you see when you look for networks 116

116

in your network manager. 117

117

So that's it for this lecture. 118

118

I just wanted to give you a quick look 119

119

on how to discover all the networks around us 120

120

using Airodump-NG. 121

121

Don't worry about Airodump-NG too much now. 122

122

We're gonna be using it a lot in the next lectures, 123

123

and you'll get very comfortable with using it 124

124

as we go through the course.