Original subtitles

1

The authentication attacks so we're still in our first section of the course which means all the attacks

2

that we're going to talk about are attacks that we can launch on any network that is with or within

3

our Wi-Fi range even if the network has encryption even if it uses a key.

4

And even if we don't have that key.

5

So we don't have to connect to any network to launch these attacks.

6

The authentication attack is very useful.

7

It allows us to disconnect any device from any network that is within our wildfire range to do this.

8

We're going to spoof our market just to the target client market.

9

So the target client is the client that we want to disconnect.

10

We're going to present to be him and we're going to send the authentication packet to the router.

11

So we're going to tell the router I want to disconnect from you at the same time we're going to spoof

12

our MAC address to the Access Point Market to the router's MAC address and tell the target's client

13

the client that we want to disconnect.

14

We're going to tell him you need to re authenticate yourself.

15

So when we do this we're going to successfully disconnect the target client.

16

So we're going to pretend to be the target client and tell the access point that we need to disconnect

17

from you we want to disconnect from you.

18

And then we're going to pretend to be the access point and tell the client you need to reconnect if

19

you need to re authenticate yourself.

20

When we do that the connection is lost.

21

We're going to use a tool called airplay ngi to do it.

22

So let's see how we can do that.

23

First of all when you we're going to need to run aero dump energy on the target network because we want

24

to see which clients are connected to it.

25

So we to see what devices are connected to this network.

26

So our first command is going to be Aradigm and G.

27

And I'm not going to need the right option so I'm just going to delete it here.

28

So I'm going to need this arrow dump and the channels we put the channel of the target network and be

29

is ID the MAC address of the terror network.

30

And hit enter and now we're sniffing on my tag network which is UPC 1:54.

31

So my target device is going to be this device and this method would work on any device whether it's

32

a Linux Windows Mike.

33

If it's a phone Android it doesn't matter they all use the same method of transparent packets.

34

So it's going to work on any Wi-Fi enabled device.

35

Let's make sure we have a connection here.

36

I'm just going to go to Google dot com and make sure I'm connected to the Internet.

37

OK so so we see now that Google is working perfectly.

38

Let's go back here and I'm going to say this year so we're going to run airplay ngi now to disassociate

39

one of the devices from the network.

40

We can run it to disassociate all devices but I found when I do that the year it doesn't really disassociate

41

all of them because we have too many targets to disassociate.

42

So I'm going to choose one target which is going to be this device a device that we just saw.

43

So it's going to be a play and you DVD-Rs the authentication attack and then we're going to put the

44

number of the authentication packets we're going send.

45

So I just put a very large number to keep the device disconnected.

46

Then we're going to put the target access point.

47

So it's the Mac address of our target access point.

48

This is it.

49

And then we're going to put the source for the client marketplace.

50

The that's the device that we want to connect and it's this device here.

51

So I put my kids they're just going to put one year of my wife I had with my remote.

52

So again airplane and Jeep Diaz the number of packets.

53

Then we put the Mac address of the target AP and then the Mac address of the device that we want to

54

disconnect to hit enter and reply you know send in the authentication packets.

55

Let's go to the target device and see if we still have internet connection.

56

And as you can see we lost our connection and it's now trying to reconnect.

57

It's not going to be able to connect because we're still sending the indication packets.

58

So this device successfully disconnected and we can launch this attack on any network that we want.

59

We don't need to know the username.

60

Sorry we don't need to know the password or the key to that network.