Original subtitles

1

Another method of increasing the number of data rapidly and a network that has no clients associated

2

with it or if it has very low traffic is car chop chop attack and this method and instead of directly

3

injecting the R.P. packet that we capture we're going to try to determine the keystream for this package.

4

Once we do that then we can create a new package.

5

So we're going to forge a new package and inject this new package into the traffic.

6

This will force the access point to create a new package with a new ID.

7

We're going to capture it and inject it back into the traffic.

8

We'll keep doing this until the number of data is high enough to crack the worki.

9

So the start of the attack is going to be very similar to the one in the previous video.

10

The first thing we're going to do is launch a dome against the target network.

11

So I'm just going to call this chop chop test.

12

And here we go.

13

We have our target network here.

14

The second attack that we're going to try to do is the fake authentication attack.

15

Again we do this so that the target doesn't ignore us.

16

And as you can see we're successfully associated with the terrorist network.

17

Now the third attack is going to be our core chop shop attack in which we are going to try to capture

18

a packet and determine its keystream.

19

So it's going to be very similar to the

20

fake authentication attack it's going to paste here.

21

So instead of having fake art it's just going to be chop chop and then instead of a we're going to have

22

V for OBSS ID.

23

So a replay and you chop chop the MAC address of the target network and then my own MAC address and

24

then the name of the wife I carried with my daughter.

25

We can get my own MAC address from a config LAN zero and then my MAC address will show up like this.

26

So I'll just do another association with the target network.

27

And then I'm going to do my choke attack now.

28

Airplanes is just waiting for a package.

29

Once it capture that packet.

30

It's going to ask me Do I want to decrypt it and determine it's keystream or not.

31

So we're just going to wait for it.

32

I'm going to say yes please.

33

And now it's working to try and determine the keystream for the target access point

34

OK.

35

Now I've received the video.

36

Just want to show you that we've reached 86 percent.

37

We can still actually use this keystream it might work.

38

It might not work but we can still try and.

39

And sometimes I remember I had like 64 percent and I still was able to forge a packet and inject it

40

and successfully injected into the traffic.

41

So let's try this now the keystream is saved into this file.

42

So now the next step is to force fake packets.

43

We're going to do this using packet forge.

44

We're going to put mine all zeros so that it creates an AARP packet for us.

45

The MAC address of the target network and my own MAC address same as this page.

46

So I'm just going to copy and paste them.

47

Here we go.

48

Then we're going to put

49

destination IP we're just going to set it to 2 5 5 and then we're going to set the source and it's going

50

to be 2 5 5 again that's just information that has to be there in the packet.

51

And then we're going to use the option y to specify the name of the keystream file.

52

And it's this file as you can see file that was created in the previous step.

53

So we're going to pace that.

54

And then the name of the first packet.

55

So what do we want it to be called.

56

So I'm going to call it

57

chop chop or pocket

58

and that should be in option options.

59

So that's the option.

60

So let's just go again over the command.

61

It's packet's porch and G minus zero to make an IRP packet.

62

The market was of the target network the MAC address of my Wi-Fi card then we put the destination IP

63

source IP and then we put the file that we created and the previous step and the name of the first packet

64

that's going to be created.

65

Now the next step is where we're going to inject this first bucket into the traffic and to cause the

66

number of data to increase rapidly.

67

So I'm just going to go to fake authenticate myself again just here and then just really clear this

68

play and get to inject our fake packet into the target network.

69

So minus two for the replay attack and then or to choose the fake packet and then we put the name of

70

our Wi-Fi card so minus two for a play or the name of our packet the first packet and Montsoreau.

71

So I'm just going to associate myself again and I'm going to hit enter here.

72

It's going to ask me Do I want to use this packet I'm going to say yes and here we go you can see the

73

number of data increasing very very quickly.

74

Again I only had 86 percent of the keystream I wasn't able to decrypt the whole keystream but the attack

75

is still successful.

76

That's why I've had good luck with this attack with networks that are far away or with net worth Stubber

77

networks that the first method didn't work against.

78

So all we have to do now is just wait for the data to reach around 20000 and fire up aircraft.

79

And again as we did in the previous two videos and it's going to work it's going to get us the key straightaway

80

we're just going to do it here.

81

You know it's just that in the name of the file is chop chop with

82

so choke choke test you're on.

83

Here we go.

84

As you can see we've got the key with 23000 Ivey's basically just going to go again through the steps

85

of this method.

86

So we capture the packet.

87

We try to determine it's keystream we only determined 86 percent.

88

We use that 86 to create a fake packet and then we injected that fake packets into the air.