Original subtitles

1

Okay now in the previous lecture we've seen how we can fix the association problem if river could not

2

associate with the target and was just giving you the fail to associate problem in here.

3

And we've seen how we can fix that by manually associate with the target.

4

Now in many cases that said that'll be the end of the issues.

5

So that was a completely separate issue that we solved.

6

The problem is after we solved that issue we ran river.

7

We bypassed that issue but we were kind of stuck at 0.00 percent and the river wasn't moving.

8

It wasn't giving us any information.

9

So we really didn't know what to do.

10

So we're kind of stuck on what's the next step.

11

So what I want to show you in this lecture is a way of debugging and knowing what's happening in the

12

background.

13

And we'll see how to bypass the issue that's actually happening.

14

So first of all before I started trying solutions I want to know what's happening in the background

15

and to do that.

16

We're going to run the exact same command using the exact same sequence that we were doing before but

17

I'm going to add one more argument to the command and that is Dash the the read.

18

And what this does it basically tells River to produce verbose output which means that it will give

19

us as much information as possible about what's happening in the background.

20

Now we usually don't use this option because you'll see the screen will get filled with messages and

21

it will be hard to track what's happening.

22

But if you're getting stuck this is the only way for you to debug and know what's happening.

23

So I'm going to hit enter for this and it's asking me if I want to continue I'm going to say no because

24

I like to always start from scratch especially if I didn't make any progress.

25

And before I do that I'll get my command ready here and I'm going to hit enter here you go back here

26

hit enter to associate and let's see what's happening.

27

So I'm going to let this run for a little bit and then I'm going to Control-C out of it obviously because

28

we know this is actually not going to work.

29

And once we once we stop we're going to analyze the output and see what's happening.

30

But as you can see it with using a lot of output.

31

And that's why we usually don't use it.

32

Should we be worried.

33

Because if things are going well we actually don't need to see these messages.

34

OK.

35

And I think this is enough for us to know what's happening.

36

So I'm just going to Control-C here and I'm getting Control-C in here.

37

I'm going to bring this down a little bit so we can focus on the top so we can see the start here.

38

We can see that it associated here with no problem.

39

So that's all good and we can see this is the first pin that it's getting so 000 5 5 6 7 3 now it's

40

sending the requests.

41

And as you can see it's getting a time out error.

42

Now let's keep going and see what's happening.

43

Now we can see after sending the snack packets we're getting a message saying WPX transaction failed

44

and it's going to try the last pin so it doesn't know whether this point is valid or not.

45

So it's just going to try the exact same PIN again looking back at what's happening.

46

The same thing happens that it sends a WASC nag and then again the same thing happens the transaction

47

fails goes back to trying the same exact pin go down and say the same thing happening and it's still

48

trying the same pin now.

49

Looking at this let's look at the help.

50

So let's do river dash dash help

51

so show us all the options that we can use with the river.

52

And if you look in here you'll see we have an option of capital and or dash dash no knocks.

53

And what this does it tells River not to send NACC messages when out of order packets are received.

54

Now looking at the output here at the way that river keeps receiving these packets and then it's repeating

55

the same thing because it's sent in the WSC now.

56

We can't try to tell the river not to send the snark and just keep trying and see if this actually fixes

57

the problem because it looks like it's the WASC nak packet's that's causing rebirth to get stuck in

58

this loop.

59

So I'm going to run the exact same command again and this time we're either in one more argument and

60

we're saying no no x.

61

Ok so I'm going to hit enter again I'm going to say no to start from scratch and I'm going to prepare

62

my command here.

63

So Antar Antar and let's see what happens.

64

Now reverse try and this spin which is 0 0 0 0 5 6 7 8.

65

Let's see if the next pin is going to be different.

66

Now I already know the spin is different than the first one because I noticed the first one but let's

67

see.

68

And boom your next pin is different now.

69

0 1 2 3 5 6 7 8 and again.

70

And you pin.

71

So we're doing 1 1 1 5 670 and perfect So so far.

72

River has tried four pins and it's actually making progress so we're not stuck at where we were where

73

we managed to bypass the zero x 2 ends your x 3 issues and now we can just let weever work and brute

74

force the password for me.

75

Now it detected a period delimiting which is another issue that I'm going to cover later but for now

76

we managed to bypass the Zura x 2 and 0 x 3 issue.

77

So the take home lesson from this lecture is you can do with the minus v v v to debug and see exactly

78

what's happening in the background.

79

You can do dash dash help to see the options and we see how we can use the known acts to bypass the

80

0 x 2 0 x 3 issues.

81

Now I want to note that each of these issues now with the router I have right now is a very stubborn

82

one.

83

So probably you might not face all of these issues that I'm covering now in a router for example you

84

might face the issue that I covered previously about the association but everything will run smoothly

85

after that.

86

Or maybe you could associate with no problem.

87

You won't need to manually associate but you'll get stuck after that and you'll have to run v.v see

88

what's happening and then maybe use no knocks like I showed you.

89

Or maybe you won't face any of these issues and you might jump straight to the rate limiting issue that

90

we're getting right now.

91

I said I'm going to cover later.

92

So each of these issues I'm putting them in a different lecture because you might only face one of them.

93

And obviously there might be the case where you face two or three of them like I'm showing you right

94

now.

95

But the idea is you might actually only face one of these.

96

And I want you to understand how to bypass each one of these issues individually instead of just giving

97

you along River command that will bypass or that will try to bypass most issues.