Original subtitles

1

OK so through all the previous lectures we see in all the weaknesses that can be used by hackers in

2

order to compromise where WPA and WPA to encrypted networks we've seen how can how they can use these

3

weaknesses to crack the password and get the actual key to the network.

4

We also see that the attackers are able to authenticate or disconnect any device from any network without

5

the need to.

6

Now the key to that network and in the previous lecture we've seen how we can modify the settings of

7

our routers so that we can increase the encryption of our network increase the security of our networks

8

so that hackers can't use the attacks and get the passwords.

9

Now in order to fly the settings that we talked about in the previous lecture you need to be able to

10

access the settings page for your router.

11

Now each router has a web page where you can modify the settings for the router and it's usually at

12

the IP of that router.

13

So first of all I'm going to check and get the IP of my computer or my device and I'm just going to

14

do if configured and zero and as you can see this is the IP of my computer.

15

So I'm going to open my browser

16

and I'm going to navigate to 1 9 2 1 6 8 0 and the IP of my computer was 25.

17

Usually the IP of the router is the first IP in the subnets.

18

So this is the subnets at the moment it's 1 9 2 1 6 8 0 and I'm just going to add number one because

19

that's the first IP in the subnet and that will take me to the router settings page.

20

And as you can see it's asking me to enter a username and password.

21

Now routers come in with pre-specified username and password.

22

You can check what's the default username and password and then I highly recommend you change them after

23

that.

24

So usually it's written in the manual.

25

So check the manual see what the default username and password and then you can logon

26

now.

27

In some cases the attacker might be doing the authentication attack against you so he might be preventing

28

you from connecting to your network wirelessly.

29

So what you can do is you can connect to your router using a cable using an internet cable.

30

And when you do that then the attacker cannot use the authentication attack to authenticate you or disconnects

31

you.

32

So you'll be able to access your other settings using the wire.

33

And then you can modify your security settings and change the encryption and change the password.

34

Do all the things that I recommended in the previous lecture in order to increase the security so that

35

the attacker will not be able to attack your network and get to keep Now the settings of each router

36

are different they depend on the manufacturer and even the model of the router.

37

Well usually the settings the way that you change the settings is the same.

38

And like 90 percent of the cases there either is always the first IP of the subnet.

39

So all they have to do is you get your IP used and if a command like we did here like we did here and

40

we got that and it was 9 1 9 2 1 6 8 0 25 that's the IP of my device.

41

And then I changed the last 25 to number one to the first IP.

42

And that is the IP of my router.

43

Now I'm going to navigate the wireless settings now as you can see there is a lot of settings that you

44

can change for your network and are concerned with the wireless things at the moment.

45

So as you can see my wireless is enabled they can change the name of the network you can't change the

46

channel and the bandwidth and all that.

47

So I'm going to go to the security.

48

And as you can see now I'm using WPA encryption with WPA or WPA to engage authentication and encryption

49

using an.

50

And TKI IP.

51

And if I go on WP as you can see that WPA is disabled as we said now so basically I'm not using WEP

52

so they cannot use any of the tasks that we spoke about that allow you to crack the encryption using

53

WPA which is much more secure.

54

And I disable WPX so they cannot use reverse to determine my WPA Espen and then reverse engineer my

55

password.

56

The only way that the hacker can access or get my password is by obtaining the handshake first and then

57

use a wordlist to find my password.

58

Now my password is very random even though it actually doesn't use numbers or digits just just letters

59

but it's very random so there is a really small chance of someone being able to guess that password.

60

Now there is another thing that I'd like to show you here is the access control and using this you can

61

add policies so you can add and allow policy or deny policy and use that is based on the mac address.

62

You can specify a MAC address is that you want to allow to connect to your network.

63

You can also specify MAC addresses that you can deny from your network.

64

So for example you can just if you if you don't have many people many visitors come into the house or

65

if you're in a company with a specified number of computers and you want to only to allow a number of

66

computers to connect to that network then you can just obtain ask the people get their MAC addresses

67

the people they want to allow and add them in an allowed list.

68

Now even if someone has the actual key the right key for your network and they don't exist in the white

69

list or in the allowed list they will not be able to access the network.

70

You can also deny list which is if you were you want to deny a certain computer or a certain person

71

that you think are suspicious.

72

You can just add their MAC address and deny list and they will not be able to connect to your network.

73

So this is about it as I said the search space usually look different.

74

The names might be called different names as in the names for each of these tabs but usually the main

75

thing is you're you should be able to access the router settings using the subnets IP and other number

76

one which is the first IP at the end.

77

And if you're being attacked if you can't connect to your network at all then just use a cable and modify

78

the settings like we discussed in the previous lectures.