Hi and welcome back in this lesson, you learn how to detect why fly attacks using Wireshark.
Now, for those who don't know where the shark is available for free or Wireshark, that all good.
And you can download for Windows, macOS and Linux.
OK, now let's start capturing packets.
So here, select your wireless interface and click Start Capturing.
Now, in most cases, the attacker who is performing the evil twin attack will try to disconnect users
from the original access point.
So using Wireshark, you can detect the authentication packets.
OK, now let's go to the terminal and let's pretend the attacker will use the airplane got indication
command, which you can see here.
And press enter.
OK, so let's go back to the Wireshark and stop the capturing process, and let's see only that the
authentication package by typing the following filter double NFC type subtype equal equal 12.
And you can see all the the old indication frames, so at this point, you will know that someone is
messing around with the wireless network.
No, you can check if the attacker is targeting your wireless router or the network where you are connected
by using WD and BCIs ID Equal Equal and put the Mac address.
And you can see someone is targeting this Mac address.
So that's it for now.
Thanks for watching and what's your next story?