OK, so before we actually learn to crack into well, try to understand it and his weaknesses just a
little bit more so WEAP is pretty old.
It dates back to 1997 when Wi-Fi was first introduced to the world.
I was five years old a long time ago.
The main floor, though, with WEAP was use of small IVs, and the size of the encryption key, which
was pretty small, was either 64 bit or 128 bit.
So in the IVs they make up twenty four bits of the encryption key and they were used along with the
secret key to encrypt with the C4 cipher.
So each packet is supposed to have a different I.V. but due to its size, reuse is very common, like
on a busy network.
So since the IVs are only twenty four bits long and the rest of the key is always the same, the total
number of combinations are very small and pretty easy, you guys.
So at the RC four cipher screen for a given IV is actually found.
An attacker can decrypt packets that are sent that were encrypted with the same IV and we can forge
packets.
So this means that you don't really need to know the Webbe to decrypt packets if you know what the key
string was used that was used to encrypt that packet.
So, you know, technically you are doing manually.
I know it sounds a little bit complicated.
It's got like a high level of how it works.
But we have tools that can do this automatically and literally in a matter of minutes or maybe even
seconds, we're going to be using called aircraft.
And so it is primarily used to hack into, you know, wi fi networks.
And it has a whole suite of different tools that we're going to be using that's going to help us attack,
you know, web networks and also networks later on.
So the first attack that we're going to do is actually, you know, capturing packets and then we're
going to crack the key using those packets is basically what we said before.
So we're going to use arrow up M.G., part of the aircraft and G suite to capture a large number of
packets flowing over a network, you know, into a file.
And then we're going to use that file to actually crack the Web key, you know, with air cracking.
So now let's go over to our seen scene, actually try to do this attack.
OK, so back on Callaghan's machine.
So I went and changed my router settings.
I turned.
So for WEAP, I had to go to down to a two point four megahertz frequency for it in order to enable
weapon.
I put it like a password in areas like Hack Me Please with to ease on it and try to fit like all the
characters.
It's like a certain character requirements how to do that.
So now we're going to try to see if we can find the network with our wireless card.
So let's check to make sure we have config.
OK, we still have a W lan device there and it is running in monitoring mode.
So we're going to do our first command.
So we're going to try we're going to try to capture all the two point four gigahertz networks.
So that's the arrow dump and G and then Dash Dash band and we're going to be and then put Queenland
zero because that's the interface that we're going to be using.
And B represents two point five gigahertz frequency and then we're going to go ahead and enter.
We have to be Souto.
So actually one way to avoid having to do pseudo autonomous or pseudo high command and you become route.
So now we can try to stay in command without having to do that.
It's kind of annoying anyway.
So that says Band B between zero and then now is capturing all the networks that are in two point four
gigahertz.
And now would you want to do is actually look for the one that is for your network, so mine is probably
the one right here that's is the only Web network.
So let me expand this really quick.
So it has the names over here.
So this is mine right here.
OK, so what we're going to want to take note of is the B side.
So for my network is this one right here.
So I'm going to want to copy that.
And this is how this is going to allow us to actually directly target that network.
So now let's see who's connected to this network.
So we do Arrow, Dump and G again and then Dash, Dash B as a side.
And that's just the name.
It's going to be your the Mac address of your router.
So we're going to paste what we copied and then we're going to choose channel.
So you see the column, we need the channel numbers.
So for mine it was to do Channel 11.
So it's to 11.
And then, right, this is not allow us to right all the data that we're capturing into a file.
So we're just going to say, Watpac, what it's going to say that and then DoubleLine zero is the interface.
So this is the command.
So now let's say enter and let's see what happens.
So now what is it going to do is going to start to capture the different devices that are actually connected
to the network.
So let's give it some time and we'll see, you know, exactly what devices are on this network.
OK, so my laptop is the only thing that's connected there.
And you can confirm that this is the address, the Mac address for your computer that you're testing
like that's connected to the network.
You can go do like in Windows IP fixation on look at the physical address for that adapter on this connecting
to the network, and then you'll be able to see that it actually matches, sort of knows that this is
this is my it sees that my laptop is connected.
OK, so for this attack, what we're going to do is so we have now this dot cap file.
OK, so what we're going to do is we're going to use aircraft and G to actually try to decrypt and spit
the key out.
So let's do air, crack, dash and G and then the file names of Watpac zero one cat.
And then we're going to enter and now is going to is going through and is going to try to hack, so
now so it says I didn't have enough initialization vectors.
So I'm going to do is I'm going to go back and run the other command again.
And we're going to we're going to try to write this again, and I'm going to try to get my computer
to do a lot of traffic.
So I'll be back and we're going to see how many how many different packages capturing.
OK, so I have this running still is capturing a lot of packets.
Said about sixty thousand right there.
So we can go ahead and try the aircraft and command again and see if it actually works.
OK, so it actually works.
So after it captures sixty thousand lives, it actually was able to crack the password.
So it actually got to ask you for my right here and it also has the X format right here.
So what we can do is just to test, to make sure that actually works, that you guys don't think I'm,
you know, making up.
We can just copy that and what we can do.
Is we can try on my computer, so let's go, let's disconnect.
OK, so that's asked me to enter the network, so I actually put I'll just paste it in there.
So let's see, it's going to be hack me, please, to ease on the air and just see you guys can see.
How can we please.
Next, verifying and connecting.
And we should be able to successfully connect to this network, so it's saying that it isn't secure.
This is like a windows, I guess, security feature in some way.
It doesn't stop you from connecting those still connecting.
And now we have a.
Successful Internet connection.
It is connected, so we're good to go.
We learn how to crack weap encryption and this was the highest level with the 128 bit key.
So and it was still able to crack, you know, in a short amount of time.
It only took, what, six seconds?
OK, so that's pretty cool.
So now what we can do is move on to try some other types of attacks.