So now that we know how to crack into the web now, let's go over how to crack the WPA and most likely
what you're going to see, you know, out in the real world.
So, you know, once we get, you know, obviously became, you know, an issue and it was easy to hack
and everybody was doing it.
They made WPA and WPA to, you know, as the replacements.
So they use much strong encryption methods.
And, you know, they're not really hackable by the same method as we did with each packet, with the
WPA and is encrypted with a temporary key.
So that prediction, like with the Ives and Webb or Webb, makes it almost impossible.
So the best method of actually trying to hack into WPA and the WPA to practically is to capture the
four way handshake.
So whenever you try to connect to a Wi-Fi network that's using WPA and WPA two, there's a four way
hand that kind of happens as you authenticate and and like like we first connect and try to authenticate
to the access point and this package that is sent back and forth, we can use what's in those packets
to actually figure out, you know, if Akeda we use, you know, is valid or if it isn't valid and can
be achieved by doing a deal authentication.
This act like knocking the host off the network and then there when you knock off, when you knock them,
want to know where they're going to automatically try to reconnect.
And when they reconnect, we're going to capture those the four way handshake for when they try to reconnect
to the network.
And we're going to use Arrow Energy to actually capture that.
Then we can use this.
We have the handshake packets.
We can go ahead and create a wireless and then we can recover that.
He with air can pretty quickly, pretty easily.
Let's go ahead and try it out.
OK, so we're going to crack into a WPA or WPA to we're going to go back to our callisthenics machine
and we're going to run an arrow up again.
So what I'm doing here, I have the best idea, the physical Mac address of the router that I'm trying
to get into, put the channel that is specifically on and I'm writing everything that is capturing to
a file called Aperture Handshake is going to go to the current folder that we're in.
And then I'm also specifying the band.
I found that if I didn't do that, I had some issues.
So you could do that, if you like.
And then I put my wireless interface, which is Dublin zero, and then we just run that.
And now it's going to start to pick up the devices as we've seen before.
So you can see up here, that's actually true.
Now for authentication.
Hospice care.
Appreciate Shirkey.
So now it's picking up the different devices that are actually connected to this access point.
So what we can do is we can run the authentication attack for the wireless card I'm using for my computer.
And it's currently connected.
It has a sort of there, but it's currently connected.
And I know that this is the Mac address for that.
So we're going to do every play and this dash zero followed by a space it in a zero is a dual authentication,
in fact, is going to send an infinite number of packets.
And so we actually tell it to stop and then dash a right.
Here is the Mac address of the router and then Dachsie is the Mac address of the client or their target
computer or, you know, my wireless.
And after that I have connected and I had issues.
If I didn't put this dash in there, it's going to be much like force the attack force in the packets.
So if you run into issues where it says, you know, no such business idea available, I would put that
in there.
And then the wireless interface, Dublin zero, and now it's sending the authentication packets.
And what I notice as well is that sometimes, you know, the computer might actually like or the wireless
adapter, it might actually reconnect very quickly.
So it may or may not affect the Internet connection, but it's still, you know, Cindi's the these
the authentication packets.
And I believe that some of them might not actually work.
But if we switch back over here, we actually see right here that we've actually caught the handshake.
So what we can do now is actually create a wireless so we can actually has a lot of this since we have
it.
And then we can cancel all of this as well, because we have the handshake and now it's captured in
that file capture handshake.
So what we can do is actually create a wireless with an application called Crunch, and it's going to
pretty much allow us to create a wireless that's going to let us, you know, try to pronounce brute
force and figure out using this file that we captured the handshake.
And we're going to use that, like we said before, against this wireless and try to figure out if,
you know, one of these passwords is going to work.
So I've already have a command prevent over here.
So the way that you're going to use crutches, you put Krunch in the.
This is this first number right here is the minimum number of characters, so I'm putting nine and then
the maximum number of characters is nine.
So it's going to make passwords that only have nine nine characters.
Do you know, like six to like 10 if you wanted to, in case you didn't exactly know?
I exactly know.
And just to save time and effort with this, I at the password to this right here, just just so that
you guys can see, you know, the capabilities of this.
And so what you can do is you would put like, you know, after these numbers, you'll put what characters
you want to be included in the password.
So it can be like, you know, one, two, three, four, eight, Afgooye.
It'll only include these letters when it's making the password.
So every combination of these letters in there and then is Dashty option right here allows you to do
a pattern.
So if I wanted the password to always start with 56 and then have maybe, you know, so one, two,
three, four.
So these symbols right here actually indicate, you know, fill it with any of the other any of the
available characters, and then you can then you can finish like maybe it always ends with, you know,
seven, six, seven, eight, you know.
And so what we'll do is it will make a pass, but it starts with five, six.
It fills in these with the different character options that you gave it.
And then it always ends with six, seven, eight so low it drastically lowers like the number of, you
know, possible passwords, so or words.
So let me actually show you an example.
For our specific example, I already set the password.
So we're going to say word lists of nine with nine characters in them, and then we're going to set
the password to this.
So it's going to make every combination of these letters.
And then if we were to do that, it's a really big file as three gigabytes.
So what we can do is we can refine this using the debt, the option, and then we can, you know, set
it, give it a pattern.
So let's say like we want the patzer to always start with H and and, you know, we want anything in
between this because we know it's possible to h i maybe we have a hunch we can make it fill in every
single one between this using at Symbol.
So we will put one, two, three, four, five, six, seven, unless we wanted to always end in Z.
So as you can see, this file is a lot smaller.
OK, so now is creating the world.
So what you want to do is we can actually output this into a file.
So be D'Ascenzo and then, you know, just worthless.
So now is going to create it and it's going to put it all, all of those into the file and then we can
use that to crack into the network.
So now is done and we can go ahead and try and er crack and G Command actually using the file that we
that file that we created just now along with the cafA that we created earlier.
So I see er crack dash and G and then we're going to put the name of the cat, the cat file which was
the capture.
Handshake.
Yep.
Cap.
And then we're going to put Dash W and then put our file that we just created where it lists and then
enter and now er crack is going to run.
So it says take a while because it's a pretty big list.
So you might want to try to refine the list a little bit more.
So what we can do, we can actually.
Go back and refine this a little bit more.
So let's say that just to save us time so we know that it starts with pack.
So we can all put this into where this is probably is going to overwrite the file.
So now is only six thousand five hundred sixty one line, so now is done.
So let's go ahead and try to air cracking again.
And to take a lot less time and is going to find it, he found, hack me, please.
So that actually works.
So now.
We know that the password for this network is actually how can we please and we use the file that we
captured from Arrow Dump, you know, to actually go through and verify it with aircraft.
So now you know how to hack into people's Wi-Fi.
Don't use this maliciously, please.
Now you guys know how to crack into weap, how to crack and then to utilize the powerful stuff.
So now that we know how to do that, you know what's next.
So we're going to actually go about actually, you know, when you connect to a network, you how you
how to discover more information about the devices and actually find vulnerabilities.
So we're going to use a variety of tools to do that.
But I'm going to teach them different techniques using open source intelligence as well, so that you
guys can learn how to gather information for an attack.
Like maybe you're doing a penetration test in the future.
You're going to know exactly how to gather information.
So I appreciate you for listening as far as the next section.