WEBVTT 00:00:01.540 --> 00:00:03.510 [Autogenerated] now they don't know how to stall and use it 00:00:03.510 --> 00:00:06.320 to let me give you _______ tips on how to increase your 00:00:06.320 --> 00:00:08.350 success rate in this kind of attack. 00:00:09.490 --> 00:00:12.070 First, try to use a convincing wife finding, 00:00:12.190 --> 00:00:15.750 such as global, Mantex, corporate secure or global Mantex employees. 00:00:16.730 --> 00:00:17.200 Personally, 00:00:17.210 --> 00:00:20.800 I like to use the word secure somewhere because our WiFi access point, 00:00:20.810 --> 00:00:22.350 who prompted for credentials. 00:00:22.680 --> 00:00:25.750 So then the person or get scared when the looking Paige pops up. 00:00:26.440 --> 00:00:30.290 But again, it's up to you to assess the situation and determine the best s s a. 00:00:30.290 --> 00:00:31.150 D for your case. 00:00:32.490 --> 00:00:35.290 A second tape is to add the temperature is cold and 00:00:35.290 --> 00:00:36.950 create a convincing looking Paige. 00:00:37.540 --> 00:00:41.140 For example, put the clients look on the page and use the client colors. 00:00:41.400 --> 00:00:44.350 So then the victim would not suspect of the looking Paige. 00:00:45.540 --> 00:00:47.220 Also, another tip wouldn't editing. 00:00:47.220 --> 00:00:50.170 The template is to add a failed indication message to 00:00:50.170 --> 00:00:51.610 the first authentication attempt. 00:00:52.440 --> 00:00:56.450 Usually when people see captive portals, they try to type any trash in there. 00:00:57.100 --> 00:00:59.790 In your case, as we don't actually authenticated anything, 00:00:59.990 --> 00:01:02.050 even a trash username and password to work. 00:01:02.740 --> 00:01:03.280 But then, 00:01:03.360 --> 00:01:06.780 if the person tried to type some trash and get on to educational failure. 00:01:06.790 --> 00:01:10.050 He would try to attend Skate Again, man Now with the right credentials. 00:01:11.040 --> 00:01:13.960 So then my suggestion is to put a small JavaScript 00:01:14.010 --> 00:01:15.130 to check it for the first time. 00:01:15.130 --> 00:01:17.390 That a person's trying to authenticate it is, 00:01:17.390 --> 00:01:20.150 yes, then generate a pop up with a failed indication. 00:01:20.940 --> 00:01:24.790 And this increase in a lot of a chance of getting re your credentials and my 00:01:24.790 --> 00:01:28.650 last tip as a mentioned before making comes denial of service on the re your 00:01:28.650 --> 00:01:31.040 wireless network using the air replay N G, 00:01:31.310 --> 00:01:32.650 which is including color winners. 00:01:33.440 --> 00:01:36.050 And here it can send example of how to use this tool. 00:01:36.840 --> 00:01:38.280 But please confirms your client. 00:01:38.290 --> 00:01:40.450 If it can run the announcers attacks on their network, 00:01:40.840 --> 00:01:42.950 make sure you're okay with the DDOS attacks. 00:01:44.940 --> 00:01:46.160 So before we go, 00:01:46.210 --> 00:01:49.260 let me give you some more information in case you want to learn more about one 00:01:49.260 --> 00:01:52.510 security assessments first as I mentioned the beginning, 00:01:52.510 --> 00:01:56.170 its course wife and pumpkin is a tool that has tons of other features, 00:01:56.310 --> 00:01:59.260 such as WiFi proxies as the cell decryption image 00:01:59.260 --> 00:02:01.750 capture clear angel capture and much more. 00:02:02.600 --> 00:02:04.280 If you're interested in learning about the wife, 00:02:04.280 --> 00:02:07.800 are pumping capabilities, access this official WiFi pumpkin get home, 00:02:08.000 --> 00:02:11.250 and there you find tons of really good documentation on its features. 00:02:13.000 --> 00:02:14.550 Also in the previous light, 00:02:14.600 --> 00:02:18.250 a mentioned that he can perform the now serves attacks isn't a replay to 00:02:19.000 --> 00:02:22.650 this Air plea is part of a framework called Air Crack N G. 00:02:23.140 --> 00:02:25.780 This framework is not only contained in our series of tax, 00:02:25.940 --> 00:02:29.500 but also several order attacks, including cracking WiFi passwords. 00:02:30.440 --> 00:02:32.500 It's interesting this to check their official 00:02:32.500 --> 00:02:35.230 documentation at Air Crack and G dot or GQ, 00:02:35.460 --> 00:02:39.550 or in your initial access with air cracking G course here parasite. 00:02:41.140 --> 00:02:43.980 Also, if you're interested in learning more about the warrants ___________, 00:02:43.980 --> 00:02:46.510 testing, there a few courses here, poor sight. 00:02:46.640 --> 00:02:47.950 They're focusing this topic. 00:02:48.730 --> 00:02:51.790 I do recommend you watching the wireless ___________ testing course, 00:02:51.860 --> 00:02:53.630 which covers the air quick, too, 00:02:53.650 --> 00:02:56.150 and some other really interesting WiFi pin test in twos. 00:02:57.090 --> 00:02:58.000 The interesting person, 00:02:58.000 --> 00:03:00.750 its course there learned not only how to perform their tanks, 00:03:00.840 --> 00:03:05.180 but also how the attack works and the theory behind it and 00:03:05.180 --> 00:03:07.850 similar to the course we have the defense techniques for 00:03:07.850 --> 00:03:09.150 wireless ___________ testing. 00:03:09.940 --> 00:03:12.160 In there, you learn things that intercepting data, 00:03:12.160 --> 00:03:15.510 we rogue access points and how to create fake captive porters 00:03:15.510 --> 00:03:18.050 from scratch just by using Lennox comments. 00:03:20.240 --> 00:03:20.800 Awesome. 00:03:20.830 --> 00:03:21.780 That said hope. 00:03:21.780 --> 00:03:22.500 Enjoy this course. 00:03:22.520 --> 00:03:26.760 And I hope now you have one more useful to in your writing to box if you 00:03:26.760 --> 00:03:30.400 want to get the most out of scores creature on the lab with a WiFi punking 00:03:30.410 --> 00:03:32.550 and try to create some fake captive portals. 00:03:33.140 --> 00:03:37.250 In this way, women writing exercise, you be ready to harvest tons of credentials. 00:03:37.840 --> 00:03:40.170 So thank you for watching, and it's you soon.