Welcome to the wireless penetration testing section of our course.
Before we begin the hacking we should cover a few things.
One of the first things I want to cover is what is a wireless penetration test.
What should you be expected to do.
Well essentially it is the assessment of a wireless network.
You probably guessed that but we are looking at two different types of networks usually there's WPA
to appreciate key or what I like to call personal and you could think of this as what you would have
in your house.
Pretty much everybody and anybody uses WPA to appreciate key.
As of now.
And it's just that password that you type in when you go to log into a network.
Everybody should be pretty familiar with that.
We also have what's called WPA to enterprise that will use something called radius or some sort of credentials
to log into that network.
And that is in more advanced environments.
So you're going to see a lot of homes mostly all homes use this.
You're also going to see a lot of small businesses use pressure key and even some medium tiered sized
businesses using appreciate key a lot of your large companies are on WPA to enterprise for the scope
of this course.
We are only going to be focusing on WPA to appreciate key if we move on to enterprise.
The issue with enterprise is that enterprise is very difficult to set up.
So if I was going to do an enterprise walkthrough there's so many different attacks and there's you
know things that we would need to set up that are complicated and possibly out of budget for some people
that I think it should be its own course.
So what we're gonna do is we're gonna focus on the most common which is absolutely depreciate key.
I'm going to show you how to do that.
And then my suggestion is to just look up WPA to enterprise attacks get familiar with them.
And honestly for for all wireless penetration testing I learned it through a blog post.
I mean blog posts are the way to go.
I do have a OSTP certification which is a wireless certification but that that didn't even teach enterprise
in anything that you that I learned from that could've been learned in 10 minutes from blog post you're
going to see how fast in the next video this attack really is.
And it's it's really quick.
So we're looking at these two types of networks here.
And when we're on site or we send a box we're doing some activities where if we're going up against
the appreciate key we're going to evaluate the strength of that appreciate key.
What we're going to be doing or we're talking about is we're gonna be capturing this handshake and this
handshake is going to allow us to take the file off line or the handshake off line and try to crack
it.
If your password is strong.
Chances are we're not going to crack it.
If your password is weak chances are we will crack it.
So we're going to evaluate that strength.
We're also going to look at nearby networks will do what is called a walk around.
It's almost like if you've heard of war driving.
I call it a war walking because you just walk around the environment and you take a.
You basically have a G.P.S. device attached to you and you just get a feel for what's going on.
But you can also evaluate what networks are around especially if they're not in a big office building
if they're in their own standalone building then you can really evaluate okay wire x y z wireless devices
showing up why are they broadcasting a network and you can see if there's possibly rogue devices in
the network.
This is a good one to evaluate.
Another thing is you want to assess to get in the guest networks if there is a guest network and it
has no password or even if it does have a password you want to see how hard that password is to crack
1 and 2 you want to see if there are separation of networks when you're on the guest network.
And I kind of put that under checking network access because it falls on the main one as well if the
main network should not have access to certain aspects of the entire network.
You want to check that but especially the guest network when you log in you should not have access to
a lot of functionality inside the network.
It's just for guest.
Right.
So you shouldn't be able to access employee things and you want to make sure that you check that that
you can access certain IP addresses certain servers etc..
That's very very important.
So we're looking at not only the strength of the wireless but we're also looking at if there's any rogue
devices and how well they're segmenting their networks on the guest and overall.
So from there let's talk about what tools we're going to need to use for this.
Specifically I'm using a wireless card and we're to talk about that a router and a laptop.
This router is not connected to the Internet.
This laptop is connected to this wireless network that's broadcasting and it is just not connected to
the Internet either is just connected to this.
You do not have to use either of these you can use your home router.
The only reason I'm showing you is I don't want to have to change all my passwords and everything.
And you know for demonstration purposes plus I had a router just sitting around.
That's really easy to setup.
If you have an extra router sitting around this is also very easy to setup.
Otherwise feel free to just attack your home router it's not going to do anything malicious or or mess
with anything I promise you.
So let's go back to the wireless card.
I'm using what's called an alpha and this alpha is basically what we do is it is a beefy card that is
used to inject packets and listen to packets.
OK.
So usually the wireless card that is built into your machine or your computer is not good enough to
do this.
And let me pull up an article for you.
So my card looks just like this and I will post this article in our reference guides.
But this this is what my card looks like now unfortunately I've had this card for ever and it only does
two point four gigahertz.
I do recommend getting a card that does two point four and five gigahertz.
Because a lot of people are in five gigahertz now so it's just advantageous.
But what you want is you want one of these cards it's got this nice nice little antenna here you just
plug it into your computer and then you're going to utilize this on top of whatever other wireless or
Nick that you might have in your machine already.
So here's an example.
And another thing that I really need to stress please do not rely on what I'm telling you here for a
wireless card.
Mine has held true through through and through but you need to make sure that you go check a 20 19 or
it's soon to be 20 20.
Check the article for the time frame you're watching this.
Find an article out there say Cally Linux compatible USP wireless cards.
OK.
Because these do change from time to time.
You just want to make sure you don't buy the wrong card and not every single card out there is compatible.
I do like the I like the alphas and I like the pandas.
I think both of those are great.
And you just have to look at the chipset and make sure whatever you're purchasing falls in line with
this chipset.
This article is great.
It just kind of tells you about the different different types of cards that are out there which ones
are the most popular you see mine right here the end age and I I mean I think they're great and has
links on how to buy them and they're not affiliate links or anything so I think I think this is great.
These pandas are good as well you know just again get one that's two point four and five gigahertz I
think is is what's important nowadays.
So go out there do your own research on what you buy but you will need to have a card like this to be
able to perform this section.
So that's one of the few limitations of this course.
But you do need this car to be able to perform this otherwise just sit back watch take notes and then
once you get your card in the mail.
Have at it.
Have fun.
So lastly let's talk about the hacking process and what you're about to see when we get into this.
Now we have we have to place the card into monitor mode so we get our card.
We plug it in and we have to set it into monitor mode from there.
We need to discover some information about the network.
We know the SSA I.D. We're going to be attacking the client will give that to us and we're going to
find what channel that's running on and what the MAC address is.
It's also known as the B SS I.D. We will talk about this in the next video.
Anything specific I'll cover in the next video.
This is just a high level 10000 foot overview of how we're doing this.
So once we discover the information about the network we capture a little bit of specifics.
We're going to select that network using those specifics and we're going to capture data while we're
capturing that data basically we're capturing anything that's what we're listening in when we're waiting
for for something to happen right.
We can also do a little bit of injection and we can perform what's called a d off attack.
Now this d off attack is going to d authenticate a user from the network so that they have to re authenticate
and that's going to cause a handshake to happen.
Now this WPA handshake is what we're after.
This actually this d off attack is optional but it just speeds the process along significantly.
We could sit there and capture network data until we capture a handshake but this is really the way
to go.
So we perform this attack.
We capture this handshake in this handshake is where WPA to pressure key is vulnerable.
We can take this off line and we could try to crack it.
It's just like a hash just like anything and everything you've seen in this course so far.
We just upload this.
We try to crack it and we go from there.
So we tend to crack the handshake right.
If the password is strong we're going to have a hard time.
If it's weak we're gonna have an easy time.
And I'll talk in the next video about strategies.
What kind of passwords would like to target etc..
So from here we're gonna go ahead and get a hands on make sure again you have everything that you need.
So let's go back a couple slides.
Make sure that you have this wireless card and have a router and some sort of device connected to that
router.
If you're using your home router then you should already have a device that you can do off attack against
and you should be good to go.
Otherwise if you want to do a router and you know not attack your own network you're going to need a
router and some device connected to it so that you can do the attack.
Otherwise just focus on the Alpha card in the link that I provided.
Or you can go to Google and just search out for the best Kelly Linux compatible adapters.
So I will catch over the next video and we actually get hands on with this and hack a wireless network.