All language subtitles for subtitles_Python WiFi

- My advice is don't be a script kiddie.

Learn how to code.

Learn how to use Python

because that gives you a lot of power

to do many, many things,

opens up a lot of doors for you.

In this video, I'm gonna
show you how to use

a simple Python script to
get all the WiFi SSIDs,

or the WiFi names if you prefer,

and the passwords for all the
WiFi networks on a computer.

I'm gonna show you how you
can use a few Windows commands

to list all the WiFi SSIDs on a computer

and then how to retrieve the
password of a WiFi network.

But then I'll show you
how to use a very simple

Python script to basically
extract all that information

and show it in a nice format.

Okay, let's get started

and I'm gonna show you why
you should learn Python.

If you wanna be an ethical hacker,

it really opens up a lot of doors for you.

(electronic music)

Okay, so on my Windows computer,

I'm gonna open up a Command Prompt.

In this case, I'll go to
the downloads directory

because in this directory,

I've got a little Python script

called get_wifi_passwords.py.

This little script is a script

that I'm gonna concentrate
on in this video,

but I've also created additional scripts

where you can get all the WiFi passwords

and email it to an email address,

or copy the WiFi passwords
to an HTTP server somewhere,

on the internet as an example.

But this is the one that
we're gonna concentrate on.

Before we do that,

let's look at some basic Windows commands.

This is not Python.

This is just commands running in Windows.

So netsh wlan show profiles.

This shows me all the WiFi
profiles stored on this computer.

If I click on the WiFi icon,

notice I'm connected currently
to this WiFi network,

but other WiFi networks
are also listed here.

Now, before we continue,

everything that I'm showing you here

is happening on my local network.

Do not do anything that
can get you into trouble.

Be an ethical hacker

and help companies better
secure their networks.

So in this example,

everything is being
done on my local laptop.

I own all the infrastructure
and all the networks

that I'm gonna demonstrate here.

I'm not trying to connect
to someone else's network

and hack them.

I'm demonstrating why
you need to be careful

with network security,

why you need to learn Python

to help companies better
protect their networks.

So this video is for
educational purposes only.

Please make sure that you educate yourself

and use this knowledge

to help companies better
secure their networks.

We need to try and combat attacks

like the recent attack on SolarWinds.

Because of security issues in
their network, they got hacked

and that affected many,
many other companies.

Be careful with security.

It's sometimes just too
easy to break into companies

or to get information that
hackers shouldn't be getting.

So learn how to protect networks.

So once again, I own these networks.

This TP-Link network is
actually a little WiFi router

that I've got behind me.

So all of this information
is just test networks

that I'm using to demonstrate
the power of Python

and the power of knowing
a little bit about coding.

Okay, so we can use the
netsh wlan show profile

and look at a profile

to see information about a WiFi network.

So there's the command once again.

We can see information
about it such as the name.

It's a Wireless LAN.

Connection mode is connect automatically.

There's some other information here,

but this is the piece that
we're most interested in.

This tells us that a
security key is present.

And what we wanna do is
get Windows to show that

in clear text.

So this command netsh wlan show profile

whatever the WiFi network is.

So this is the SSID or the
name for the WiFi network.

Key=clear will allow
us to see the password.

And then you go.

That is the password of the WiFi network.

That WiFi network is once
again a little TP-Link router

that's right behind me.

So on this router,

there's the SSID or name
of the WiFi network.

There's the password.

By simply using this command
on a Windows computer,

I was able to retrieve
the password of that SSID

or that WiFi network.

Okay, but let's use Python
to automate this process

because we don't want to

have to do that command for every network.

And I'll just clear the screen.

So as an example,

we could look at the
password for this network,

mysecurewifi,

and you can see that there's the password,

youcannotgetaccess! or bang if you prefer,

but let's use a Python script

to show all of the all the
SSIDs, all the WiFi networks,

and all the passwords.

Now, before I go through the whole script

in a lot of detail, let me
show you what it actually does.

So dir in downloads directory.

This is the script.

So I'm simply gonna run Python.

And what I'm gonna run
is get_wifi_passwords.py.

And there you go.

There are all the SSIDs

and all the passwords stored
on this Windows laptop.

I'll clear the screen
and I'll run it again,

python get_wifi_passwords.py,

and notice there is the
password for the TP-Link router.

There's the password on this network.

And you can see the
information for the other SSIDs

or wireless networks
and all their passwords.

These are just test networks

that I've created specifically
for this demonstration,

but it's as simple as that

to get the passwords
on a Windows computer.

So now let's look at the code.

Okay, so here's the Python script.

First thing we're gonna
do is import subprocess.

This will allow us to use system commands.

Then we're gonna import re

which allows us to use
regular expressions.

Regular expressions are
used in many, many places.

It basically allows us to
search for a specific text

in some output and then do something.

Now, rather than trying
to copy all of this down,

note that I've put a link
to GitHub below this video

so that you can download the script,

but you use it at your own risk,

and please be aware that
this is supposed to teach you

ethical hacking principles

and shouldn't be used to
hack other people's networks.

Don't go to jail. Don't get into trouble.

Use this for ethical
hacking purposes only.

Now, what you'll notice here

is I've put a lot of
documentation in the output.

So I'm not gonna try and
explain every command

in a lot of detail

because it's all documented in the script.

But notice here as an example,

we are running the subprocess command

and we're running netsh
wlan show profiles.

That's as if we had run this command.

So we're running that
command basically in Python

and then we're gonna capture
the output and decode it.

And then what we're gonna do
is use a regular expression.

Notice re.

We're going to look for entries
that say all user profile

because that's what's in the output.

We are looking for that.

And we're gonna grab all the profile names

and store that in a list.

So we create an empty list.

And then if the profile name does exist,

for every name in the profile name,

we're going to create a dictionary.

And then we're gonna run

the netsh wlan show profile and the name

and look to make sure that
a security key is found.

If a security key is found,

we are going to run the command

that shows us the
security key information.

So again, we're running this
command to see the profiles,

then we're running this
command for every profile name

to make sure that a
security key is present.

And if it is present,

then we're running this command
setting the key to clear

so that we can find the actual password.

So notice there you can see key=clear.

We wanna run that.

We wanna capture the output and decode it.

We wanna store that information.

We are looking for the password.

If the password is set to none,

we'll say the profile password is none.

Otherwise, we'll specify the password.

And then we're gonna basically
run through the WiFi list

and print this in a nice format.

So again, if I run the script,

it basically gives us this output.

So there you go.

In a few lines of code,

and most of the script is just comments

trying to explain what the code is doing,

I was able to retrieve all the
SSIDs on a Windows computer,

all the passwords, and then
display them on the screen.

Now, you can extend the script

and email the passwords to use yourself

or copy them to a server.

I'll put a link to that
code below this video.

That code is available on my GitHub.

I won't go through that in this video

because I don't wanna get into hot water.

So that code is available.

Again, use it only for
ethical hacking purposes

or for educational purposes.

Don't get into trouble. Don't go to jail.

Okay, I hope you enjoyed this video.

I just wanted to show
you why it's important

to implement good security on a network.

Don't just open some file
that someone sends you

as an attachment on an email,

because that could run a piece of code

that could get all the WiFi passwords

and then email them to someone.

So be careful which applications you run.

In this example, I'm running raw Python.

In a separate video, I'll show
you how to take Python code

and wrap that as an executable

so that you can just run an
app if you like on a computer

rather than running raw Python.

Don't be a script kiddie.

Learn the power of programming.

Learn how powerful this is.

It'll change your life if
you can write a bit of code,

opens up so many doors for you.

Okay, I hope you enjoyed this video.

If you did, please like it.

Please consider subscribing
to my YouTube channel.

Please click on the bell
to get notifications.

I'm David Bombal.

I wanna wish you all the very best.

(electronic music)