Original subtitles

1

So to cracka WPA key the first thing we're going to need is to capture the handshake capture and we're

2

going to capture the handshake.

3

Use an arrow.

4

Don't be angry the same way that we used to use it with the E.P. encrypted networks.

5

So we're going to run aero Dom.

6

I'm just going to run it on everything now to get the information about my target network.

7

And this is my target.

8

So it's arrowed home.

9

Angie VSS IDs the same way we used to write against WPP networks at the end of the day we're only capture

10

on packets using aira don't.

11

And so it's you doing the same job.

12

So I'm going to put the channel as well and then I'm going to write to a file and then I'm going to

13

call the file

14

handshake and then I'm going to put the wireless card with monitor mode.

15

So it's the same command we used to use when we were capturing packets for the IP networks error dump

16

Angie.

17

Yes I do.

18

What's the target access point channel for that channel.

19

Right.

20

We put the name of the file that we're going to store stuff in.

21

And one zero is our Wi-Fi card with monitor mode going to enter.

22

And here we go.

23

So we have our network now this is a WPA encrypted network and we have here a client connected to this

24

network.

25

So to capture the handshake again we said the handshake packets get sent every time a device connects

26

to the target access point.

27

So now we can just sit down and wait for a device to connect to the network.

28

Once the device connects to the network we're going to capture the handshake or we can use something

29

that we learned in section 1 which is the authentication attack in the authentication attack.

30

We were able to disassociate or disconnect any device from any network that is within our Wi-Fi range.

31

If we do that for a very short period of time we can disassociate this device from the network for one

32

second and then the device is going to try to connect back the network automatically so that even the

33

targets the person who's using the target device is not going to notice that part his device will actually

34

get disconnected and reconnected so quick that he won't notice it.

35

Well we will be able to capture the handshake packets.

36

So again we said we actually get sent every time a device connects to the target network.

37

So we're going to do is we're going to do the authentication attack the same way we did it in Section

38

1.

39

We're going to disconnect this device from the network for a very short period of time so that his his

40

system will reconnect him straight away without him noticing that but we will be able to capture the

41

handshake.

42

So we're going to just run a basically off attack using airplanes.

43

Do we explain this in Section 1 and in section 1 we put a very large number of our kids when we were

44

disconnected our target.

45

Now I'm only going to put a small number only for the authentication packets.

46

Then we're going to put a MAC address of the target access point and then I'm going to put C to specify

47

the client MAC address the MAC address of the client that we want to disconnect and then I'm going to

48

put my wife code name which is zero.

49

So airplay ngi off the tag for the authentication packets to this access point and disconnect this device

50

from it.

51

Now I'm going to enter and just have it's all misty you here.

52

As you can see we captured the WPA handshake here and metallic device was this by the way didn't even

53

change in here.

54

Didn't tell me I was disconnected because it will show a message when I get disconnected.

55

So I didn't get any messages to be disconnected because I was disconnected for a very short period of

56

time.

57

And as a result the target person didn't even notice it.

58

And we were able to capture the handshake.

59

As you can see here WPA a handshake from this device.

60

Now we can use a wordlist and run it against this handshake to try and determine the main WPA key.