Original subtitles

1 1

Okay, so through all the previous lectures 2

2

we've seen all the weaknesses 3

3

that can be used by hackers 4

4

in order to compromise 5

5

web, WPA and WPA2 encrypted networks. 6

6

We've seen how they can use these weaknesses 7

7

to crack the password and get the actual key 8

8

to the network. 9

9

We've also seen that attackers are able 10

10

to de-authenticate or disconnect any device from any network 11

11

without the need to know the key for that network. 12

12

And in the previous lecture we've seen how we can 13

13

modify the settings of our routers 14

14

so that we can increase the encryption of our network, 15

15

increase the security of our networks 16

16

so that hackers can't use the attacks and get the password. 17

17

Now in order to apply the settings 18

18

that we talked about in the previous lecture 19

19

you need to be able to access the settings page 20

20

for your router. 21

21

Now each router has a web page where you can modify 22

22

the settings for the router and its usually 23

23

at the IP of that router. 24

24

So, first of all I'm gonna check and get the 25

25

IP of my computer or of my device and I'm just 26

26

gonna do 'ifconfig lan 0' 27

27

and as you can see this is the IP of my computer 28

28

so I'm gonna open my browser 29

29

and I'm gonna navigate to 30

30

192 31

31

168 32

32

zero 33

33

and the IP of my computer was 25 34

34

usually the IP of the router is the first IP in the subnet 35

35

so this is the subnet, at the moment its 192.168.0 36

36

and I'm just gonna add number one 37

37

because that's the first IP in the subnet 38

38

and that will take me to the router settings page. 39

39

And as you can see its asking me to enter 40

40

a username and a password. 41

41

Now, routers come in with a pre-specified 42

42

username and password 43

43

you can check what is the default username and password 44

44

and then I highly recommend you change them after that. 45

45

So usually its written in the manual 46

46

so check the manual to see what's the default 47

47

username and password and then you can log in. 48

48

Now in some cases the attacker might be 49

49

doing a de-authentication attack against you 50

50

so he might be preventing you from connecting 51

51

to your network wirelessly. 52

52

So what you can do is you can connect to your router 53

53

using a cable, using an ethernet cable 54

54

and when you do that then the attacker can not 55

55

use a de-authentication attack to de-authenticate you 56

56

or disconnect you. 57

57

So you'll be able to access your router settings 58

58

using the wire and then you can modify 59

59

your security settings and change the encryption, 60

60

change the password, do all the things that I recommended 61

61

in the previous lecture in order to increase the security 62

62

so that the attacker will not be able to 63

63

attack your network and get the key. 64

64

Now, the settings of each router are different 65

65

they depend on the manufacturer and even 66

66

the model of the router but usually the settings 67

67

the way that you change the settings is the same. 68

68

And like 90% of the cases the router is always at 69

69

the first IP of the subnet so all you have to do is 70

70

you get your IP using 'ifconfig' command like we did here 71

71

like we did here when we got it and it was 192.168.0.25 72

72

that's the IP of my device. 73

73

And then I changed the last 25 to number one 74

74

to the first IP and that is the IP of my router. 75

75

Now I'm gonna navigate to the wireless settings 76

76

now as you can see there's a lot of settings 77

77

that you can change for your network and we're concerned 78

78

with the wireless settings at the moment. 79

79

So as you can see my wireless is enabled, 80

80

you can change the name of the network, 81

81

you can change the channel 82

82

and the bandwidth and all that. 83

83

So I'm gonna go to the security 84

84

and as you can see now I'm using WPA encryption 85

85

with WPA or WPA2 authentication 86

86

and the encryption using AES and TKIP 87

87

and 88

88

if I go on WPS 89

89

you can see that WPS is disabled 90

90

as we said now so basically I'm not using web 91

91

so they cannot use any of the attacks that we 92

92

spoke about that allow you to crack WEP encryption 93

93

I'm using WPA which is much more secure 94

94

and I disabled WPS so they cannot use 95

95

Reaver to determine my WPS pin and then 96

96

reverse engineer my password. 97

97

The only way that the hacker can access or 98

98

get my password is by obtaining the handshake first 99

99

and then use a word list to find my password. 100

100

Now my password is very random 101

101

even though it actually doesn't use 102

102

numbers or digits, just letters. 103

103

But its very random so there is a really small chance 104

104

of someone being able to guess that password. 105

105

Now there is another thing that id like 106

106

to show you here is the access control 107

107

and using this you can add policies 108

108

so you can add an allow policy or a deny policy 109

109

and using that is based on the MAC address 110

110

you can specify MAC addresses that you want to 111

111

allow to connect to your network 112

112

you can also specify MAC addresses 113

113

that you can deny from your network. 114

114

So for example, you can just if you don't have many people 115

115

many visitors coming to the house or if you're 116

116

in a company with a specified number of computers 117

117

and you want only to allow a number of computers 118

118

to connect to that network then you can just obtain 119

119

ask the people, get their MAC addresses 120

120

the people that you want to allow 121

121

and add them in an allow list. 122

122

Now even if someone has the actual key, 123

123

the right key for your network, 124

124

and they don't exist in the white list 125

125

or in the allow list they will not 126

126

be able to access the network. 127

127

You can also add a deny list which is if you 128

128

you want to deny a certain computer 129

129

or a certain person that you think are suspicious 130

130

you can just add the MAC address in the deny list 131

131

and they will not be able to connect to your network. 132

132

So this is about it as I said the settings page 133

133

usually look different 134

134

the names might be called different names as in 135

135

the names for each of these tabs 136

136

but usually the main thing is you should be able to access 137

137

the router settings using the subnet IP 138

138

and add the number one which is the first IP at the end 139

139

and if you're being attacked 140

140

if you can't connect to your network at all 141

141

then just use a cable and modify the settings 142

142

like we discussed in the previous lectures.