Original subtitles

And this lecture we're going to talk about an attack called the authentication attack.

This attack basically allows us to disconnect any device from any network even if that network uses

encryption.

Even if we don't know the key to that network and even if we're not connected to that network.

So we're still in the pre-conception attack section which means all the attacks that we're talking about

work without the need to connect to the network.

So we're going to be targeting that and network that we don't know it's password and we're not actually

connected to.

And we'll be able to disconnect any device from any network as long as the device and the network are

within our Wi-Fi range.

We're going to change our MAC address and pretend to be the target computer and send the request to

the router tell on it that I want to disconnect from you then we're going to change our MAC address

and pretend to be the router and tell the client tell our target computer that I'm the router and I'm

going to disconnect you right now because you requested to be disconnected by doing that.

We'll be able to disconnect the target computer from the router.

So again we're going to pretend to be the target computer and tell the router that we want to disconnect

then we're going to pretend to be the router and tell the computer I'm going to disconnect you.

And by doing so we'll be able to disconnect that computer.

All of this is going to be done using a tool called a replay.

And you sir I should not going to be doing that manually.

The tool will be doing everything for us.

So let me show you how we do that.

It's very simple and very easy.

First of all I'm going to run dump and jihad against my target network and I'm going to be targeting

a different network right now.

And that's again one of my networks.

It's called UPC and it ends up with 9 1 6.

And in this particular example I'm going to try to disconnect this Windows machine from the Internet.

So just to show you its MAC address so we know if I do IP config Oh

you'll see that the MAC address for this computer is 0 0 to 1 and ends up with 0 6 so if we go here

we can see that.

I'm just going to Control-C to stop this and we can see that we have that machine in the Windows machine

is shown up here in the second section of a dump and g which is the section that contains the connected

devices are the connected clients.

As we said before and we can see that the Windows computer is showing up here with this mac address.

So if we want to disconnect that computer we can do that use an airplane.

And as I said and the command is going to be very simple it's going to be a replay and you know play

airplanes can be used to do a lot of things and we'll see that in future lectures.

For now we want to use it to do a deal authentication attack.

So we're going to tell it that I want to run a D authentication attack off then we're going to specify

the number of the authentication packets to send.

And we're going to use a very large number so we keep sending these packets and the device stays disconnected.

Then we're going to give it the MAC address of the target access point.

So this is the target wireless network or access point.

And this is the MAC address of it.

It's the same as this

then we're going to say minus.

To give that the machine that we want to disconnect and in our example we want to disconnect the Windows

machine.

And this is its MAC address.

So I'm going to copy it and I'm going to paste it here.

And finally we're going to give it the interface that has monitor mode enabled on it.

And for me it's called Mohn 0.

I get the command is very simple.

It's a replay ngi.

That's the program that we're going to use.

We're learning that we want to do the authentication attack.

We're going to use a very large number of packets to keep the target's computer disconnected and we

want to target this network.

So this is the s s I.D. or the MAC address of the target access point or network.

And we want to disconnect this specific device from that network so we're under disconnect in one device

from that network.

And we gave it the MAC address of that device and that's my Windows device.

So now let's just go back here to the Windows device and again you can see the MAC address here.

If we click here on the Wi-Fi you'll see that this machine is actually connected over Wi-Fi and it's

connected to that network.

The UPC 0 9 1 6 at the end and if we go to the browser and open something you'll see that we have internet

connection so if you go to Google dotcom you can see that this computer is actually connected to the

Internet.

So I'm going to go here and I'm going to hit enter to run this attack.

Now if we go to the Windows machine and try to open anything.

So let's go to being dot com for example.

You'll see that we lost our internet connection.

And if you look here on the Wi-Fi icon you'll see that it's actually not connected anymore.

And we can see that this is our network and again we're still we're not connected to it.

And even if we try to go and connect to it we won't be able to connect because the Linux machine is

constantly sending the authentication packets preventing this machine from connecting.

So again it looks like as if it's connected.

But if we go here and try to open something you'll see that we have no internet connection now and clicking

on the try again and nothing is happening.

If we give it a bit more time we actually going to get disconnected again.

Now being is not loading even if we go and try Google.

And again we lost the connection right here and we're back to basically disconnected like completely

disconnected.

It's not like we're connected to the network and we don't have internet access.

We're actually completely disconnected from the network.

And Windows is constantly trying to connect back but as soon as it connects back it gets disconnected

again because this machine is constantly sending these the authentication packets.

Now again this attack works without the need to know the key or the password to the target network.

And it works against all operating systems so against Windows Linux OSS ex iPhone Android whatever as

long as the device uses Wi-Fi you can use this attack and kick them out of any network that they're

connected to.

Now to exit out of this attack you can just press control-C at the same time and it will terminate.