Original subtitles

1

OK.

2

So now we have our wife I in monitor mode.

3

We can sniff all the packets are within our Wi-Fi range even though they're not directed to our device.

4

And even without connecting to any network even without knowing the password or username to the network.

5

So what will go news we're going to use a tool called Aero dump and it's part of the aircraft suits.

6

It's a packet sniffer allows us to capture all the packets around us.

7

We can run it against all the networks and also will collect any packets that are within our Waipahu

8

range or we can run it against a certain AP or access point so will only be collecting packets that

9

are coming from a certain Wi-Fi network.

10

We'll see how we run the program first.

11

First you need your wife a card in monitor mode.

12

I have it now in monitor mode and the name of the wife I carried in my entire.

13

It's well and zero.

14

So we'll just clear this and we will run aero down and G and Monsey are just as simple as that Monsey

15

was the name of the Wi-Fi card that has monitor mode enabled on it and I can see it starting to list

16

all the networks around us another use or don't buy is to identify all the networks around those and

17

to identify all the connected devices to these networks.

18

So I'm just going to Control-C now to stop sniffing and we'll just have a quick look now all the facts

19

that we know now we didn't save them anywhere.

20

So there was really no point to analyzing the packets because we were just we just ran it against all

21

the access points around us to see what networks are around us and gather information about these networks

22

so you can see like there is quite a good bit of networks around me.

23

The VSS idea is the MAC address for the access point.

24

So each each as we said each network device has a MAC address and it's here written under the VSS ID

25

column the P.W. are is the power.

26

So it's how far is the access point from our Wi-Fi card.

27

You can see the test IP This is the AP.

28

This is the first router that we will be around in a few attacks against it's here in my room so it's

29

very close to me.

30

It's minus 34.

31

You can see as you go down the networks are further and further away from me.

32

So the closer the network the easier for you to get to sniff the packets because obviously you're closer.

33

And the packets are can be collected easier.

34

Also all the attacks that you were going to explain in the future.

35

The closer the network to you the more effective the attack and the quicker you will gain your access

36

or achieve your goal.

37

Beacon's is the signals that the AP sent.

38

So each each access point sent a certain type of packets to tell all the clients are added that I exist

39

and I'm there.

40

So even if the network was hidden it will still send these beacons to tell everyone around that network

41

is I'm here.

42

I'm an AP.

43

I have my B.S. ID to be this and I'm running on this information.

44

So this is the number of beacons that each point is sending.

45

The data is the number of useful packets that we have sniffed.

46

We'll talk about this later when we start talking about decrypted WEP encryption.

47

So we'll just leave this for now this is the number of data packets that we have collected in the past

48

10 seconds.

49

So as you can see we have zero here so zero data packets in the past 10 seconds.

50

China is the number of channels that the access point is broadcast and on.

51

So each access point broadcasts on a certain channel.

52

This is used so that there is no interference between access points that are beside each other so say

53

for example I have an access point here and two and like five meters from me there is another access

54

point.

55

If both of them are running on the same channel there will be interference between those two access

56

points and the signal between them will be shorter so the range of those access points will be shorter.

57

So we use different channels so that there is no interference between the Pakistan or sent in the air.

58

And B is the maximum speed supported by this access point.

59

So it can go up to 54.

60

It is the encryption that's used in the access point so we see the encryption here as well.

61

Here is WPA too.

62

Here is where again we have WPA here.

63

And if it's an open network you'll see open up here and here and the encryption so far is the cipher

64

that used to decrypt the packets.

65

So for what.

66

But for WPA too it can be SUCIA MP It could be Teekay IP.

67

We'll talk about these later when we get into WPA cracking.

68

Ours is the type of authentication that's required for this access point.

69

So we have k pre-shared key here.

70

We have MGG for this one and we'll talk about this later as well when we go to WPA cracking.