Original subtitles

1

OK so from the previous video we know that to crack a whip keep all we have to do is sniff packets from

2

the target network and gather as much as possible.

3

Once we do that every crack and you will be able to use statistical attacks to determine the keystream

4

and then the wiki.

5

It does this because when we have a large number of IPs as I said the IP is only a 24 bit number so

6

it can be exhausted easily in a busy network.

7

So once we have two packets to have the same IP then we can decrypt the keystream and the web.

8

Now when we have more than two packets obviously the method is going to work better and our chances

9

of breaking the key will be higher.

10

So we're going to try to gather as much as possible.

11

Let's see the most basic case of cracking work.

12

First of all I have my wife I called the monitor mode.

13

So the first thing I'm going to try to do now is just see all the networks that are within my wife range

14

and then I'm going to target one of those networks.

15

So we're going to go Arundo Angie just very basic.

16

And the second letter that came up is the network that we're going to do our attacks on.

17

So it's a test AP So we're just going to launch early on I guess this network now so we're going to

18

call.

19

We're going to put the VSS Id like we did before just launch an aero dome against this AP and then I'm

20

going to put the channel number two and then I'm going to arise to store all the packets that we capture

21

into a file.

22

And let's call it basic IP and that's it.

23

So we're going to enjoy this idea.

24

MAC address channel and the cloud that we're get the right stuff too.

25

And our Wi-Fi card in monitor mode just launch an arrow down on a target network.

26

Now as you can see this target's network you have here is quite a busy one.

27

You can see the data and the frame's is going it's going up quickly quick enough not very quickly but

28

it was very quick at the start.

29

It is a busy network so we have a client here.

30

This is the section where we see the clients.

31

So this client is actually doing.

32

I have it actually playing video on YouTube.

33

So that's why it's going up Quicken slows down quick and slows down.

34

So just trying to mimic active clients here.

35

So all we have to do now is just launch our crack which is part of the aircraft suit against the file

36

that we that dump has created for us.

37

We can launch aircraft against it even if the file even if we didn't stop error don't.

38

And it's going to keep reading the file and read the new package that was capturing here.

39

So we're just going to go crack and just put the file on them so the file name was.

40

So this file is still being created.

41

It's getting larger and larger because it's getting more packets.

42

We can run our crack injury with that file running.

43

And then with Aradigm running and it's going to keep getting updated and it'll give us the password

44

once it can crack it.

45

So now crack is working and airdrome is collecting the package for us as you can see aircraft failed

46

to determine the key within 5000 babies.

47

So it's going to start with 3000 babies.

48

That's going to wait until the babies reach 5000 and it's going to try again.

49

Now the number of I was actually depends on the type of web.

50

So there's two types of WEP encryption.

51

There is a 128 and there is a 46 but the only difference is the length of the key.

52

So the 46 require less number of Ivey's than the 128.

53

Now the Ivey's Remember when we're talking about aircraft we said data is the number of useful packets.

54

What I meant with that is the number of packets to have a unique ID or have a new IP.

55

So the more packets we get with with different Ivey's the more our chances of crack in the Webcke.

56

Now we're basically just going to wait until aircraft can successfully crack the worki Okay perfect

57

I'm just going to Control-C there.

58

Now and as you can see here Krock successfully managed to get the key.

59

So that's the key for the target network.

60

We were able to get it within twenty three thousand of data packets.

61

Just because the target AP uses a 64 bit key.

62

Let's see how we can use this key to connect to the network.

63

So I'm just going to copy it I go to Jeannie and we're just going to remove these dots and use the key

64

like this.

65

So now we can connect to the target network and here we go see test a.p and just going to paste it here.

66

And as you can see our connection has been established.

67

So we successfully recovered the key word key for our target network.

68

So I can just go to and confirm it in google and ping work so we are successfully connected to the target

69

network.