Welcome to this lecture.
Now we'll see how to correct WP a key of any network.
So first of all I will tell you in order to get all the package that is sent across the Wi-Fi it rains
you have to first get your wife a card into the managed basically from the manage to the money to more.
So let's take our configuration.
And in my case it is on the monitor more.
And if you are in the management for us to convert into the monitor mode and we saw how to do that with
the two processes in the previous lecture and hope you have just got to that lecture.
And first of all let's gunboat that management to the monitor mode.
Otherwise this is not going to work.
So now let's see what are the connections.
So that is what are the range of Wi-Fi we have over here.
So I'll just say dumb pansy and I want every Wi-Fi that is near my devices.
And in that case it is w land the on the interface which is in the management I monitor more.
So let's see.
Okay.
These are all the connections that we have here.
And now let's see.
We want to attack this O Network which is my network and don't attack any other network which you don't
have any permissions.
So after giving that disclaimer let's go and see how we can describe these passwords of this network.
So first of all let me just close this one and you could see that instead of these of NATO you have
this network that is sending so much of that that that means there is so much f active clients that
is connected to this network.
So let's see how we can first let me disclose this connection and if you have any connection that is
having the WPP or WB as enable you have so many obligations in the calendar next you can just open the
application list over to this number six saying wireless attack and you have these bundles of applications
so my personal favorite over here is the phone why pay cracker and the river.
So if you want to do a interface open these foreign wife a cracker if you won the terminal then you
can go with another wife hate or a rival so you could see that this is the application and it is so
in that there is a new version available.
So I don't want.
So let's click the interface to the interfaces the rule and zero and wait for a moment.
And he's giving some tips that we don't want a scan for the access point that easy scan for the Y patrons
and let's wait for some moment.
And it has shown that it has been active and it has cracked that there is seven WP a base to Wi-Fi network
or 10.
So it had gathered the eleven or maybe they'll have it.
So if I go to my network you could see that it support doubling as it is encryption with the WB.
And basically what happens is with this fun Wi-Fi Wi-Fi regular it was just inject its own word list
and try to crack that network.
So if I say Wi-Fi attack then it is a selecting.
It is just saying select all list.
So next thing what you can do is make your own world list with a grant application will see that in
the next minute but you can just make your own world list and use this Zoé interface to crack any WP
but we're not going to do this because this is the easier opposes and anyone can do this.
So what our aim is to make use of redundancy and the way that network earlier works is basically we
have to decode some of the clients so as to get the handset.
So basically we're using that is a handset protocol to send a packet and basically we'll just acknowledge
that packet and we'll just use the walls to crack this WP so you can do it with these phone Wi-Fi record
too so this is also one process I have shown how to do it.
There's a browser to get your ordinary file that can be made to the Crown's application and this attack
that Wi-Fi.
So this is the first process.
Let's go to that no the application so over here we have these river.
So let's open that again and we have this river.
So this river has this exemplar right here.
So this is very important module and I'll just say you go up and the interface should be the map monitor
mode.
So absolutely Tony the monitor more is the Slenderman in our case and B is for b a society which is
the MAC address of these missing are of your gateway.
So I want to attack this.
So I'll just use this be a society as pasted right here and we have this argument that it's dest s v
v.
So this is Double V is for verbose attack that means it will just get everything that is available.
So you can see this week it stands for bravos and displays non-critical warning so we are just forcing
to this.
This key of this network.
So if we are sitting there now then it is going to do stuff.
It is going to this receive the bacon and it is doing everything that is needed to crack the network.
So we could see the vendor information and it will this This start is dragging out every key that it
has.
So let me disclose this.
I don't want to do it.
This process also.
So let's go to the last obligation that we have here and it is this Web site.
So it is right here.
So this is the similar to that of river.
It will open in the terminal.
You can see all the application.
It is also saying the verbose you have to give the client politic and you can use this WP as in order
to slow the WPA naval network only so you can just crack WP as in a little with these Wi-Fi.
So it is very easy process.
You can do similar with these Wi-Fi too.
So now let's see you use our you wrote on B ends in order to correct that WB network.
So first of all as always we'll just get these genetic information and they will see that all information
having this channel and which is active or something like that.
And you could see the name right here.
So make sure which Senator we want to attack.
So after that I'll just make use of this edit on PNC now because the application and after that we have
this be a society.
So this is to this import that be a society.
So this use that we a society who is you under attack.
So in my case it is right here.
I just copied this pasted down here.
So this is a B a society.
And next one is general.
So if you want to just put C it should be done with the single desk.
But if you want to include whole of this general name then it will just include with this double test
s.
So if the argument is only one character go with single Lars if you want to include whole name go the
double less.
Now let's see the channels.
So you could see General right here it is sixth.
So let's put six here.
So after that you have to capture the handshake and pass to some file.
So I'll say right and right is basically to write that handshake and I'll just say I want to write and
give the name to that is a demo and sick.
So this is our demo handshake file and the interface here is w land 0 1.
So you can see where using this arrow dumpy Enzi as a tool and b a society is basically the argument
which refers to this network channel is six and right is basically to write the handshake that we get
from here.
So what happens is basically this command will send the handset back.
So just remember the handshake is something like you are connecting to the network so you are sending
some packet from this arrow dumpy Enzi to the network and every time that the blind that is connected
to the network source there will be some.
Otherwise if there is no client on that network connected to that network then this is not going to
work.
So at least there should be one client that is connected to network because in that case if the network
is basically basically if the network is empty.
That means we don't have any handset.
So if this process has to work there should be at least one client that should be connected to that
network.
And after that it's connected or basically after maybe a time comes that that there will be this connection
of that kind from that network.
And we'll just send this handset packet so as to give that is a connection.
So what happens is every time the client needs to connect to the network will just send this handset
packet and there will be a handset communication between that network in our network or out with this
error Don pansy and we'll just capture that handshake and we'll use that word list to see what the password
is.
So basically with this command what we are saying is just give the handshake to the client or basically
to the network and every time they're trying to connect to that network will just get handshake acknowledge
packet and you use that in the form of this demo handshake which we just give here is a name and we'll
crack with another application.
So let's see if I hit enter then it is going to do it stocks but if you see we don't have any that handshake
package over here.
So if there was a handshake between the client and dismissing it would have give information like something
that is developing a handshake information right here.
But there is nothing information right here and you could see to be a society which is the network and
the client.
So that means there is to climb that is connected to this network.
So you could clearly see we have these two line that is connected.
That means that this is possible we can connect because there is at least one client.
But now we have to wait until this client try to reconnect to that network which is nearly to just take
so much time if you need to do it with this process because we don't even think when we do we need to
reconnect because if maybe due to the some conditions the client may reconnect.
But we have to wait till that moment.
We have to will wait till that moment when we just get the reconnection from the client to that network.
So we have to wait.
If you want to with this process.
But we have the next bosses which is basically what we'll do is we'll use some time to do art that declined
from that NATO.
So we'll just make a complete disconnection of that network to the client.
And after some second maybe and they'll just try to reconnect and we'll just get that handshake and
we'll see that now.
So first of all we have to deal.
So let me just open the new terminal because we can do over here.
This is going to do is stocks.
And now we have to diet.
So diet is basically same is that we have to disconnect the device for some time from the network.
So we'll use any of these devices that is here the client or the station and we'll just a diet for some
time and basically we'll just get the handset.
So let's use that and we have some command to do that and let's see how we can do this.
So there is airplane.
And this is a very powerful tool.
And with this it is your play and now we have to use this D.
Out come on.
So did the order is going to disconnect your network or basically disconnect any station right here
for some time.
So let me see.
I want this to be disconnected from some time.
So.
Copy this because this is the station.
And now before that you have to open it.
So is this the D or do you have to first give some time.
So in this case I want for a second maybe five second so it's up to you.
So I want to be out for for a second.
And it is for this to be a society.
And let let me just copy this first.
So if I just copy this and paste it right here.
And after the b a society I want the client so client is with the C argument and let's use any of these
clients.
I want this client
soulless copy this.
Okay.
Any of the client you can just capture any of the client is up to you.
So we are just basically saying that they are from this network so you can just take any of these client.
So after that you have to give the interface which is in these monitor mode.
So this is the command to depart any of the client from this network.
So you first use this airplane Enzi and this is very powerful tool because we have to crack the handshake
from the word list using the same application which is airplanes.
And this airplane has this argument which is diet which is with some time that is the fourth and we
have just given infosec in and out of us again the client will try to reconnect.
And in that case we'll just capture that Tensing.
So let me just hit enter and it is sending everything that it to says and sue it for some time you could
now clearly see right away we have this handshake it is saying that we have these WB handshake right
here.
That means we are able to capture the w a handshake we just the odd this kind from the nettle and we
just get that handshake.
Now what you need to do is create a war list.
So Frist versus is sending a packet which is a handshake packet from the airplanes you are basically
Iridium it is the aerodrome what we just did here.
So first we use air them to send that handshake.
Second is we just these are some of the client are basically we disconnected for the client for some
time which we did in this case.
So next harder case is to create the world list and use this handshake against that wall is to crack
the number or to crack the key or the password of that WPA based network.
So let's see how we can do that so as this open the new terminal one more time now you can also use
with this.
So just use new one over here what you need to do is use the grant application.
So grant application is the application that is going to give us the war list.
So our list is basically the collection number.
Did you set a number that the this so WB are basically the network you use so you could see the application
are basically this network will have the password so password can be collected about disease collection
of a special characters.
It can be the collection of a number or everything it can be the collection of all fibers.
So we have to get that using these grants so the SEC grants and after that you have to give the minimum
the number of the award.
So I'll just say I went from 4 to 6 characters because it is usually standard case you will have the
application having these six hours maybe the six to maybe 10.
So this can be the standard but I'll just make a simple rule list because it can be if you use that
it can be the size of one's CV.
So I don't want that because we are just using this as a sample case.
You can also download this grant application or basically instead of just making use of Cohen's application
you can download the world list from the online so you can go to some browser and sorts for grants or
list it will just give you the bunch of overlays that can have the variety of sites it can be from one
TV to Tennessee visa so you can download that and work against it this handshake and after that I'm
just giving you the sample over here how to use the grants to just create the world list so you use
the grants and for is the minimum 60 the maximum after that you have to give the variety you want be
included basically in your password so maybe I want the password from ABC the E so I want the password
from ABC the e it can be the collection of any disease and I want that.
So next thing what you need to do is where you want to store that is your output.
So we are giving this all to say that it is output.
And I'll just say war list is my output.
And if I hit into it is going to do it stocks and it has shown that it has generated.
That is a number of lender you could clearly see the number of line.
So if you want to see the information of that file you'll use that get an award list.
And if I read into it is the list of a password that it had generated using a b c d so we could see
we have these bunch of line.
So next thing what you need to do is use this against this handshake and that will discover that in
the next Alexa.
But before wrapping that we have these grant application and there is another argument that is available
in this grant application and that is to just to make some patterns.
So we'll use that in order to create some patterns that we need.
So what I want is I want to use the grant application that is the same application and you could also
see here that it has given some command so let me just grab it.
So instead of writing by myself Alice grabbed me down at the store.
What this means.
So let me just paste but I am not going to run this because you could see it is.
Let me disclose this.
We don't want because this will be so months.
Months of application that I'll just have to run for an entire day if you want these grants of the world
list.
So let's go over here.
Let's go.
Okay.
It was right here.
Okay.
Where is the command
let's go known.
It has already started.
So it should be clear where is the ok it this where was the command.
So I'll just copy one more time new window and I want to copy right here a paste right here and this
does not contain that D let me just go over here and show you so what this means is you the grunts it
is basically the minimum and it is maximum that means we just want to create the world list that contains
only eight characters.
And after that this is the range we want to cover.
So we want everything that is included from this air to day.
That means any alphabet.
And after that we have these.
That is deep.
So this is very important.
So this is the D.
That is our argument and you know this all pattern is to this to determine where this war list sort
of be.
So let me just grab this one and I was to you what this means.
So let's go right down over here and let me this best is.
And you could see now that this is the T argument and T argument reverse the pattern.
So pattern is basically this you can see the editor sign over here and 1980s.
That means it sued into it in 1980 the passwords sued into it in 1980 and there can be any dispute or
any number over here and you could see we have given the eight characters to be the final password that
means force would be always the character that is that is always the number nineteen is and after that
the phone can be anything because we want the it does it you can clearly see we have the IT digit and
for the pattern that if you want to do anything over here then it should be with the edit it to edit
it defines that each character so it can be it does it in this edit it also defined it can be from a
to z.
And for this four that can be from a to z.
And after that it should in the 1980s.
So this is a pattern you can include to your grunts list with this argument and the next one is to output
and output is basically to.
This these should be saved.
So this will be f in this leg so we'll just create this award list and work against the WB a sic to
crack the password of this network.
The next let's assume the next one.