Now, the fake authentication attack allows you to associate to an access point using either of the
two types of Web authentication, the open system, and shared key authentication, although it's not
strictly required.
Most of the attacks in this course will start with a fake authentication to the victim.
AP and that's in order to be able to communicate with it.
Now, before we can inject packets into a router, we have to authenticate ourselves with the router.
And to do this, we use fake authentication.
So this attack is useful in scenarios where there are no associated clients and you need to fake authentication
to the access point, so let's get started.
We'll check the mode of the wireless interface now before switching to monitor mode.
We do need to know the backside of land zero.
Type if config and copy the Mac address of Land Zero.
And then when you want to anonymize yourself, you can change or fake your Mac address, so your original
Mac address will be hidden.
To do that, you can use a tool called Mac Changer, which.
Happens to already be present in Cali, Linux, so just type Mac changer Dash are land zero.
But we do need to bring down Wheatland zero first before changing the Mac address.
All right, so it's changed now and this is the new Mac address.
Type if config WGAN zero up, do you run the interface again?
All right, so let's double check it with if config.
OK, so that looks correct, and we can switch the wireless interface to monitor mode.
Over the new terminal screen and let's start an arrow dump engy session just for this access point.
So on this command will specify the channel with the sea parameter Mac address of the access point with
VSS I.D. parameter and a file name with Dash W and interface.
All right, so now we can start the fake authentication attack.
Run er playing with the fake authentication parameter and zero.
So zero means the association timing and seconds here, it will associate one time every second.
We'll also add an E parameter to give the side of the access point, a parameter to give the Mac address
of the access point and then finally will give the Mac address of the land zero.
Now, according to the airplay output, the fake authentication was successful.
And looking at the running of air dumping capture, we can see that our Mac address is now displayed
as being associated with the access point.
All right, but we're not actually connected, but we are authenticated with a network and have an association
with it.
So that way we can inject packet's into the access point, it will now receive any request that we send
to it.