So airplay and deal authentication attack sends disassociation packets to one or more wireless clients
currently associated with an access point.
So by performing this attack, we will transmit 128 deal authentication packets, they authenticate
the client from the access point as well as the access point from the client.
And the client will lose network connectivity and then re associate.
All right, you got it.
So let's start.
Our fake access point is still running, so we'll start an error dump energy session.
And as you can see in this list, my phone is associated with a fake access point.
So we'll start an arrow dumpings session for the fake access point.
Now perform the deal authentication attack on the right terminal.
So the argument that I'll give with the de'ath parameter is account for the number of times to perform
the attack.
So each attack will consist of 64 packets from the AP to the client and 64 packets from the client to
the AP.
Now, if you send a large number of packets, it will be a denial of service attack against that access
point.
So I'm just going to give zero for the pack at No.
And it will continue to send packets until I start the session.
You can stop the session just by the keyboard command control, see?
The destination address is specified with s. and the blessed with a parameter.
So we'll copy the Mac address of the client.
And we can tell from the data packets whether their client has been authenticated or not, if the data
packet numbers do not increase, the client is the authentic hated.
If the authentic attack does not work.
There could be several reasons.
Could be or physically too far away from the client, you need enough transmit power to reach the client.
That might be obvious, but you never know.
Wireless cards work with particular modes such as B.G. and.
Etc..
So if your card is in a different mode than the client, the client may not receive your transmissions.
Now, clients could also reconnect too fast for you to see that they have been disconnected.
You can always look in the packet capture for free association packet's to confirm that your attack
worked.