A denial of service attack is another matter.
What is the easiest method for blocking out a Wife Network.
It's removing a magnetron from a microwave oven.
After dismantling a microwave you will find the device pictured above.
It's the heart of the microwave.
The magnetrons shown in the picture is ready for sale on a Chinese website this option works for people
who don't want to dismantle their microwaves.
It's enough to plug the device in and move away quickly.
All wireless networks within hundreds of meters will be shut down.
Easy and effective.
What are the protection measures with regard to infrastructure attacks.
All in all given the outlined attack cases need to remember about several key points
don't use the word protocol and try not to use the first version of WPA.
If you are using WPA or better still WPA too.
This doesn't eliminate all potential threats.
If you don't have a radius server ensuring that your pre-shared key cannot be cracked is vital the key
shouldn't be found in any dictionary.
That would make you a prime target for known types of cracking.
The key also has to be relatively long.
The longer it is the longer it would take an attacker to brute force it attacks can be automated using
professional tools like wireless security auditor developed by l.com soft a Russian company that specializes
in cracking tools of all sorts.
We've already talked about PMK attacks.
We'll see an example of this attack soon.
Summing up these two modules I can risk saying that efficient Wi-Fi protection is relatively easy to
implement
a good solution is authenticating users to the ATO to daddle 11 x standard.
For example radius server and protecting transmitted data using the ATO to 11 I's standard.
For example WPA to
let's see what could happen if we don't implement these recommendations.
Our access points use the old web protocol or the first version WPA.
Moreover they operate in the pre-shared key DSK mode and don't use a radius server authentication.
This means that we're ripe for a simple computer network attacks.
The programs that facilitate these attacks have been the basic component of the BackTrack distribution
for many releases now.
The usage of these tools has recently become even easier previously you had to type in about 4 commands
in the command line terminal.
If your operation required turning the interface off and starting it in the listening mode.
This took six instructions in total.
Now breaking into a badly configured vlan is as easy as launching Fearn Wi-Fi cracker.
The tool is planned to be a component of the newest backtrack.
This is a small application with an intuitive interface.
There's even an update button for checking the current version.
It'll help us break into a weekly protected wireless network.
I'd like to show you how this is done.
The program is probably already available for Windows systems
will use its Linux version though because Wi-Fi car drivers that run on Windows don't allow active data
exchange with networks you're not yet connected to.
The basic scenario of some of the attacks is forcing a client to disconnect.
We'll talk about it more during the demonstration.
We'll start with switching to backtrack Here's Fearn why firecracker installed configured and running
this toy is the aircraft an aero dump ngi suite of tools.
Other than these two dependencies will also need running Python scripts.
To launch an attack we need to select an interface a network card interface here is called VLAN 1.
After selecting the interface you can select channels that are to be scanned by double clicking anywhere
in the main window.
The tool is set to scan all channels by default.
Will want to scan for the access points with active connections instead.
After clicking on toolbox settings you can enable the feature that locates the output as geographical
coordinates.
You can also set the Wi-Fi attack options there.
If mac addresses are filtered you can type here the MAC address that had been in a separate earlier
or admit any mac address if you don't want your real answer has to be saved in the access point.
Administrators logs.
Let's start this scan.
Note that two monitors appeared for an y firecracker scans for networks protected with WEP in the first
window while in the second.
The search applies to villans protected with WPA.
Let's start with the web scan.
You can see here the BSA ID of an access point.
This is simply the physical MAC address of the AP.
We need it for checking whether there is any active connections to an access point.
The tool is detected one web protected network which means that looking at a MAC address we know that
it's connected to the phone network.
There are no other networks around.
We've managed to detect a weekly protected network that is actively used at the moment at the bottom
of the window you can see the number of the ethernet frames sent and received by a client.
We'll need now to choose from the main window.
The option you can see below.
We need to select an identifier of the targeted network in our case.
This is default.
You can select one of the three listed attacks on what networks that can be seen below.
You can also use default options and click on attack.
Since we've selected R.P. request replay as the attack we have an opportunity to see the communications
between our computer and an access point.
The point is obtaining a sufficient number of initialization vectors.
If we manage to do this we'll try cracking the key data encrypted with the same RC for protocol.
It always looks the same
as you can see.
We found out that an attack that consists of forcing an access point to generate initialization packets
by responding to our ERP requests has managed to gather an appropriate number of packets to be able
to crack the key.
We needed twenty nine thousand 362 packets in total after gathering and saving the packets to pick up
both monitors close
at the bottom of the above window you can see the hexadecimal value of the key this key will enable
us to connect to an access point to a weekly protected web encrypted wireless LAN.
The whole attack took less than two minutes while configuring a well-protected access point.
You can submit a password in two formats or there in a hexadecimal notation or as an ASCII string.
The attack we've run produced the first format output.
If you don't want to use this format you can convert it to ASCII code.
We've connected an online converter.
It's a converter we've been redirected to by a search engine.
After typing in the key correct by Fearn why fire cracker.
It turns out that the password protected network is Hakam.