Any previous lectures we seen have to crack the debut epee encryption in minutes even if the target
network is not busy.
Now the next lecture as we will talk about cracking WPA.
Debbie you too.
First of all before we start talking about how to create these encryptions it is very important to understand
that both of them are very very similar.
The only difference between them is the encryption used to ensure message integrity WPA uses the key
IP and WPA to uses an encryption called S.C MP.
In any case this does not affect the methods that were going to use to cry.
You pay a WPA to therefore all of the methods that I'm going to show you from now on will work on both
WPA and WPA to know both of these encryption's came after W E P and they were designed to address the
weaknesses and therefore both of them are much more secure and cracking them is more challenging.
So before we start talking about how to crack them I want to cover a feature that if enabled and mis
configured can be exploited to recover the key without having to crack the actual encryption the feature
is called WPX.
It allows devices to connect to the network easily without having to enter it.
The key for the network.
So it was designed to simplify the process of connecting printers as source devices.
You can actually see a WPX button on most wireless enabled printers.
If this button is pressed and then you press the WPX button on the rafter you'll notice that the printer
will connect to the rafter without you having to enter the key.
This way the authentication is done using an eight digit pin so you can think of this as a password
made up of ONDI numbers and the length of this password is onlly aid.
So this actually gives us a relatively small list of possible passwords and we can try all of these
possible passwords within a relatively short time was very good this pin.
It can be used to recover the actual WPA or WPA to keep.
So as you can see with this method we are not exploiting WPA or WPA to we are actually exploiting a
feature that can be enabled on these encryptions.
So for this to work first of all we need WPX to be enabled on the network because it can be disabled.
Also it needs to be mis configured so it needs to be configured to use a normal pin authentication and
not a push button.
Authentication if push button authentication is used then the rafter will refuse any pins that we try
unless the WPX button is pressed on thereafter.
Therefore the methods will not work if push button or apbt is enabled.
So in most modern routers P B C comes enable by default or WPX will be disabled by default.
So this method might not work but because WPA and WPA too are so secure and so challenging it is always
a good idea to check if WP SS enabled and tried the method then I'm going to show you to the network.
If it fails then you can try the other methods.
I'm going to show you after the next lecture.