Hello, everyone, welcome to a new video of our life, interesting series.
So far, we have talked about how to write a two and raw sockets to scan for access points and detect
connected clients and also change channels, which is also called channel hopping.
Today, let's see how we send I.D. authentication free to disconnect the client from our network.
First thing we need to do, as usual, is to put our interface and monitor more.
Now let's use Verdonk Cash Engie to scan for access points and connected clients.
OK, we found a client connected to our network, which is just one.
We need to stop it now.
Now, let's try to use airplane technology to disconnect this client, but we also want to open Warshak
and capture the Frank.
Keep in mind that if you want if you want to captured the screaming Warshak, we need to make sure we
are listening on that channel.
So let's make sure we are on that channel and determine.
The commander are going to use this airplane, they're zero 10 Dashti.
Bashford is the access point, and she is the client that we want to disconnect, that's zero means
handiest indication.
And the 10 here is the number of authentication frames that we want to send.
Let's go to Warshak and capture frames on this interface.
We're going to filter our frames using the land that that F.C., that type underscore something, we
need the number 12, which is the growth indication.
I'm going to apply.
OK, now we are only listening for de'ath indication for.
Let's try.
We got some indication, fringier in washrag, very good, we can stop it now.
If you look here, it says de'ath, education, and in the subtype, it's what we scroll down a little
bit to check the receiver addresses and the destination, and you'll notice that there are the same
right.
So if we click here on the transmitter and we click on the destination, this is the destination address
in Hex.
But if you click on the receiver.
Decision then receiver again, it's not changing, nothing changing, because that because they're the
same address, so we don't have to provide both addresses in our frame.
All right, let's go back to our slide's.
This is a scene from before receiving a destination transmitter, but how do we build this?
The radio tap water is 12 bytes.
This is the first thing at the top.
You can copy it gives you some indication frame.
It should be the same, your access point is not going to yell at you if it's something else.
And then we have the frame control field, which is the type and the subtype.
Right.
Cesar would it's 12 microseconds is a duration and receiver destination transmitter.
But again, we don't provide both of them, only one, so you don't put the receiver address in your
frame and also the destination is going to be you're making the frame bigger than it should be.
And then sequence number, I leave it zero and then using code, there are tons of reasons code online,
you can find any one of them.
In this case, I'm using this reason code.
All right.
Let's put all the pieces together.
We create a function we called off and put all the pieces together and then we build our frame like
this and we return it from the function, and then we send this frame to our client, we should be able
to disconnect.
All right, let's try.
This is our function, the same as Asli.
And here we are using a range function to go from like looked from one to 60, and every time we're
printing that, we are sending it off and we're using this as that signal to send us the authentication
program that we returned from our function.
E0.
And here.
The receiver is my phone address, Mac address, same as the destination, but here, if you notice,
we're only using the words here doesn't matter because they're both the same.
You can put your destination or you can put a receiver where you can put the receiver, plus the situation.
It's going to be only one.
Very good.
Do try.
All right, let's try this.
Going to send about 60 frames of disintegration frames to my phone on the right side here.
He is.
The youth indicating.
Smoke again, because you do fornicated, it will try to at least try one more time.
We were able to duplicate the phone, let's make sure we're doing it right like this.
OK, Marcia here.
So the phone was connected.
We are able to disconnect this phone by sending you indication from the phone will try to authenticate
again.
So here I am using the subtype 11 for the communication.
We need to make sure that the phone is really disconnected.
If it's really disconnected, it will try to authenticate from the very beginning.
Right.
OK.
Australian.
Yes, we got the communication frames from the phone to the access point.
That's why that's because the phone was duplicator were disconnected from the network.
And you can see this checkmark here next to this.
It was disconnected and it was trying to negotiate again and sending the authentication frame to the
access point.
All right.
I think we have reached the end of this question.
Thank you for watching and see you in.