- In this course, you will learn how to
perform attack against wireless infrastructure devices.
However, in many cases attackers actually don't
launch attacks against, you know those devices,
but instead they actually fool users to join
a rogue access point right, so a different
clone access point if you, if you can call that way.
And or perform you know, things like
deauthentication attacks to actually force clients
to get disconnected and perhaps you know,
join that rogue network right,
or that rogue access point.
Now, they can actually do these type of attacks,
or deauthentication attacks also for performing
a denial service attack, you know against the clients
or a specific line in the network, right?
Now, attackers can also inject packets into the network
to present fake data, right.
At the end of the day, actually what most threat actors want
is actually to steal your data, right.
So they do this by eaves dropping,
by manipulating unencrypted wifi communications,
or attacking what we call the PNL,
or the preferred network list of you know,
either a wireless device or a wireless client, right.
Now this device can be your laptop, your mobile phone,
your tablet, or even an IOT device, right?
It can be an IOT device in your house
or the thermostat in a large corporation,
it can be many different things, right so.
Now one of the benefits at least for the attacker right,
is to target the wireless clients themselves
instead of the infrastructure, because you can incorporate
the things like social engineering, right?
And by incorporating social engineering to your pen test,
you can actually fool users to either join
your fake access point, or your evil twin,
and you will, you will learn this later.
You know, how to, you can also present a captive portal
right, to fool the user to even use their
corporate credentials right, to their corporate password
to join that network, right.
Well, you can even set the SSID
to something to say a free internet, right.
And even target users outside of the corporations
and really give them, you know, free internet access, right.
So whenever they actually connect to your you know,
fake wireless device, or fake wireless access point,
you can actually, you know, allow them to go to Facebook
or allow them to go to CNN, wherever they're actually going
so they have free internet connectivity,
but then you can actually either create a captive portal
asking them to sign in, let's say with their
Facebook credentials or Twitter or any other methods,
actually you gonna learn how to clone
some of these device or some of these websites
so you can actually get their credentials, right.
So and then of course you can just give them access
to the internet, while they're going into the internet.
You can also monitor unencrypted traffic
that is actually going into the internet, right as well.
Now you will be surprised in many cases,
corporate users are even willing to put their internet
passwords, so basically their corporate credentials
to get free internet connectivity somewhere.
So you can actually have, you know
some type of portal that says, you know
you're gonna have a free access to here.
And by the way, you know, in my case, I work at Cisco.
So for Cisco employees, you can actually log into your,
you know, with your corporate credentials
and you get free internet access.
So in there, you know, you ask the user to enter
their credentials, now you have their user username
and password for your corporate or their corporate
environment.
And then you give them free internet access, right.
You probably can even enumerate what type of websites
they're actually going through
and probably even do other social engineering attacks
while they're connected.
Now there's several tools that allow you to
perform this type of attacks, right.
And yes, you can learn, you know, these tools
and basically what we call the script kiddie, right.
So basically you just use the tools, you
you know, you know, try to actually perform the
the attacks or, you know, quote unquote pen testing
but that's actually not what pen testing
is all about, right.
What I want you to learn is the methodologies.
And really think like an attacker
whenever you perform your pen test, right.
Tools come and go, the same thing goes for vulnerabilities,
they also come and go, you know.
In some cases actually some of the security folks
in my industry, they said that vulnerabilities are
a commodity and it's right, right?
And you get a vulnerability today.
You find a vulnerability today, tomorrow,
I mean of course the vendor will patch it
and then you have to figure out you know,
what to do next, right.
So just learning the tools or just learning
one vulnerability and how to exploit.
That actually, you know doesn't give you a lot
of returning investment.
So I want you to actually understand
the methodologies right.
So we're gonna be spending little bit of time
of actually showing you how you know,
the different methodologies
and pen testing actually work, right.
Now however, if you have a good foundation of not only
the knowledge about the different vulnerabilities and tools
but also a good understanding of the hacking methodologies
used by attackers, then you will become a better pen tester.
Hopefully you will learn you know, a few tips
throughout this course and in the next a few lessons.