- [Instructor] Operating systems and wireless supplicants,
in many cases maintain a list
of trusted or prefer wireless networks, right?
This includes their SSID, clear text passwords
or WAP passwords or WPA passwords
and also other information that is actually needed
to connect to those preferred wireless networks, right?
So these preferred networks are automatically
connected whenever they see that they're available, right?
For example, Windows and Mac, and, you know, MAC OSX
and your iPhone, or your Android device, continuously search
for wireless networks that are actually in that list, right?
That's why sometimes you just walk to a hotel, right,
or to a coffee shop that you always go to
and automatically connect to the wireless network
without you actually knowing
if actually wifi is enabled in your device.
So basically the idea is
that you can create a stronger signal
for currently associated networks
or just impersonate an SSID, right,
So an access point and a client will actually connect
to you automatically, right?
So if the client is actually
already connected to the network
then you can perform a de-authentication attack
and then cause the client to de-authenticate
from the network and then connect to you, right?
And of course, if the client is actually not connected,
let's say, I don't know
is just walking by, or just sitting,
you know at a coffee shop.
But you know, they don't have a free wifi
but you impersonate, I don't know
let's say Starbucks's wifi, or any other type of,
you know free wifi out there,
then potentially that client can actually connect to you.
You give 'em internet access and you can actually
eavesdrop into their conversation
or perform any other type of attack.
You're gonna learn how to do this using several tools
and different methodologies later in this course