- [Presenter] Let's go over Airodump.
You can use Airodump to capture raw 802.11 frames, and also
if you have a GPS receiver connected to your computer
you can use Airodump to log the coordinates
of the access points that you find.
So we already know that our wireless interface is wlan0
and that Airmon is active.
So we're monitoring in wlan0mon,
as we covered in the previous lesson.
So let's launch Airodump
and specify the wlan0 monitor interface.
And as you can see
it actually starts searching for all wireless signals
from different access points near me.
In particular
you see one here that is called corp-net.
So we will use this for all of our examples
throughout the course. And here in the bottom,
you see devices that are associated to those access points
and some that are not associated at all.
And you're gonna see these throughout the course
and how we also can do evil twin attacks
impersonating other access points.
And then probably not only
deauthenticate some of these clients
but also the clients that are just looking
for default or preferred list,
you can actually fool them to connect to you
and then do other type of attacks.
Now, another feature of Airodump is
to be able to capture the wireless frames in the file.
So let's capture all the frames for the corp-net SSID
and here I'm using the command
with the --write specification, or option that specifies
that you will write the packets to a dump file.
In my example here the file is called just myFile.
You can also specify the channel, and the channel listed
for the corporate net before was channel 11.
So let's specify the BSSID for corp-net.
And then at the end, you specify our interface.
Now, as you can see, we are now just collecting packets
for the corp-net SSID,
and all those are being written to a file.
So let's just top the capture for a little bit
and see what was written.
So while there's several files in here, a CAP file,
So .cap, which is actually the capture file, CSV files,
and two files that are associated with kismet.
So kismet.csv and a kismet.netxml
or new core net XML file.
So now the CSV file contains the details
of all the access points and the clients that we're seeing.
And in lesson five, we will see how to
use Airodump to collect W E P
or WEP initialization vectors.
And then we can use them with Aircrack-ng
to crack the web password of a wireless router.
And you're also gonna see other examples
later in the course that will also use Airodump.