- Let's go over a high level introduction of Aireplay
and basically the functionality of Aireplay.
Aireplay is actually used to inject frames, right?
So that's actually the main purpose.
The main purpose is actually to generate traffic.
So then you can use it
with other tools like Aircrack-ng to crack a weapon
WPA pressure keys in, you know,
different environments right?
So there are different attacks that you
can launch using Aireplay.
Basically you can do the authentication attacks.
You can do fake authentication attacks.
You can do replay ARP attacks and many others, right?
So the Aircrack website goes over all of them
and they have all the syntax references to launch
these type of attacks, you know
and I'm actually showing here their website
but let's just go
over a fake authentication attack real quick
just to introduce the capabilities of Aireplay
and also this way you can inject packets with
the specific wireless adapter that we're actually using.
So first launch Airodump to the channel
and the BSS ID that we used in the previous lesson.
So you will also need to know the Mac address
of your wireless adapter, right?
You can do this
by invoking the IP a show command, and here you go.
That's the Mac address of our adapter.
So, you know, make that as a reference then basically
we're invoking the Aireplay command with dash one.
So, so minus one, to specify a fake authentication attack
then you can specify the re-association timing
in seconds in our case, we'll just use zero.
And then you use the minus E option
and specify the ESS ID
of the network that we want to attack
which in this case is actually Corp-net in this example.
And then you use minus A to specify the Mac address
of the access point that we, you know
we want to actually attack.
And then minus H to specify the Mac address
of our wireless interface.
Then at the end we specify our wireless interface
and there you go.
We were able to actually send a
fake authentication request and you see authentication
successful and association successful as well.
So that means that we're able to actually also
inject packets into the air.
So our wireless adapter is successful.