- [Teacher] There are many wireless specific attacks.
Here we will cover some of the most common ones
and the most popular ones.
So the first type of attack,
is when an attacker installs a rogue access point
and can create a back door,
specifically if one is not conversant,
with it and have complete management of it, right so,
after this rogue access point is installed,
the attacker can then scan
and launch other attacks within the corporate network right.
Another attack is the jamming actually the wireless signal
to actually cause interference
and the purpose of this attack is actually
to cause a full or a partial denial service condition
in the wireless network.
Now, another popular attack is
that Evil Twin attack or an attack called Evil Twin.
And this is done when the attacker is trying
to create a rogue access point
to gain access to the network or steal information
and basically what they do
is actually just purchase a wireless access point
or a wireless router
and then plug them in into the network.
Then, you know, they configure them
as exactly as the one that assists in the corporate network.
And that's done so that your client connects
to the access point
and then they can actually steal your information.
As a matter of fact there are actually many tools
and devices that allow you to do this type of attack.
A simple one is a multi-use wireless exploitation tool
or also hardware called the Pineapple.
That's actually made by a company called Hak5
or an organization called Hak5
and it's very popular among a lot of,
penetration testing individuals,
and of course, you know, attackers as well.
You can also use other tools like Airman
and Aircrack to actually perform all these type of attacks.
And there are many more out there,
as matter of fact,
Airman and Aircrack are part of the Kali Linux distribution.
And basically Kali Linux,
is a framework,
you know, basically a Linux distribution that has tons
of penetration testing tools
and tons of attack tools,
all into one environment.
Another one is another attacker is Bluejacking,
and this is when the attacker sends unsolicited messages
to another device via Bluetooth, right so,
you know, this can actually be done
to attack any Bluetooth enabled device.
Another one is the Initialization Vector attack
and that's when the attacker,
can cause some modifications to the IV
or Initialization Vector
of a wireless packet,
that is actually encrypted during transmission.
And basically the goal of the attacker
is to obtain as much information about the plaintext
of a single packet and generate another encryption key
that then can be used to decrypt other packets
with the same Initialization Vector.
Now we also have,
you know, protocols and implementations
that are full of you know,
different vulnerabilities,
a perfect example is WEP.
So the WEP protocol, you know,
is susceptible to different vulnerabilities,
as well as several versions of WPAs.
And these protocols again are susceptible to vulnerabilities
and are considered weak, right so,
there are many attacks against WEPs
and many versions of WPAs,
so you should avoid using WEP
and, you know,
those versions of WPA whenever possible.
Now another wireless feature that is susceptible
to attacks,
is the Wi-Fi protect setup or WPS.
And in this screen I'm actually showing a link
to a document from the Wi-Fi Alliance,
that explains what is actually WPS
and how it works in case that,
you know, of course you're not familiar
with that feature or that implementation.
Now most of the attacks that affect WPS,
are password guessing and brute force attacks, right so,
they're aimed to obtain the WPS passwords
and then use those to gain access to the network,
and of course it's data.