Time for action – AP-less WPA cracking

  1. We will set up a WPA-PSK Honeypot with the ESSID Wireless Lab. The -z 2 option creates a WPA-PSK access point, which uses TKIP:
    Time for action – AP-less WPA cracking
  2. Let's also start airodump-ng to capture packets from this network:
    Time for action – AP-less WPA cracking
  3. Now when our roaming client connects to this access point, it starts the handshake but fails to complete it after Message 2, as discussed previously; however, the data required to crack the handshake has been captured.
  4. We run the airodump-ng capture file through aircrack-ng with the same dictionary file as before; eventually, the passphrase is cracked as before.

What just happened?

We were able to crack the WPA key with just the client. This was possible because, even with just the first two packets, we have all the information required to launch a dictionary attack on the handshake.

Have a go hero – AP-less WPA cracking

We recommend setting different WEP keys on the client and trying this exercise a couple of times to gain confidence. You may notice many times that you have to reconnect the client to get it to work.

Pop quiz – attacking the client

Q1. What encryption key can the Caffe Latte attack recover?

  1. None
  2. WEP
  3. WPA
  4. WPA2

Q2. What would a Honeypot access point typically use?

  1. No Encryption, Open Authentication
  2. No Encryption, Shared Authentication
  3. WEP Encryption, Open Authentication
  4. None of the above

Q3. Which one of the following is a DoS Attack?

  1. Mis-Association attacks
  2. Deauthentication attacks
  3. Disassociation attacks
  4. Both 2 and 3

Q4. What does the Caffe Latte attack require?

  1. That the wireless client be in radio range of the access point
  2. That the client contains a cached and stored WEP key
  3. WEP encryption with at least 128 bit encryption
  4. Both 1 and 3
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset