Wireless / Wifi Attacks

• WiFi Exploitation Framework (GitHub)

💡 For other wireless technologies, see Bluetooth, Long-term evolution (LTE), and Zigbee.

Before Starting

Setup Wireless in Kali Linux

A USB Wireless adapter is required to inject packets. It does not work within a virtual machine.

Check for supported chipset: AWUS036NH, AWUS036NEH, AWUS051NH v2, AWUS052NH, AWUS036ACM, Tube-UN, UBDo-25, UBDo-n Mac OS X 10.13 driver.

Check if the adapter is recognized by Kali (usually wlan1)

Tested with Alfa AWUS036NEH (worked)

ifconfig
iwconfig

Turn the wireless card into monitoring mode

• airmon-ng

List networks / hidden networks

• airodump-ng
• Connect to a hidden Wifi network

KRACK Attack

• KRACK Attack – crack WPA/WPA2

Capture the 4-way handshake

• Wifite
• besside-ng
• aireplay-ng – deauthenticate clients to capture handshake

Crack Wifi passwords

• Fern Wifi Cracker
• aircrack-ng

Decrypt WEP/WPA/WAPA2 capture files

• airdecap-ng

Configure fake access points

• airbase-ng
• Wifi Pineapple – can force everyone to connect to the device

Extract Wifi Password

From a compromised computer, find wifi name and then extract the password in clear text. It can also be done via the GUI.

netsh wlan show profiles

netsh wlan show profiles name="wifi name" key=clear