aircrack-ng got a deauthentication packet load

Air-Ng Got A Deauthentication Packet Load Driver First Scans

Note that for hacking WEP and WPA networks, the same tools are used, so first we will tell what is included in the attackers arsenal.

Wi-Fi networks (networks of standards 802.11a b g) are becoming increasingly popular, and if earlier it was mostly about using wireless networks in offices and hot spots, now they are widely used both in home and mobile deployments.

Especially for home users and small offices, wireless access points and wireless routers of the SOHO class are sold, and for mobile users - pocket wireless routers.

However, when deciding on the transition to a wireless network, it should be remembered that at the current stage of development, it has one major drawback - security imperfection.

In this article, we will discuss the most vulnerable areas of wireless networks and, using practical examples, we will show how they are hacked.

First, we will look at the basic security measures used today to protect wireless networks, and then we will talk about how they are being overcome by intruders.

Initially, the data transmitted in the packet is checked for integrity (CRC-32 algorithm), after which the checksum (Integrity Check Value, ICV) is added to the service header field of the packet.

Next, a 24-bit initialization vector (IV) is generated, to which a static (40-bit or 104-bit) secret key is added.

The 64-bit or 128-bit key thus obtained is the source key for generating a pseudo-random number used to encrypt data.

Next, the data is mixed (encrypted) using a logical XOR operation with a pseudo-random key sequence, and the initialization vector is added to the auxiliary field of the frame.

With open authentication, no authentication actually occurs, that is, any user can access the wireless network.

However, even in the case of an open system, WEP data encryption is allowed.

Using the TKIP protocol, network devices operate with a 48-bit initialization vector (as opposed to 24-bit WEP vector) and implement the rules for changing the sequence of its bits, which eliminates the reuse of keys.

The TKIP protocol provides for the generation of a new, 128-bit key for each transmitted packet.

In addition, WPA control cryptographic sums are calculated using a new method - the Message Integrity Code (MIC).

Each frame is placed here a special eight-byte message integrity code, checking which allows you to repel attacks with the use of fake packets.

The result is that each data packet transmitted over the network has its own unique key, and each wireless network device is endowed with a dynamically changeable key.

In the future, we will consider only the WPA-PSK version, without touching upon the WPA protocol options targeted at corporate networks, where user authorization is performed on a separate RADIUS server.

To implement this function, a table of MAC addresses of wireless client adapters authorized to work in this network is created in the access point settings.

Each wireless network is assigned its own unique identifier (SSID), which is the name of the network.

Air-Ng Got A Deauthentication Packet Load Driver First Scans

When a user attempts to enter the network, the wireless adapter driver first scans the air for the presence of wireless networks in it.

When using the hidden identifier mode (as a rule, this mode is called Hide SSID), the network is not displayed in the list of available ones and you can connect to it only if, firstly, its SSID is known exactly, and secondly, the profile has been created connect to this network.

Aircrack-Ng Got A Deauthentication Packet Load