WiFi Hacking: Wireless Penetration and Security MasterClass

Install the virtual software (virtual box) and import the operating system. Configure the virtual machine name, snapshots, credentials, memory, and storage, then set a bridge adapter and start the OS.

Import and boot a Linux VM in VMware, configure processors and a bridge network to obtain an IP from your access point, and preview penetration testing tools.

Learn to create and manage snapshots to back up a virtual machine, restore to prior states, and safely test changes without risking the operating system.

Explore how a wireless network uses an access point, unique IP addresses, and data requests to connect to the internet, and why wireless security matters.

Connect and configure a wireless adapter to establish a direct wireless connection to an access point from the virtual machine, obtain an IP, and explore 2.11 frequency basics.

Convert a wireless adapter from managed to monitor mode to capture all traffic for wireless packet sniffing, and learn three methods plus OS compatibility considerations.

Explore the wifi frequency bands 2.4 ghz, 2.6 ghz, 5 ghz. Learn how access points operate on a single band at a time and 2.4 ghz offers 14 channels.

Explain how mac addresses uniquely identify each device and demonstrate changing a mac address with Mac Ginger (mac changer) or manual Linux commands to hide identity and access points.

Discover target sniffing basics by extracting complete details of an access point and its connected stations, including MAC addresses, using the network analysis tool.

Learn how to sniff wireless traffic on 5 gigahertz networks, compare 2.4 and 5 gigahertz frequency ranges, and use compatible adapters in monitor mode to capture packets.

Explore how deauthentication attacks disconnect clients from wireless networks by crafting authentication packets, targeting a specific access point, using a device’s MAC address, and observing repeated disconnects.

Discover hidden ssids by watching for a device connecting to an access point, revealing the ssid name, and using an active authentication step to reveal hidden ids upon reconnection.

Discover how MAC address verification governs access with blacklist and whitelist schemes, and see how spoofing a MAC address can influence connection to restricted wireless networks.

Explore the WEP protocol by examining RC4 encryption, the initialization vector, and 64- or 128-bit keys, and explain how these elements enable CRC32 integrity checks and potential attacks.

Crack wireless security by learning how to capture large volumes of WEP packets, exploit repeating IVs, and recover the access point key through practical packet collection and analysis.

Explains cracking a WEP key without clients using fake authentication and a replay attack to generate and capture packets from an unassociated access point.

Examine what wifi protected setup (wps) is, how it uses wpa and wpa2 personal protocols, and how a digit pin or push button enables easy connection, while noting exploitation risks.

Explain how the WPA-WPA2 handshake works and how attackers can eavesdrop in monitor mode to capture the handshake. Demonstrate how dictionary attacks derive the pre-shared key from captured data.

Explore cracking a captured wifi handshake with a dictionary attack, using a password list and wordlist to test passwords, then consider longer dictionaries and track progress.

Learn how to conduct a dictionary attack to crack a wifi handshake, save progress, and manage cracking sessions using John the Ripper with word lists.

Learn how to speed up WPA password cracking using rainbow tables, building pre-shared keys from a dictionary, and importing password lists to create targeted databases.

Explore evil twin theory by creating a fake access point with an SSID and prompting users to enter passwords via the network, illustrating deauthentication attack and social engineering attack.

Demonstrate an evil-twin attack by creating a fake access point, capturing a four-way handshake, and cracking the password with a dictionary or brute-force attack to reveal authentication vulnerabilities.

Learn how captive portals use an open access point to show a web login page, where a username grants internet access at cafes and hotels.

Explore how a man-in-the-middle attack sits between the victim and the access point to intercept traffic via arp poisoning by spoofing mac and ip addresses.

Demonstrates how to exploit an open wifi access point with a captive portal to perform a man-in-the-middle attack, capture login credentials, and observe traffic with Wireshark.