Basic Wifi-hacking
Written by: Mad76e
Dedicated to a group thats no more
.. Never opened myself this way
life is ours, we live it our way
all these words I don't just say
..and nothing else matters
trust I seek, and I find in you
every day for us something new
open mind for a different view
and nothing else matters
Copyright 2015 by Mad76e
All rights reserved This book or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of the publisher except for the use of brief quotations in a book review or scholarly journal
First printing 2015
ISBN 978-1-329-62744-4
Mad76e
Please note:
This book is written from a hackers perspective
Never do anything against another wireless network without the owners written approval. All of the content in this book is 100% legal to do as long as you have permit from the owner to do so. This book is NOT an invitation for you to commit crimes; therefore its in your interest to check with your country's laws where applicable
I. Introduction
Hi! My name is mad76e and this is my first attempt to write an E-book on WiFi -hacking. This book is written to those who are interested in learning about Wi-Fi hacking, and interested in doing it the old fashion way inside terminals. I will write a more advanced book about WiFi-hacking later, so expect more from me in the next future
So what the fuzz over WiFi-hacking then? Whats so special with it? Well most of us think about free internet, some of us think a bit longer, like an extra layer of protection between you and the internet, as an extension to a VPN. There might be people that trying to hack the clients connected to the AP. Thats why this is somewhat connecting to the pentesting area as well. I will go through some pentesting in my next book. You may ask yourself Isnt there a greater risk that we will get caught if the owner finds out that we are using his net? The answer to that might be yes, and it will increase the more heaver load you putting on the router. But as long as you use the router with common sense you will probably be fine. To trace a client who is connected to an AP is basic knowledge for a hacker, but hardly something that normal internet users as Pelle or James is capable of. Their knowledge might go as far as Facebook and Hotmail, but on the other hand we can never be 100% sure. Remember were small part of the internet users that actually know how things work. Most people will just plug in the cables to the router and surf. They will ignore changing the WPA2-PSK from factory and never change the ESSD or even the login to the damn router. More about that later
One of the reasons I hack an AP nowadays is just that extra layer of security. If we screw up somewhere on the net, you still are protected because the outgoing IP will not be yours, it will be the targets, so if you get compromised (doxed trough different resolvers etc.) or the traffic you wants to go through your VPN decides to take another way for some reason, then Its good to have that extra buffer. Now we dont want our target to get caught, so we cant get sloppy. We will be carful with what we doing. And if you think about it for a moment, its better to have the SWAT guys outside a house further down the street than in front of your house. And that gives you the extra time to hide your hacking stuff. I'm talking about the external USB drives you saved all hacking related stuffs on, your and your antennas, which can be easily packed in a bag or a banana box, depending on the size of your antenna.
My ambition with this PDF-file is to introduce you to several areas that is in a way connected to WiFi-hacking and those are often forgotten. WiFi hacking is just much more than just play around with aircrack. Also Im going to use several tools to help me and locate those vulnerable routers. Some of you may be a bit frightened about the terminal window that I usually work in. The reason for doing things manually are that dont trust scripts that other has written, and thats because one of my former friends tried to infect me with a rat a couple of years ago. I see it like This is the foundation, when you mastered the terminal windows then its okay to play with different scripts. Now this is important to understand, I dont hate to work in a and I often do when Im lazy, but to learn this craft you should start from the beginning in terminals. So were going to start from the basic with correct hardware and end with "Qs and As" in the end of this book . Oh and one more thing.
II. Hardware
Lets start with hardware. What kind of hardware do I need? And it depends on what kind of hacking youre going to do. Its a good idea to use a laptop or a notebook, reason for this its more mobile and lighter to move around with. Programs as Reaver and Aircrack-suite are not depending on CPU performance to preform okay with one exception, and thats the aircrack-ng which is depending on your CPU floating point performance. Hacking WEP works but it will take a little longer with a weak machine. The real problem starts when youre trying to crack WPA/WPA2 handshake and youre using a wordlist. A weak machine preforms between 300-1000k/s and a faster machine from 1000-3500k/s. However this is not enough in the long run. Its possible though to save your *.cap file with your handshake and crack them in a stationary computer with proper hardware.. And thats what Im doing. More about that further down.
As I see it. Minimum computer requirements are 800MHz processor with USB2 support and 512-megabyte ram and a WiFi-stick that supports injection, and thats the absolute minimum requirements. You will be fine to use the tools except cracking of the WPA handshake. However I recommend at least 2Ghz CPU and 2gigabyte ram and USB2 support. The WPA/WPA2 cracking you will do at another place with a stationary computer.
As you see above, its a basic Raspberry Pi model B running a Kali-ARM. Now this is running on the absolute minimum requirements, but works as a charm. Why I put this picture here is to prove a point. It does not have to be a PC, it can likewise be a Beagle Box Black or any penetrating box or a smartphone with the right software.
A.
There is a bunch of WiFi sticks out there and Im sorry to say we cant use all of them to hack with. As you can see on the pictures below there are some sticks with and without antennas. If you expect to get better coverage from your WiFi-stick we must invest in a that has a removable antenna. So to ease things we will choose a WiFi stick with an RP-SMA connector. With this connector its very simple to change the antenna to another by screw the old antenna off and replaced with a stronger antenna. With that said, dont discard the idea to use a WiFi stick that doesnt have an antenna. They can be handy when doing close WiFi hacking that requires as small devices as possible, more about that later.
Also, you should not manipulate with the transmit power, because it doesnt affect received signal strength. 1000mW is just as good as 2000mW period, and in worst case scenario you will only burn the chip in the long run.
