Instructor: Now that we have enabled monitor mode 2 2
on our wireless interface, 3 3
we are able to capture all the wifi packets 4 4
sent within our range, 5 5
even if the packet is not directed to our computer, 6 6
even if we're not connected to the target network, 7 7
and even without knowing the key 8 8
or the password to the target network. 9 9
So all we need right now is a program 10 10
that can capture these packets for us. 11 11
The program that we're going to use is called Airodump-NG. 12 12
It's part of the Aircrack-NG suit, 13 13
and it's a packet-sniffer, 14 14
so it's basically a program designed 15 15
to capture packets while you're in monitor mode. 16 16
So it will allow us to see 17 17
all the wireless networks around us, 18 18
and show us detailed information about it's MAC address, 19 19
it's channel, it's encryption, 20 20
the clients connected to this network, and so on. 21 21
So, let me show you how we're gonna use it. 22 22
First of all, you need to enable monitor mode 23 23
on your wireless adapter, as shown in the previous lectures. 24 24
So, if I go to my Kali machine, and run iwconfig 25 25
to list all the wireless devices on this computer, 26 26
you'll see that I have an interface called mon0, 27 27
and this interface is in monitor mode. 28 28
Now dependent on the way that you enabled monitor mode, 29 29
this can be called lan0, it can be called lan0mon, 30 30
it doesn't really matter. 31 31
You just wanna make sure you enable monitor mode 32 32
using one of the methods shown before, 33 33
and then, use the name of the adapter 34 34
that is in monitor mode when you run Airodump-NG. 35 35
Now to run Airodump-NG, 36 36
we're just gonna type the name of the program, 37 37
which is airodump-ng, 38 38
followed by the name of my wireless adapter 39 39
in monitor mode, which is mon0, as you can see in here. 40 40
So the command is very simple. 41 41
We're typing the program name, which is airodump-ng, 42 42
followed by the name of my interface in monitor mode. 43 43
If I hit Enter, you'll see it'll start working, 44 44
discovering all the wireless networks around me, 45 45
and displaying useful information about them. 46 46
This program will continue working unless you quit it, 47 47
and to quit this program, 48 48
you have to press Control+C from your keyboard. 49 49
You can actually use Control+C 50 50
to quit any running program in your terminal. 51 51
Now that we stopped the program, let's analyze the output 52 52
so we understand what it's showing us. 53 53
So first of all, if we look at this column, 54 54
the ESSID column, it should be a little bit familiar to you, 55 55
and basically this shows us 56 56
the names of the wireless networks around us. 57 57
So if I just go to my Mac machine 58 58
and look for wireless networks, 59 59
you'll see the same names that we see in here 60 60
displayed under the ESSID. 61 61
Now all of the other columns show us more information 62 62
about the network name that you see in here, 63 63
and this information will actually be very useful to us 64 64
as we go through the course. 65 65
The first column, the BSSID, 66 66
shows us the MAC address of the target network. 67 67
Next, we have the PwR. 68 68
So this is the signal strength, or the power, 69 69
of the network. 70 70
Now the higher the number, the better signal we have. 71 71
So for example, the network with the best signal right here 72 72
is this one. 73 73
Next, we have the beacons. 74 74
These are frames, sent by the network 75 75
in order to broadcast it's existence. 76 76
So every network, even if it's set to be hidden, 77 77
always sends these type of frames, 78 78
basically broadcasting it's existence, 79 79
and telling all the wireless devices around it 80 80
that "I exist, I have this BSSID. 81 81
"I work on this channel, I use this encryption, 82 82
"and my name is this." 83 83
Next, we have the number of data packets, or data frames, 84 84
and these are the useful packets 85 85
that we'll talk about later on, 86 86
once we get to the cracking section. 87 87
This column represents the number of data packets 88 88
that we collected in the past 10 seconds. 89 89
Next we have the channel, 90 90
which is the channel that the network works on. 91 91
So for example, this network right here, the Test AP, 92 92
works on channel 6. 93 93
This network works on channel 1, and so on. 94 94
Next, we have the maximum speed supported by the network. 95 95
The encryption is a very important column, 96 96
and it shows us the encryption used by the network. 97 97
So we can see that the Test AP network is using WPA. 98 98
We can see we have a network that uses WEP. 99 99
We can see this network right here is an open network, 100 100
so it doesn't use encryption. 101 101
We don't even need a password to connect to it. 102 102
And we can see we have a WPA2 network right here. 103 103
CIPHER is the cipher used in the network. 104 104
So we can see here we have CCMP, we have WEP, 105 105
and we have CCMP again here. 106 106
AUTH is the authentication used on that network, 107 107
and in here we can see it's PSK, Pre-Shared Key, 108 108
and MGT for this network. 109 109
Now don't worry about the ENC, the CIPHER and the AUTH. 110 110
We will talk about breaking into all these networks, 111 111
into WEP, WPA, and WPA2, 112 112
in the gaining access section. 113 113
And finally, you can see we have the ESSID section, 114 114
which shows the name of the network. 115 115
So this is what you see when you look for networks 116 116
in your network manager. 117 117
So that's it for this lecture. 118 118
I just wanted to give you a quick look 119 119
on how to discover all the networks around us 120 120
using Airodump-NG. 121 121
Don't worry about Airodump-NG too much now. 122 122
We're gonna be using it a lot in the next lectures, 123 123
and you'll get very comfortable with using it 124 124
as we go through the course.