Instructor: Okay, so through all the previous lectures 2 2
we've seen all the weaknesses 3 3
that can be used by hackers 4 4
in order to compromise 5 5
web, WPA and WPA2 encrypted networks. 6 6
We've seen how they can use these weaknesses 7 7
to crack the password and get the actual key 8 8
to the network. 9 9
We've also seen that attackers are able 10 10
to de-authenticate or disconnect any device from any network 11 11
without the need to know the key for that network. 12 12
And in the previous lecture we've seen how we can 13 13
modify the settings of our routers 14 14
so that we can increase the encryption of our network, 15 15
increase the security of our networks 16 16
so that hackers can't use the attacks and get the password. 17 17
Now in order to apply the settings 18 18
that we talked about in the previous lecture 19 19
you need to be able to access the settings page 20 20
for your router. 21 21
Now each router has a web page where you can modify 22 22
the settings for the router and its usually 23 23
at the IP of that router. 24 24
So, first of all I'm gonna check and get the 25 25
IP of my computer or of my device and I'm just 26 26
gonna do 'ifconfig lan 0' 27 27
and as you can see this is the IP of my computer 28 28
so I'm gonna open my browser 29 29
and I'm gonna navigate to 30 30
192 31 31
168 32 32
zero 33 33
and the IP of my computer was 25 34 34
usually the IP of the router is the first IP in the subnet 35 35
so this is the subnet, at the moment its 192.168.0 36 36
and I'm just gonna add number one 37 37
because that's the first IP in the subnet 38 38
and that will take me to the router settings page. 39 39
And as you can see its asking me to enter 40 40
a username and a password. 41 41
Now, routers come in with a pre-specified 42 42
username and password 43 43
you can check what is the default username and password 44 44
and then I highly recommend you change them after that. 45 45
So usually its written in the manual 46 46
so check the manual to see what's the default 47 47
username and password and then you can log in. 48 48
Now in some cases the attacker might be 49 49
doing a de-authentication attack against you 50 50
so he might be preventing you from connecting 51 51
to your network wirelessly. 52 52
So what you can do is you can connect to your router 53 53
using a cable, using an ethernet cable 54 54
and when you do that then the attacker can not 55 55
use a de-authentication attack to de-authenticate you 56 56
or disconnect you. 57 57
So you'll be able to access your router settings 58 58
using the wire and then you can modify 59 59
your security settings and change the encryption, 60 60
change the password, do all the things that I recommended 61 61
in the previous lecture in order to increase the security 62 62
so that the attacker will not be able to 63 63
attack your network and get the key. 64 64
Now, the settings of each router are different 65 65
they depend on the manufacturer and even 66 66
the model of the router but usually the settings 67 67
the way that you change the settings is the same. 68 68
And like 90% of the cases the router is always at 69 69
the first IP of the subnet so all you have to do is 70 70
you get your IP using 'ifconfig' command like we did here 71 71
like we did here when we got it and it was 192.168.0.25 72 72
that's the IP of my device. 73 73
And then I changed the last 25 to number one 74 74
to the first IP and that is the IP of my router. 75 75
Now I'm gonna navigate to the wireless settings 76 76
now as you can see there's a lot of settings 77 77
that you can change for your network and we're concerned 78 78
with the wireless settings at the moment. 79 79
So as you can see my wireless is enabled, 80 80
you can change the name of the network, 81 81
you can change the channel 82 82
and the bandwidth and all that. 83 83
So I'm gonna go to the security 84 84
and as you can see now I'm using WPA encryption 85 85
with WPA or WPA2 authentication 86 86
and the encryption using AES and TKIP 87 87
and 88 88
if I go on WPS 89 89
you can see that WPS is disabled 90 90
as we said now so basically I'm not using web 91 91
so they cannot use any of the attacks that we 92 92
spoke about that allow you to crack WEP encryption 93 93
I'm using WPA which is much more secure 94 94
and I disabled WPS so they cannot use 95 95
Reaver to determine my WPS pin and then 96 96
reverse engineer my password. 97 97
The only way that the hacker can access or 98 98
get my password is by obtaining the handshake first 99 99
and then use a word list to find my password. 100 100
Now my password is very random 101 101
even though it actually doesn't use 102 102
numbers or digits, just letters. 103 103
But its very random so there is a really small chance 104 104
of someone being able to guess that password. 105 105
Now there is another thing that id like 106 106
to show you here is the access control 107 107
and using this you can add policies 108 108
so you can add an allow policy or a deny policy 109 109
and using that is based on the MAC address 110 110
you can specify MAC addresses that you want to 111 111
allow to connect to your network 112 112
you can also specify MAC addresses 113 113
that you can deny from your network. 114 114
So for example, you can just if you don't have many people 115 115
many visitors coming to the house or if you're 116 116
in a company with a specified number of computers 117 117
and you want only to allow a number of computers 118 118
to connect to that network then you can just obtain 119 119
ask the people, get their MAC addresses 120 120
the people that you want to allow 121 121
and add them in an allow list. 122 122
Now even if someone has the actual key, 123 123
the right key for your network, 124 124
and they don't exist in the white list 125 125
or in the allow list they will not 126 126
be able to access the network. 127 127
You can also add a deny list which is if you 128 128
you want to deny a certain computer 129 129
or a certain person that you think are suspicious 130 130
you can just add the MAC address in the deny list 131 131
and they will not be able to connect to your network. 132 132
So this is about it as I said the settings page 133 133
usually look different 134 134
the names might be called different names as in 135 135
the names for each of these tabs 136 136
but usually the main thing is you should be able to access 137 137
the router settings using the subnet IP 138 138
and add the number one which is the first IP at the end 139 139
and if you're being attacked 140 140
if you can't connect to your network at all 141 141
then just use a cable and modify the settings 142 142
like we discussed in the previous lectures.