CyberXplained
Back to Attack Techniques

Wi-Fi Attacks

Explore the mechanics, types, and defenses against Wi-Fi attacks in cybersecurity.

What is a Wi-Fi Attack?

Wi-Fi attacks are malicious attempts to compromise the security of a wireless network or the devices connected to it. These attacks can lead to unauthorized access, data theft, or network disruption.

Types of Wi-Fi Attacks

  • Evil Twin Attack: Attacker creates a fake Wi-Fi access point that mimics a legitimate one to intercept user data.
  • Man-in-the-Middle (MitM) Attack: Attacker intercepts communication between two parties on a Wi-Fi network.
  • Wi-Fi Password Cracking: Attempts to guess or brute-force the Wi-Fi network's password.
  • Deauthentication Attack: Disconnects users from a legitimate Wi-Fi network, potentially forcing them to connect to a malicious one.
  • Packet Sniffing: Captures and analyzes network traffic to steal sensitive information.

Preventing Wi-Fi Attacks

  • Use strong, unique passwords for Wi-Fi networks
  • Enable WPA3 encryption (or at least WPA2) on your Wi-Fi router
  • Regularly update router firmware
  • Disable WPS (Wi-Fi Protected Setup)
  • Use a VPN when connecting to public Wi-Fi networks
  • Enable MAC address filtering
  • Segregate guest networks from your main network
  • Disable remote management on your router
  • Use a firewall and keep it updated
  • Educate users about Wi-Fi security best practices

Wi-Fi Attack Simulation

Experience a simulated Wi-Fi attack in Visualization

Wifi Attack tools and Commands

Common tools used in MITM attacks and their usage (for educational purposes only)

Airodump-ng

Monitor and capture packets on Wi-Fi networks

airodump-ng wlan0

Aireplay-ng

Perform a deauthentication attack on a target device

aireplay-ng --deauth 0 -a [Router_MAC] -c [Client_MAC] wlan0

Aircrack-ng

Crack a WPA/WPA2 handshake using a wordlist

aircrack-ng -a 2 -b [Router_MAC] -w wordlist.txt capture_file.cap

Reaver

Brute-force WPS PIN to retrieve the WPA/WPA2 key

reaver -i wlan0mon -b [Router_MAC] -vv

Wifite

Automate Wi-Fi attacks, including WPA handshake capture and cracking

wifite --all

Kismet

Wireless network detection and packet capture

kismet -c wlan0

Hostapd

Create a rogue access point for an Evil Twin attack

hostapd hostapd.conf

MdK3

Jam Wi-Fi channels for denial-of-service testing

mdk3 wlan0 d -c [Channel]

Wireshark

Analyze Wi-Fi packets and network traffic

wireshark -i wlan0 -k

Bettercap

Perform MITM attacks and analyze network activity

sudo bettercap -iface wlan0