How to Hack Wi-Fi: Performing a Denial of Service (DoS) Attack on a Wireless Access Point « Null Byte :: WonderHowTo

Welcome back, my neophyte hackers!As part ofmy series on Wi-Fi hacking, I want to next look at denial-of-service (DoS) attacks, and DoSing a wireless access point (AP). There are a variety of ways to do this, but in this tutorial we'll be sending repeated deauthentication frames to the AP withaircrack-ng's aireplay. Remember, hacking wireless networks isn't all justcracking Wi-Fi passwords!Our Problem ScenarioLet's imagine a scenario where your best friend's girlfriend just broke up with him. He was madly in love with her, and of course, is now devastated. He's terribly depressed, and not able to eat or sleep, much less study for his upcoming exams. He even considers killing himself. You stick by your best buddy and help him through the worst time of his life, and with your care and consideration, he recovers.Unfortunately, he has college exams tomorrow. If he only had a few more days, he could cram and pass them. Our mission is to DOS the wireless access point so that the exam can't take place at the scheduled time and the school has to reschedule it, giving our best buddy the time he needs to cram and recover.Our Scenario's SolutionSo, on the day of the exam, our buddy goes to the classroom as scheduled, although totally unprepared to pass the exam. We only need to place ourselves somewhere close enough to be able to access the wireless access point. This could be in the hallway, the next room, or the library. Most access points will extend up to 300 feet (about 100 meters), so we don't have to be that close.In addition, if we put a high gain antenna on our Alfa wireless card, we can be significantly farther away. Then we pull out our trusty computer withBackTrackand ourAlfa wireless adapterto save our friend from exam Armageddon!Step 1: Open a TerminalNow that we're positioned within range of the wireless access point for the exam, let's fire up BackTrack and open a terminal. Let's make certain our wireless adapter is recognized in BackTrack and functioning.iwconfigStep 2: Put the Wireless Adapter in Monitor ModeOur next step is to put our wireless adapter in monitor mode withairmon-ng.airmon-ng start wlan0Step 3: Monitor the Available APs with Airodump-NgNow we want to take a look at all the access points in range by usingairodump-ng.airodump-ng mon0As we can see, the access point for Concord University is the third access point displayed. Note its BSSID (this is its globally unique identifier based on its MAC address) and copy it.Step 4: Connect to the Access PointNow we need to connect to the AP with our computer.We can see the connection at the bottom of screen. There we can see the access point's BSSID on the far left bottom and the MAC address of our client following it. We need both of these bits of information for our next step in this hack.Step 5: Broadcast Deauthenticate Users on the APNow we're ready to deauthenticate (bump off) all the users from the AP. We need to send thousands of deauthenticate frames to keep any one from reconnecting to the AP. We can do this by typing the following into another terminal.aireplay-ng --deauth 1000 -a 00:09:5B:6F:64:1E -h 44:6D:57:C8:58:A0 mon000:09:5B:6F:64:1Eis the BSSID of the AP.44:6D:57:C8:58:A0is the MAC address of our computer.1000is the number of deauthentication frames to send to the AP.As the students attempt to connect to the AP to take the exam, they will be unable to connect, or as soon as they do, they'll be disconnected. It's unlikely that the teacher or professor will have any idea what's happening, and for that matter, neither will the school IT director.Step 6: Success!We need to keep these deauthentication frames going toward the AP until the teacher or professor finally gives up and reschedules the exam.Now, our best buddy has a few days until the rescheduled exam to cram and pass. Thanks to BackTrack and a bit of hacking skill, we have saved our buddy from exam Armageddon!Stay Tuned...Make sure to check back on ourWi-Fi Hackingseries, because even more wireless hacks are coming! If you have any questions, please comment below or start a discussion in theNull Byte forumand we'll try to help you out.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseKeyboard,computers, anddepressed kidimages via ShutterstockRelatedHow to Hack Wi-Fi:Disabling Security Cameras on Any Wireless Network with Aireplay-NgHow to Hack Wi-Fi:Getting Started with the Aircrack-Ng Suite of Wi-Fi Hacking ToolsHow to Hack Wi-Fi:Cracking WPA2 Passwords Using the New PMKID Hashcat AttackHow to Hack Wi-Fi:Getting Started with Terms & TechnologiesHow To:The Beginner's Guide to Defending Against Wi-Fi HackingHow to Hack Wi-Fi:Get Anyone's Wi-Fi Password Without Cracking Using WifiphisherHack Like a Pro:How to Get Even with Your Annoying Neighbor by Bumping Them Off Their WiFi Network —UndetectedHow To:Hack WPA & WPA2 Wi-Fi Passwords with a Pixie-Dust Attack Using AirgeddonHow To:Hack Wi-Fi Networks with BettercapHow To:Automate Wi-Fi Hacking with Wifite2How To:Null Byte & Null Space Labs Present: Wi-Fi Hacking, MITM Attacks & the USB Rubber DuckyHow to Hack Wi-Fi:Selecting a Good Wi-Fi Hacking StrategyHow To:Build a Pumpkin Pi — The Rogue AP & MITM Framework That Fits in Your PocketHow To:Spy on Network Relationships with Airgraph-NgHow to Hack Wi-Fi:Stealing Wi-Fi Passwords with an Evil Twin AttackHow To:Scan, Fake & Attack Wi-Fi Networks with the ESP8266-Based WiFi DeautherHow to Hack Wi-Fi:Creating an Evil Twin Wireless Access Point to Eavesdrop on DataHow to Hack Wi-Fi:Choosing a Wireless Adapter for HackingHow To:Hack WiFi Passwords for Free Wireless Internet on Your PS3How to Hack Wi-Fi:DoSing a Wireless AP ContinuouslyHow to Hack Wi-Fi:Cracking WEP Passwords with Aircrack-NgHow to Hack Wi-Fi:Cracking WPA2-PSK Passwords Using Aircrack-NgHow To:Share Wi-Fi Adapters Across a Network with Airserv-NgHow To:Hack Wi-Fi & Networks More Easily with Lazy ScriptHow To:Turn Any Phone into a Hacking Super Weapon with the SonicHow To:Protect Yourself from the KRACK Attacks WPA2 Wi-Fi VulnerabilityHow To:Use MDK3 for Advanced Wi-Fi JammingHow to Hack Wi-Fi:Hunting Down & Cracking WEP NetworksHow To:Hack 5 GHz Wi-Fi Networks with an Alfa Wi-Fi AdapterHacking Gear:10 Essential Gadgets Every Hacker Should TryHow to Hack Wi-Fi:Breaking a WPS PIN to Get the Password with BullyHacking Android:How to Create a Lab for Android Penetration TestingHow To:Hack Your Neighbor with a Post-It Note, Part 1 (Performing Recon)Guide:Wi-Fi Cards and ChipsetsHow To:Crack WPA & WPA2 Wi-Fi Passwords with PyritNews:Project Zero Finds iPhone & Android Open to Bugs in Broadcom's Wi-Fi ChipsHow To:Send ADB Commands Over Wi-Fi on AndroidAndroid Basics:How to Connect to a Wi-Fi NetworkRIP:ScroogleHow To:Get Free Wi-Fi from Hotels & More