Hacking (redacted) PUBLIC WiFi with a Raspberry Pi and Kali Linux

About this video

Using a Raspberry Pi running Kali Linux, he demonstrates — with his wife and daughters as consenting targets, and with repeated warnings not to attack others without permission — how public Wi-Fi users can be intercepted. First is an evil twin at Starbucks: the Pi joins the real network for internet, then broadcasts a look-alike SSID, provides DHCP, and uses DNS spoofing so the victim’s requests for sites like starbucks.com land on a web server on the Pi, while the attacker can see the sites visited. Starbucks and McDonald’s resisted his other attacks, so at a smaller coffee shop he adds a deauthentication attack: scanning to copy the real SSID and channel and learn a target’s MAC address, forcing the device off the real network so it roams to his stronger fake one. Third is ARP spoofing on the same network: by telling the victim he is the router at 172.27.1.1 and telling the router he is the victim, he becomes a man in the middle and can view and redirect traffic. In each case, turning on sponsor NordVPN — pitched in the video at 75% off a three-year plan plus 1 month free, about three bucks a month, in his words — encrypts the traffic, hides DNS activity, and defeats the spoofing.

Key takeaways

• An evil twin works by broadcasting a trusted-looking SSID, handing out IP addresses, and passing real internet through so victims notice nothing
• DNS spoofing on a controlled network can redirect familiar domains to an attacker-run site and expose browsing activity
• A deauthentication attack can knock a device off the legitimate access point so it reconnects to a stronger rogue one with the same name and channel
• ARP spoofing poisons the victim-router relationship in both directions, placing the attacker in the middle to observe and manipulate traffic
• A VPN encrypting traffic on untrusted Wi-Fi hides DNS and browsing from a local attacker and blocks these spoofing tricks in the demos

Episode details: published August 27, 2019 · 22:14 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: WHY you need to study Python, Linux, CCNA 📚 AT THE SAME TIME! // ft. Cisco_Panther · Next: The Most Dangerous Linux Commands →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube