in this video we'll be hacking Starbucks
Wi-Fi using nothing but this little guy
right here this credit card-sized
microcomputer a Raspberry Pi know what I
say hack what do I mean because
Starbucks Wi-Fi as we all know is free
well you see I'm not only hacking the
Wi-Fi I'm hacking you I'm hacking the
people unless steal your data still your
internet traffic I will own you and I
kind of feel guilty because I do believe
the coffee shop is a place where you can
feel safe and drink coffee because
coffee is wonderful but no it's
dangerous and I'm about to show you
[Music]
you guys welcome back to network chuck
let's get right into hacking now I've
been recently teaching my kids my
daughters how to use Linux and Linux is
we'll be using to hack and attack you at
Starbucks or a coffee shop or an airport
wherever you are
I'm watching I'm gonna get you and my
daughter's will too so let's go now a
disclaimer do not do this to someone
without their permission
in my example I will be hacking at
Starbucks I will be using Starbucks
Wi-Fi but the person I'm hacking they
agreed to it mostly because they have no
idea what I'm doing and second because
she's my wife I have two goals in this
video once it get you super stoat
excited about hacking I want you to
start hacking I want you to hack your
family your friends your acquaintances
your co-workers with permission but it
teaches you about security and that goes
into number two I want to make you
scared I want you to be absolutely
terrified of going to any public place
and connecting the Wi-Fi and not having
a VPN the best way to protect yourself
from people like me people like you may
be the VPN I use to keep myself safe and
my family safe is Nord VPN they are the
sponsor of this video and if you use
coupon code in network Chuck or go to
Noor VPN org forward slash Network Chuck
you get 75% off a three year plan plus
one month free which equates to like
three bucks a month so a pretty good
deal this is a final sale and it's
expiring soon so hurry up link below
later in this video I will show you how
Nord VPN will protect you from my
attacks I'll launch it and then you'll
see whoa I can't touch you so I take my
hacker daughter with me and we go to
Starbucks when we get set up and we set
our sights on a target my wife we get
our hacking station ready so we plug in
a Raspberry Pi we get logged in you'll
notice the one I'm using actually has a
little LCD screen on it and I use a
wireless keyboard to access it so it's
awesome the first attack we're going to
use is something called an evil twin
which is as fun as it sounds
play with this dandy so here's what
we're gonna do so when my hacking target
or my wife comes in the Starbucks after
she orders a drink the first thing she
does is connect our iPad to a network a
wireless network right so she can get
internet and you know Facebook and
Instagram whatever
ideally she'll connect to the real
wireless network at Starbucks is
actually named on Google Starbucks this
is often referred to as the SSID
so normally she'll connect to this be
good to go that's fine but not this time
this time and attackers coming in and
with an evil twin attack what I'll do is
I'll take my Raspberry Pi and I will
turn it into a wireless router and
here's where the evil twin comes into
play I will name my wireless network
something to do with Starbucks to try
and get my wife my target to connect to
it so what I did is I named mine
Starbucks I set my SSID to Starbucks I'm
broadcasting and this coffee shop I'm
sitting right there and as long as I can
get my target to connect to me instead
of the real wireless network I've got
her now the first thing we did with our
Raspberry Pi is we connected it to the
real Starbucks Network so we could get
internet access now why is that
important well when we create our fake
wireless network our evil twin we want
them to think they're not being attacked
right that's a point so we want to give
them internet access and we're actually
gonna let some things go through to the
real internet so they don't know
anything and then once we're connected I
then start my web server and I'll get
into why I'm doing that here in a bit
but actually do you have a website I'm
running off of this little Raspberry Pi
I'm doing that too it's crazy you should
get one of these and now we need to
gather some information now it's
important that when you have our Asbury
pine you're trying to do some attacks
like Wireless attacks you'll need a
little wireless adapter like I have here
it needs to support monitor mode so what
we're doing here at the coffee shop is
we are setting up our wireless interface
to monitor everything around us we can
pick up who's connecting to what
wireless networks there are so we're
doing that now
[Music]
and I'm doing this with a tool called
arrow dump part of the aircrack suite
and once I have my information I go when
I start to create my fake wireless
network I'm using a tool called host APD
one of the best ones you can use on the
Raspberry Pi and I modify my SSID or my
Wi-Fi name to match what I wanted to
match now I could have done Google
Starbucks but I didn't and I'll explain
why here in a moment I just chose to use
Starbucks hoping I could lure some
people to connect to me so I configured
it but before I start it up I want to
set up a few other things too I want to
set up DHCP which will give my victims
an IP address you need an IP address to
connect to the internet right so it'll
hand out Nyepi address and then I'm
using a tool called DNS chef to do
what's called DNS spoofing I'm hacking
their DNS so that when they go to maybe
Netflix calm or Starbucks calm they
won't go to the real website what I'm
gonna do is make them go to something
else in this example I'm making them go
to my my web server my website so with
my DHCP set up and my DNS setup time to
start my AP and launch my attack and now
we just wait so as you can see here I
successfully tricked my victim or my
wife to connect my fake network and from
her perspective everything is golden
right she connects she is on the
Internet and then she opens up her web
browser but this is where things get a
little interesting
I want you to notice something here
notice under the DNS window I'm able to
see every single website she's visiting
I could see everything she's doing
I can even with other tools to find out
what password she's gonna use to log in
with I basically own her life right now
now here's where the DNS fun comes in my
DNS spoofing attack I have my DNS chef
set up to make Starbucks calm go to my
own website and watch it happen here
it's amazing
[Music]
boom just like that Starbucks calm no
longer is owned by Starbucks it's owned
by me because she's connected to my
network and this is my world same thing
goes for IKEA or whatever website I
decide to impersonate you're going to my
website now what you just saw was super
easy to do I only did this using three
tools and wow I owned the network if I
would have sat there all day I guarantee
you I would have had a number of people
connecting to my network I would have
seen all their internet traffic and I
can make them do whatever I want them to
do pretty crazy and this could happen
anywhere you go from Starbucks to
airports to your business to your home
anywhere so how do you protect yourself
this way to protect yourself is using a
VPN and my wife Abby realized that so
she went to the App Store downloaded
Nord VPN set it up launched it and then
tried to go to a few other websites now
I want you to notice that at this point
she's still connected to my fake network
but I can't see anything
notice under the DNS information what
was being crazy matrix populated before
like with all the websites she's
visiting now it's it's a ghost huh I
don't see anything because she's
protected all her traffic is encrypted
or hidden from attackers like myself and
if she tries to go to one of the
websites I spoof let's say target comm
she gets there just fine
I can't spoof her DNS anymore she's safe
now the evil twin attack I mean how cool
was that you can measure their family or
friends whatever just don't do it
illegally the evil twin attack is is one
of the most popular and oldest attacks
out there I tried some other attacks at
Starbucks like art poisoning or a denial
of service and I couldn't do it because
they are pretty dang secure so Starbucks
was pretty secure and so is McDonald's
and a number of other places I tried so
I decided to go to a regular good old
coffee shop the places that I go to
these places don't have a huge
enterprise IT department with multiple
locations right this is just a coffee
shop owned by one person and I set up a
basic wireless network similar to one
you might have at your house and these
guys are ready for an attack and that's
what I did so I took my my two daughters
and we did the same thing go into a
place called conversations coffee house
a great coffee house I love and I attack
their wireless network now we get to
have a lot more fun at conversations
coffee
because well they're less secure which
means I can do more attacks so I redo
the evil twin attack because I want to
show you something cool it's called ad
Authorization attack it's sick so check
it out now I'm doing the evil twin
attack but the same principles apply I'm
setting up a fake AP or access point or
Wi-Fi network nefariously but this time
I'm gonna copy the SSID or the Wi-Fi
name exactly
so the legit Wi-Fi is conversations
Wi-Fi and I named mine conversations
Wi-Fi and the main difference in this
situation is that Chloe's already
connected to the legitimate Wi-Fi but
that's about to change because in this
example I'm going to make her disconnect
so in this process I will set up this
fake network I'll have it broadcasting
I'll have a good to go ready to hack
them but then I'll use my Raspberry Pi
to do something called ad authorization
attack which will actively send
information to the router and to Chloe's
iPad or actually my iPad in this example
to make her disconnect Shh actually I
should probably use red for that
haha gacha gacha gacha gacha and the
idea here is that my wireless router
here as broadcasting with a signal
that's higher than the one here so when
she loses a connection with the real
Wi-Fi Here I am with a stronger signal
and she'll connect the mine instead
automatically she won't even notice it
it's pretty devious right so let's do it
so same stories last time we get to our
location we set up our attack we login
to our Raspberry Pi we connect it to the
internet so we can pretend to be a real
Network and then we do our research we
launch arrow dump when we look at all
the wireless networks available to us
now this is important because we want to
copy the conversation Wi-Fi network
exactly
down to the channel they're using the
Wi-Fi channel so we scan the area we
find out the name we find the channel
and then we do something a little
different this time we dive a bit deeper
we change our command and look at
clients or iPads and phones and such
connecting to this network so we can see
what they're doing get their information
so we can attack them specifically so in
this case to run our attack we're gonna
get the MAC address or the physical
address of this iPad kinda like the home
address different from the IP address
the MAC address will never change
and once I have that information I'm
ready to set up my fake network so I'll
set up my fake network and I'll launch a
DNS DHCP I am
different software this time to run my
wireless network is called air base and
it's a quick and dirty way to set up a
wireless network perfect for when you're
hacking right so we set that up and
notice I already have some customers
connecting to me automatically which I'm
like oh my bad
I'm not trying to attack you they're
connecting to me because I am a more
powerful signal and that's what your
your your devices are constantly trying
to do constantly trying to find a better
connection and if they notice a better
connection they're gonna they're gonna
switch they're gonna roam to a new ap
and I'm impersonating the real ones so
they don't know a difference like oh
this guy looks good so I'm hacking but
Chloe on her iPad is still connected to
the good network we want to change that
so we're gonna launch ad authorization
attack which will make her disconnect
and what we'll do is we'll send frames
the authorization frames to both the
router the real router and Chloe and
it'll make them disconnect and when she
comes back up as we can see here she
should connect to me and yes she is she
gets an IP address she is starting to
track DNS information and let's look at
her IP address now yes it's a different
so before it was one seven to address
now it's a 192 my network I am the boss
now and just like before using my DNS
chef I can make her if she goes to
Starbucks calm and go to my website and
she thinks she's at Starbucks even
though it looks and nothing like it but
still I want those views in my YouTube
videos so I can make everyone go to my
website and then just like before it
using Nord VPN will protect you even if
you're connected to a bad nefarious
hacker network nor VPN will shield your
information and protect you and will
even prevent you from being attacked on
like a DNS spoofing attack where I try
to trick your DNS now there's one more
attack I want to use and I could not do
this at Starbucks or McDonald's or any
other places I tried but a regular
coffee shop with a regular Wi-Fi network
I can absolutely do this and this one's
really fun you may want to end up doing
this on your friends and your family
with permission before afterwards is not
up to me but this one's really fun and
it doesn't involve setting up a wireless
network you connect to the same network
but you attack them on that network and
this one's dangerous because you might
be connected to a wireless network that
you connect to all the time and you
think you're safe but then if a hacker
gets on that network they can attack you
and basically own you like we've done
before let me show you what I'm doing
and the secret sauce of this attack is
called ARP spoofing let me show you what
I mean so my
berry pie is no longer a wireless router
so I'm gonna get that out of here ah no
get out here but I still have the goal
of seeing all of Chloe's traffic all her
internet traffic all that she's doing on
the Internet
so how do I do that well it's ARP
spoofing this is so cool check it so
she's connected to the wireless
conversation Wi-Fi or conversations
Wi-Fi when she wants to go to Starbucks
calm she goes to Starbucks calm the real
one but now we're gonna interrupt that
using a tool called ettercap I'm going
to trick Chloe or Chloe's iPad into
thinking that I am the router but to
understand how I'm doing that we need to
cover what ARP is ARP what is this thing
it stands for address resolution
protocol and it's something we use every
day so for Chloe to get out to the
internet to go to Starbucks comm she
needs to talk to this guy right here the
router one order to talk to the router
she first has to know his IP address
well she gets through DHCP we know he
this belongs to one seven 2.20 7.1.1
what she doesn't know just yet is the
MAC address the physical address that
belongs to this router anything that
connects to the Internet has this MAC
address this physical address that
identifies so Chloe's I paddle send out
this ARP packet ARP saying who has the
IP address one seven to twenty seven one
one and the router will say yes I do
it's me and respond with his MAC address
which will look something like this and
let's say Chloe's IP address is one
seven to twenty seven one one three two
the router will do the same thing saying
hey who has one twenty seven one one
three two and Chloe go me I have it and
respond with her MAC address boa blah
whatever it is the router needs a MAC
address of Chloe Chloe needs a MAC
address of the router so they can know
how to get to each other so they know
how to talk to each other we're going to
abuse that relationship we're gonna
abuse that communication using ettercap
on our Raspberry Pi we will send our own
ARP packets are bad ARP packets will
send a bunch to the router saying hey
router I am one seven 2.27 dot one dot
one three two we're saying we're Chloe
so if you want to sing Chloe something
send it to me then we'll also send ARP
packets to Chloe say hey Chloe I am one
seven two top 20 7.1.1 so Chloe thinks
on the router
router things I'm Chloe and suddenly I'm
in the middle of their conversation I'm
eavesdropping this is often referred to
as a man-in-the-middle attack because I
am the man in the middle
now everything Chloe wants to say to the
Internet is flowing through me to the
Internet router and the router is
flowing everything he wants to say it
back to Chloe from the Internet through
me to Chloe this is important because
now I can see everything Chloe's doing I
can capture all her passwords and
traffic and I can manipulate her traffic
like we did earlier where I forced
Starbucks comm to go to my website
running on my Raspberry Pi so let's do
that Tech right now so to set up our
attack I'm going to connect to the
regular conversations Wi-Fi network not
doing any hacking just yet but what I am
going to do is scan the network to see
if I can find anybody I can attack I'll
do this with the nmap tool in Kali Linux
and this will do a scan for people out
there and now that I've scanned it I can
see oh here's some IP addresses it even
tells me what type of device it will be
and I know I'm trying to get to connect
to a an iPad so I already know Chloe's
IP address so I'm gonna pick the dot one
three two to set up my attack and this
ettercap tool is gonna be doing two
things when I launch it it's gonna be
doing the ARP poisoning or ARP spoofing
I just showed you so to be telling the
router of that I'm Chloe I've been
telling Khloe that I'm the router and
it's also going to be doing some DNS
spoofing like we did earlier with the
DNS chef it's gonna be saying hey if you
want to go to Starbucks
I'm Starbucks hey if I'm go to Ikea I am
IKEA so let's launch the command right
now
now as you can see when Chloe goes to
Google Google still works I can see her
going to Google notice that and then but
when she goes to Starbucks calm it goes
to me when she goes to Ikea calm goes to
me I'm in control I call the shots and
you can't do anything about it or can
you let's see what happens when she
invokes Nord VPN she launches an or VPN
she connects and creates a VPN
connection is she's safe and look it
works the VPN has protected me from this
attack I'm currently being it or Chloe
is currently being attacked but me as
the attacker I can't see anything I
can't affect her DNS I can't change
anything so moral the story use VPN now
this attack is fun I encourage you to
try it out I don't encourage you to use
any of these tools illegally that means
doing it to someone without the consent
but they are fun to mess with do it on
your home network mess with your family
and mess with your friends oh it's so
fun you can even do a denial of service
attack which will actually prevent them
from being able to access anything whoo
man hacking is fun exhausting you need
coffee for it but really not much else I
mean I hacked Wi-Fi using this little
bitty microcomputer a Raspberry Pi and
it really wasn't too hard this video is
more demonstration if you want to
detailed walkthrough of how I did all
these attacks I will have a walkthrough
posted below it'll either be a blog post
or a video I'm not really sure how I
want to do that yet but hacking really
isn't that hard like anything just takes
a bit to get used to and and learn there
are a few things you have to learn right
but once you get a little little taste
you're addicted right it's it's amazing
so I hope this video inspired you to
start hacking pick up a Raspberry Pi
install Kali Linux on it or even like
just install on your Windows computer
what you can do or if set up a virtual
machine and you start playing around
it'll teach you about first of all linux
which linux is amazing it'll teach you
about security Security's so big right
now if you are looking to get into the
IT field security is amazing and you'll
make just a ton of money doing it I mean
trust me and I also hope this scared you
a bit connecting to a public Wi-Fi no
matter where you are if you're not using
a VPN you are vulnerable you are and not
just you your family members so if you
don't already have a VPN that you use I
would encourage you to get Noor
VPN it's what I'm using right now again
coupon code Network Chuck or you woulda
Norview pn org /the Network Chuck you'll
get 75% off three years plus a month
free pretty good to miss again it's
three dollars a month and it just keeps
you safe peace of mind the hack the
attacks I showed you today the hacks
they're not the hard for just a novice
like myself to implement and that's just
the the tip the tip of the iceberg you
can do so many things and as you become
a more experienced hacker you can do a
lot more
I mentioned that Starbucks their network
was pretty safe and McDonald's is pretty
safe I couldn't peeing other hosts on
that network which means I couldn't
reach other hosts so all I could do is
an evil twin
but that's bound to change there's
vulnerabilities that hackers discover
every single day so having a VPN
protects you and encrypts your traffic
and plus if Nord VPNs awesome like watch
this I set this up and it's so cool hey
Siri protect me
it Auto connects to me it's an or VPN
with a Siri command which is cool you
can also have it set up to where if you
go outside your home and connect to
Starbucks or your airport or something
it'll auto connect to VPN and your phone
your tablet your computer so you have to
worry about it you're just protected
hackers are real they're out there and
you could become one right now and what
I've shown you is kind of a method to
become a white hat hacker which is what
you should be learn how to hack things
so you can learn how to protect things
so you can help other companies protect
themselves I mean that coffee shop I
went to I felt kind of bad because I
should have told them about the
vulnerabilities they have I could have
helped them protect themselves and also
that's bonus points for you guys I know
some of you already know how to mitigate
these attacks so that coffee shop what
could they have done to protect
themselves from the attacks I used what
could they have done let me know below
also are you interested in hacking do
you want to learn more I am putting some
courses below you can start with
learning networking learning security
getting your security plus getting your
CCNA getting your CH all those things
will help you become a boss security
admin and also join my community join
discord they'll be a link below I got a
ton of information security
professionals in there they will help
you get going down the right path well
guys that's about it I so appreciate you
watching this
video sticking with me and I'll get
y'all later
[Music]