3

I'm making a school project about the AP attacks and I'd like to know how does the Fake Authentication Attack from aircrack-ng actually work and how to prevent it?

I read a lot of articles but nothing goes too deep into it. Thank you for your answers!

2

In fake authentication attack there are two types of WEP authentication (Open System and Shared Key) you can only do fake authentication for WEP enabled AP. This useful when you need an associated MAC address in various aireplay-ng for example in WEP cracking attack when there is no associated client.

It should be noted that the fake authentication attack does NOT generate any ARP packets

How it works:

1- It Sends an Authentication Request 
2- then it gets Authentication Reply if successful it would send (3) 
3- A Association request then it would get 
4- Association response it will make it successful.

ARP-Replay attack is when an ARP packet is re-transmitted back to the access point. This, in turn, causes the access point to repeat the ARP packet with a new IV. 

When this is complete and successful you can know do the Arp-replay attack so you can generate more ARP packets so that the IV can be revealed. This works because for an AP to answer to an ARP packet it has to have the MAC address of the wireless card that is doing that is replaying the captured ARP. That is why we do fake authentication.

To prevent this i only know of one way which is to stop using WEP and use WPA and WAP2. Because remember Fake authentication only works with WEP enabled AP.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.