MDK3

What is mdk3 and what we can do with this tool PROBE SPAM. Probe Spam - Probequest Probe spamming refers to spamming probe requests. When a WiFi enabled device eg. a phone has WiFi turned on, but is not connected to a WiFi network, it’ll openly broadcast the SSIDs (network names) of all the networks it has previously connected to in an attempt to connect to one of them. We refer to these broadcasts as probe requests Additionally, probe requests include your device’s unique MAC address, meaning probe requests can be used to track you. A probe spam simply spams these probe requests using the SSIDs specified. This can be used to confuse WiFi trackers. BEACON SPAM or BEACON FLOODING. Beacons Flooding Beacon spam refers to spamming beacon frames. A beacon frame is simply a packet of information that an Access Point sends out, telling nearby devices the network exists Using a deauther you can spam these beacon frames, effectively creating ghost networks. These ghost networks cannot be connected to, they do not exist.

• Localized Open SSID\Beacons Swarming - Reverse KARMA.Beacons Flooding
• notice that in BEACON SPAM attack the APs names are not random names and if we make it legitimate name like Starbuks, Android AP etc.. in order to brute foce the a device connect to one of the SSIDs in this way we know that he connected to this network in the past and its in trusted network and we can use this in order to lunch an Evil Twin attack and make this device connect to us this is called reverse KARMA attack and we can do it either using MDK3 or ESP8266
• The basic concept for a localized open SSID swarming attack is to create the appearance of many available open networks, selected from a list of common open network names found in a victim's geographic area using Wigle Wifi This fake AP attack will cause any nearby device which has connected to a network with the same name (SSID) before to attempt to connect, revealing its true MAC address and populating a list of open essentially the device trusts.
• This information allows an attacker to use these trusted open networks stored on the phone to unmask or connect to the target's device at will, simply by creating a fake AP with the same name and preventing the victim from connecting to other networks. Once these network names are identified, the attacker can use these them to take over the victims data connection with a MITM attack without any warning or prompt on the device.
• We made the assumption that the most popular SSIDs are open hotspots that do not use encryption. Therefore, the APs we broadcast were configured to be open hotspots. Although airbase-ng supports the creation of multiple SSIDs, our experiments revealed that it does not properly handle a large number of SSIDs. Therefore, we limited our attack to a reasonable number of SSIDs, i.e., 5 SSIDs.
• By using a modified version of Spacehuhn's Beacon Spammer, we're able to raise the number of advertised SSIDs to hundreds, improving our chances of finding trusted networks saved on nearby devices. Mathy went on to show that a few very popular SSIDs go a long way, meaning many devices will react to a few popular SSIDs. This means swarming devices with hundreds of popular SSIDs may be overkill, but it should work just fine. DEAUTHING NETWORKS or DIASSOC NETWORKS. Deauth Attack Wi-Fi deauthentication attack and Wi-Fi disassociation attack are two attacks in which an attacker spoofs the MAC address of a victim's device and sends a deauthentication frame or disassociation frame to an access point Deauthing a network means to forcibly disconnect all the devices connected to a network. This is possible as the Management frames used to administrate a WiFi connection are unencrypted. So a 3rd party can inject false Management Frames into a network, disconnecting clients. Deauthing should not be confused with signal jamming. Think of jamming as shouting at the top of your voice to stop two people having a conversation. Deauthing is like putting on a fake moustache and bad accent, pretending to be one of the two people, and then just ending the conversation. RADIO JAMMING. Wi-Fi Jamming Radio jamming is the deliberate jamming, blocking or interference with wireless communications. In some cases jammers work by the transmission of radio signals that disrupt communications by decreasing the signal-to-noise ratio. The concept can be used in wireless data networks to disrupt information flow. http://docs.maltronics.com/deauthers/usage/

---