Hack WiFi with a $15 Rasperry Pi Zero and Kali Linux
https://www.youtube.com/watch?v=_wz-36y1nyM
[00:00] This is a Raspberry Pi 02W.
[00:03] It has built-in Wi-Fi.
[00:05] And what's fantastic now is that you can use Ki Linux to attack Wi-Fi networks using just this little Raspberry Pi.
[00:11] In this video, I'm going to show you various things, including how to run a deck against Wi-Fi cameras.
[00:16] So, I can view the output of the cameras on this phone, but I'm going to show you how to attack the Wi-Fi network and deth those cameras using just a Raspberry Pi with no external Wi-Fi adapter.
[00:30] I'm also going to show you how to run an attack against a Wi-Fi network so that when a client such as this phone connects to the Wi-Fi network that we capture the forwardware handshake and then crack the password.
[00:41] Now, as always with these types of things, this video is for educational purposes only.
[00:45] In the real world, you're probably not going to use this to try and crack passwords because it's too small.
[00:52] You're going to want to use a GPU, but as always, only use this device and various technologies that I'm going to demonstrate in this video to attack networks that you own or have
[01:01] attack networks that you own or have permission to attack.
[01:03] Don't use bad permission to attack.
[01:05] Don't use bad passwords like I'm going to demonstrate in this video because I'll show you how easy it is to crack networks when bad passwords are used.
[01:11] Make sure that you use for instance WPA3 today rather than WPA2.
[01:17] I have got a little TPLink router here which I'm going to attack.
[01:19] I have given myself permission to attack my own network.
[01:23] Okay, so use the various timestamps to jump to the relevant parts of the video.
[01:27] In this first demonstration, I'm going to show you how to deth IP cameras.
[01:31] I want to thank Brilliant for sponsoring this video.
[01:34] When you work with large amounts of data, it's really important that you have clarity about what you're working with.
[01:38] Small changes can have large impacts and incorrect calculations and assumptions can mess up your results.
[01:45] Brilliant helps you become a better thinker and problem solver with thousands of visual interactive lessons in math, science, programming, data analysis, and AI.
[01:55] Two courses that I recommend that you look at are exploring data visually, which helps you spot patterns and communicate them clearly.
[02:02] patterns and communicate them clearly.
[02:03] Also have a look at regression and classification to show how changes in features shift outcomes.
[02:08] The great thing about this is that you are not watching someone else analyze the data.
[02:12] You're doing it yourself step by step and you're getting feedback along the way.
[02:17] This is a very practical way to build judgment which you can use at work or on personal projects.
[02:24] To start learning for free today, go to brilliant.org/davidbombble or scan the QR code on screen or click on the link in the video description.
[02:32] Brilliant also gives you 20% off an annual premium subscription when you use my link, which gives you unlimited daily access to everything on Brilliant.
[02:44] Okay, so I've got my Raspberry Pi 02W powered on.
[02:47] It's connected to my computer and I'm recording the screen using OBS so that we can see the output.
[02:55] I've also connected a Raspberry Pi keyboard to the little Raspberry Pi.
[02:57] So, all I've got here is HDMI, keyboard, and
[03:03] all I've got here is HDMI, keyboard, and power.
[03:05] There is no external Wi-Fi adapter connected to this Raspberry Pi.
[03:07] We'll simply use the built-in Wi-Fi on the Raspberry Pi.
[03:12] Okay, so the first thing I'll do is show you that I'm connected to the Raspberry Pi.
[03:15] Notice you can see that we've got a Raspberry Pi 02W here.
[03:19] I'll clear the screen.
[03:21] Okay, so now I'm going to attack the Wi-Fi network.
[03:23] The Wi-Fi network that I'm attacking is free Wi-Fi.
[03:25] I'll show you how you can discover various Wi-Fi networks later on in this video, but in this example, I am assuming that I know the Wi-Fi network that I'm going to attack.
[03:35] Okay. So, notice at the moment, this is working.
[03:37] You can see the timer is incrementing on the camera.
[03:39] If I put my hand in front of the camera, you can see that output.
[03:44] So, camera is busy working.
[03:47] It's capturing stuff.
[03:49] But if I press enter now, let's see what happens.
[03:51] Okay. So, you can see packets are being sent.
[03:53] What you'll also notice here is the time has stopped.
[03:57] And now if I put my hand in front of the camera, nothing happens because it's actually lost connection.
[03:59] Try again.
[04:03] connection. Try again.
[04:03] It's trying to connect, but nothing's happening.
[04:06] connect, but nothing's happening.
[04:06] Try to refresh this.
[04:07] Try to refresh this.
[04:07] Nothing's happening.
[04:09] happening.
[04:09] I have basically destroyed this little Wi-Fi network.
[04:11] this little Wi-Fi network.
[04:11] The cameras no longer work.
[04:13] no longer work.
[04:13] Okay.
[04:13] So, what I'll do is stop that deorth attack.
[04:17] is stop that deorth attack.
[04:17] So, hopefully what should happen is the cameras come back now.
[04:18] hopefully what should happen is the cameras come back now.
[04:18] And there you go.
[04:20] cameras come back now.
[04:20] And there you go.
[04:20] Cameras are back.
[04:22] Cameras are back.
[04:22] So I can put my hand in front here and notice that's working again.
[04:25] in front here and notice that's working again.
[04:25] So what I'll do now is run the attack again.
[04:27] again.
[04:27] So what I'll do now is run the attack again.
[04:29] attack again.
[04:29] You can see packets are being sent.
[04:30] being sent.
[04:30] What you'll notice here is the time has stopped again.
[04:33] the time has stopped again.
[04:33] And if I put my hand in front of the camera, nothing is happening.
[04:35] my hand in front of the camera, nothing is happening.
[04:35] I can move the camera around.
[04:37] around.
[04:37] Nothing is happening because we have deed the network.
[04:40] Nothing is happening because we have deed the network.
[04:40] Let's try and connect to the network using this phone and see if that makes a difference.
[04:43] have deed the network.
[04:43] Let's try and connect to the network using this phone and see if that makes a difference.
[04:45] connect to the network using this phone and see if that makes a difference.
[04:45] As you can see there, it's now not connected at all.
[04:47] and see if that makes a difference.
[04:47] As you can see there, it's now not connected at all.
[04:50] you can see there, it's now not connected at all.
[04:50] So that's timed out.
[04:52] connected at all.
[04:52] So that's timed out.
[04:52] And here you can see it says connection failed when I try and connect to the free Wi-Fi network.
[04:54] And here you can see it says connection failed when I try and connect to the free Wi-Fi network.
[04:57] failed when I try and connect to the free Wi-Fi network.
[04:57] As you can see, it's not connecting.
[04:59] As you can see, it's not connecting.
[04:59] Internet not available.
[05:01] not connecting.
[05:01] Internet not available.
[05:01] It's jumping to other networks here.
[05:03] It's jumping to other networks here.
[05:06] It's not connecting to free Wi-Fi at all.
[05:08] So when I try and connect to free Wi-Fi, it's saying connection failed or as you can see here, incorrect password.
[05:13] Try and connect.
[05:13] Incorrect password.
[05:17] So, I'm not able to connect to the Wi-Fi network.
[05:20] I'll keep trying.
[05:22] It's saying connecting.
[05:26] Then it bounces.
[05:26] Try again.
[05:28] Can't get to it.
[05:28] And then it says password not correct.
[05:31] If I stop the attack, however, so I'll stop it now on the Raspberry Pi.
[05:36] I can now connect to the free Wi-Fi network.
[05:39] So if I go to davidbombell.com that works now because I am connected to the free Wi-Fi network.
[05:47] Okay.
[05:47] So that is once again a deac using a Raspberry Pi 0.
[05:51] Notice once again that I'm not using an external Wi-Fi adapter.
[05:53] I'm using the built-in Wi-Fi on this little Raspberry Pi Zero.
[06:01] [Music]
[06:02] Okay.
[06:02] So now I'm going to show you how to use a Raspberry Pi Zero with the
[06:05] to use a Raspberry Pi Zero with the built-in Wi-Fi to attack a Wi-Fi network.
[06:07] Again, I'm attacking my own Wi-Fi network here.
[06:11] So, I have given myself permission to attack this Wi-Fi network.
[06:14] We're going to use some software that allows us to use various attacks against the Wi-Fi network.
[06:18] But what we're going to do here is capture the four-way handshake and then decrypt the password.
[06:24] So, all I need to do is use this command pseudo Wi-Fi.
[06:27] The first thing I'd like you to see is that it puts the adapter into monitor mode.
[06:33] So, this Broadcom adapter is now put into monitor mode.
[06:36] It says you're enabling monitor mode on WLAN zero.
[06:37] I haven't used an external Wi-Fi adapter yet at all.
[06:40] I'm using the built-in Wi-Fi.
[06:42] Now, it's picked up a whole bunch of Wi-Fi networks.
[06:46] The one that we're going to use is free Wi-Fi.
[06:48] So, I'm going to press Ctrl + C here, and then I'm going to enter one to select that Wi-Fi network.
[06:55] You can see that it's saying encryption is WPA, but it's actually WPA2, and we have three clients on the network.
[06:58] So, I'll press enter.
[07:05] network. So, I'll press enter.
[07:07] It can run various attacks including a pixie dust attack.
[07:09] I'm going to press Ctrl + C here and C to continue because I don't want to run that attack.
[07:13] We can do a null pin attack.
[07:15] Ctrl + C. C to continue. WPS pin attack.
[07:19] Crl C. C to continue. PMK ID capture.
[07:22] Crl C to continue.
[07:24] And this is what we're going to do here is we're going to do a Wi-Fi handshake capture.
[07:30] So, what I'm going to do is get this client to connect to the network.
[07:36] Notice it's connected to the free Wi-Fi network.
[07:38] And as soon as it did that, the handshake was captured and the password is cracked.
[07:43] The password is Spider-Man.
[07:45] Now, I'm going to reiterate this because I always get feedback about this.
[07:50] The encryption is WPA2. It's not WPA even though it says WPA in Wi-Fi.
[07:57] It's actually WPA2. Wi-Fi is using the wordless probable text word list to crack the password.
[08:01] The password that was cracked is Spider-Man.
[08:04] It was very easy to crack this Wi-Fi network's Wi-Fi
[08:07] easy to crack this Wi-Fi network's Wi-Fi password because the password is so bad.
[08:09] password because the password is so bad. Don't use passwords like Spider-Man.
[08:10] Don't use passwords like Spider-Man. Again, all I used here was a Raspberry
[08:13] Again, all I used here was a Raspberry Pi 02W. No external network adapter at
[08:17] Pi 02W. No external network adapter at all. Just this Raspberry Pi was used to
[08:19] all. Just this Raspberry Pi was used to attack the network. Okay. So, I've shown
[08:21] attack the network. Okay. So, I've shown you two demonstrations. I've shown you
[08:23] you two demonstrations. I've shown you how to run a deck against a Wi-Fi
[08:26] how to run a deck against a Wi-Fi network. I've shown you how to capture
[08:28] network. I've shown you how to capture the password of a Wi-Fi network and then
[08:31] the password of a Wi-Fi network and then decrypt it. Now, I'm going to show you
[08:32] decrypt it. Now, I'm going to show you the full process on how to install Ki
[08:35] the full process on how to install Ki Linux on the Raspberry Pi. I'll show you
[08:37] Linux on the Raspberry Pi. I'll show you all the steps to get this up and
[08:39] all the steps to get this up and running, including updating your
[08:41] running, including updating your software on the Raspberry Pi 2W.
[08:45] software on the Raspberry Pi 2W. [Music]
[08:47] [Music] Okay, so the first thing you need to do
[08:48] Okay, so the first thing you need to do is go to raspberrypi.com/software
[08:52] is go to raspberrypi.com/software and download the Raspberry Pi Imager. In
[08:55] and download the Raspberry Pi Imager. In this example, I'm using Windows, so I'm
[08:57] this example, I'm using Windows, so I'm going to download the software for
[08:59] going to download the software for Windows. People often complain when I
[09:01] Windows. People often complain when I use Windows. I'm only doing that because
[09:02] use Windows. I'm only doing that because most people use Windows, but you could
[09:05] most people use Windows, but you could also download it for Mac as well as
[09:07] also download it for Mac as well as Linux. So, what I'll do is open that
[09:09] Linux.
[09:09] So, what I'll do is open that software and run it.
[09:12] We asked whether we want to allow changes to our device.
[09:14] We're going to say yes.
[09:15] We're going to specify our language.
[09:18] In this case, it's going to be English.
[09:18] Click next.
[09:20] Read the license agreement and agree to it and click next.
[09:23] I'm going to use the default installation folder.
[09:25] Click next.
[09:28] I'm going to create a shortcut.
[09:30] Click next.
[09:30] Software is now installed.
[09:33] So very simple installation and I'll launch the imager.
[09:35] Now that this is running, the first thing we need to do is choose our device.
[09:38] So in my example, it's a Raspberry Pi 02W.
[09:39] The operating system we're going to choose is a custom operating system.
[09:44] And that means we need to download KI.
[09:47] So on the ki.org website, click download.
[09:49] Click on.
[09:52] And in our example, this is the software that we want, Raspberry Pi 02W.
[09:55] So I'm going to click that to download the software.
[09:57] Now, in this example, it's going to take a while to download because I'm using Starlink here.
[10:01] So what
[10:10] because I'm using Starlink here.
[10:12] So what I've done previously is download the software in preparation for this video.
[10:16] So I'm going to simply select that.
[10:20] So here's my software, KI Linux 2025.3 Raspberry Pi02W.
[10:22] I'll click open.
[10:24] I need to select my storage.
[10:26] Not shown at the moment.
[10:29] So, you need an SD card with at least 16 gig of capacity.
[10:31] So, in my example, this is a 64 gig SD card.
[10:34] Bit of overkill, but that's fine for what I'm doing here.
[10:35] So, I'll insert that into my computer.
[10:38] So, that's now recognized.
[10:40] So, I can click next.
[10:42] But before I do that, again, device is Raspberry Pi 02W operating system that we downloaded, and we're going to write that to the SD card.
[10:47] So, I'll click next.
[10:49] Now, you can edit the settings.
[10:51] So, under settings here, you can change the name of the device if you like.
[10:58] I'll just set it to KIE.
[11:01] Default username is Ki Collie.
[11:03] You could set that to something else if you wanted to.
[11:05] You could also configure a wireless network if you wanted to.
[11:06] I'm not going to do that.
[11:08] Services, you probably want
[11:11] to do that.
[11:13] Services, you probably want to enable SSH so that you can remotely access that device.
[11:16] Options here, I don't want to enable telemetry.
[11:18] And I'm going to click save.
[11:20] You don't have to go with those customization options.
[11:22] You could just leave it with the defaults.
[11:24] But I'm going to do that and click yes to continue.
[11:26] And we warned that the SD card will be overwritten.
[11:28] Are we happy with that?
[11:30] And the answer is yes.
[11:32] And now the software is being written to that SD card.
[11:34] Now, this is going to take a while, so I'll speed the video up at this point.
[11:36] You simply need to wait for this to write.
[11:37] Okay.
[11:43] So, there you go.
[11:45] It's now finished.
[11:46] And we're told that we can remove the SD card from the reader.
[11:47] So, I'm going to click continue and take the SD card out of the computer.
[11:49] And here I've got a brand new Raspberry Pi 02W.
[11:52] So, what I can do is insert the SD card.
[11:55] And there you go.
[11:59] And all I need to do now is power it up.
[12:01] So, in this example, I've got my other Raspberry Pi.
[12:03] So, what I'll do is just power that off.
[12:05] And what I'll do is just connect everything to the second Raspberry Pi.
[12:13] Everything to the second Raspberry Pi.
[12:13] And hopefully that'll boot up now.
[12:15] Okay.
[12:15] And hopefully that'll boot up now.
[12:15] Okay.
[12:16] So, there you go.
[12:16] You can see it's booting up.
[12:18] And we are prompted with a KIE login.
[12:20] Now, what I've actually done here is connect this little Raspberry Pi
[12:23] to a big adapter that allows me to connect the keyboard as well as internet
[12:28] to the Raspberry Pi.
[12:30] So, I don't just have the keyboard connected.
[12:31] I have this huge adapter, which is totally unnecessary, but that's fine.
[12:35] So, the screen's really small, but I can log in with my username of Kie Collie here.
[12:40] So, when prompted for the username, put in the username and password.
[12:44] Okay.
[12:44] So, the font is really small here.
[12:45] So I'm going to say set font dash D to make the font a lot bigger.
[12:51] So there you go.
[12:51] So the command again was set font dash D.
[12:54] All I did here now was login.
[12:57] So again username is KIE, password is KI and then I said set the font to - D so that the font is big.
[13:07] Now one of the first things we want to do is a pseudo apt update to update our references.
[13:10] So I'll do that.
[13:15] Update our references.
[13:15] So I'll do that.
[13:17] As you can see, it's downloading the software.
[13:21] Okay.
[13:21] So references are updated.
[13:23] That means that when we run software like Wi-Fi and need to install additional software, we can.
[13:31] So notice if I run Wi-Fi here, it's enabling monitor mode on the Wi-Fi adapter.
[13:36] So you can see monitor mode has been enabled on WLAN0.
[13:39] You'll see that it's going to pick up a various Wi-Fi networks.
[13:42] And there you go.
[13:44] But what I'm going to do here is press control C andr C again because what we want to do is install the software that's missing.
[13:52] So what I'll do is simply run this again and then stop it as as soon as we see which software is missing.
[13:55] So I'll press Ctrl + C here.
[13:57] And you can see here that we need to install HCX dump tool as well as HCX tools.
[14:06] So pseudoapp install hcx dump tool.
[14:13] Press enter.
[14:18] I'll clear the screen.
[14:20] So if I run Wi-Fi again,
[14:22] what you'll notice is we have to install hcx tools.
[14:27] So p sudo at install hcx tools.
[14:32] Press enter.
[14:32] software is now being installed.
[14:37] Okay, so there you go.
[14:39] So now when we run pseudo Wi-Fi,
[14:42] we don't get those errors and the software should put the card into monitor mode.
[14:48] You can see it's already in monitor mode.
[14:51] What we did see here is that if we have errors, we need to use the kill option.
[14:54] But it seems to have worked here.
[14:55] We are getting various Wi-Fi networks and then we can attack those Wi-Fi networks such as one which is my free Wi-Fi network.
[15:03] I can press Ctrl C one to attack that network.
[15:06] I'm not going to run these other attacks.
[15:08] I am simply going to go for a WPA handshake.
[15:14] So again, this is WPA2.
[15:17] So on this phone, I'll connect to that
[15:19] this phone, I'll connect to that network.
[15:22] So, I'm going to click on free Wi-Fi and see if it captures the handshake.
[15:27] Okay, there you go. Copy of Handshake has been saved and the password has been cracked.
[15:32] The password is Spider-Man.
[15:34] Now, to run the other attack, we probably need to install that software as well.
[15:40] So, I've typed that wrong.
[15:43] MDK3. As you can see, it's not found.
[15:44] So, pseudoapp install MDK3.
[15:48] See if that works.
[15:51] And there you go. It's now installing.
[15:54] And then I'll be able to run a deth attack against my cameras as an example once that's installed.
[16:03] Okay. So as always have a look at the documentation.
[16:07] So like the man pages will show you various options here.
[16:09] The one that I was doing was D for Dorth attack.
[16:11] I need to specify my Wi-Fi card.
[16:15] So, WLAN0
[16:19] So, WLAN0 D is going to be DOTH.
[16:21] And then the D is going to be DOTH.
[16:23] And then the Wi-Fi that we're going to attack is free Wi-Fi.
[16:25] And as you can see there, that's now working.
[16:28] And it's disconnecting a whole bunch of clients from the network.
[16:31] Okay.
[16:33] So, now I've shown you two attacks using a Raspberry Pi 02W with the built-in Wi-Fi.
[16:36] Didn't have to use an external adapter.
[16:39] You can do this with a Raspberry Pi 5 as an example or Raspberry Pi 4.
[16:45] Have a look at my previous video where I showed you that.
[16:47] The great thing here is this is a nice little device that you can use for testing.
[16:51] Quite inexpensive.
[16:53] Raspberry Pies are useful for many things.
[16:56] And the great thing here is that you can simply change the SD card if you want to change the operating system and boot into something else as an example for running other tests.
[17:02] But for Collie, this is fantastic.
[17:04] Built-in Wi-Fi adapter.
[17:06] You can do various things.
[17:08] Hope you enjoyed this video.
[17:09] If you did, please like it.
[17:11] Please consider subscribing to my YouTube channel and clicking on the bell to get notifications.
[17:14] I'm David Bombell and I want to wish you all the very