@fab

This blog post is continuation from Part01

A list of windows commands,

By default wireshark display's standard view. This default view is useful but is of little help for wireless analysis.

In wireless packet capture,

What if, we can name source and destination mac addresses wireshark!. Aliases are a boon while analysing wireshark packet captures.

In general 4-way handshake process happens as described earlier. Keys are generated on either sides(client and AP) both parties confirm on keys.Then keys are used for encryption.

But

Understanding WPA2 handshake is important to know KRACK attack. Part-1 of this blog post will be about basics required to understand KRACK.

WPA2 uses 4 way handshake process to generate required unique keys

In this blog post wifi-pineapple will be used to capture WPA2 handshake on 5GHz access point. Atheros based chipset is used in Wifi pineapple

Screen is a terminal multiplexer used to create multiple pseudoterminals. Here are some frequently used commands,

Tshark is a command line tool used as network protocol analyzer. This tool can be used to capture network traffic, or read an existing pcap file.