Testout Ethical Hacker Pro 13.1.9 Discover a Hidden Network

Question - Answer

Q1: What is the BSSID of the rogue access point? Correct answer: 00:00:1B:11:22:33

Scenario

You are a cybersecurity consultant. The company hiring you suspects that employees are connecting to a rogue access point (AP). You need to find the name of the hidden rogue AP so it can be deauthorized. The computer suspected of using the rogue access point is Exec-Laptop. In this lab, your task is to complete the following: On IT-Laptop, use airmon-ng to put the wireless adapter in monitor mode. Use airodump-ng to find the hidden access point. On Exec-Laptop, connect to the rogue AP using the CoffeeShop SSID. Answer the question.

Solution

Complete this lab as follows: 1. On IT-Laptop, configure the wlp1s0 card to run in monitor mode as follows: a: From the Favorites bar, open Terminal. b: At the prompt, type airmon-ng and press Enter to find the name of the wireless adapter. c: Type airmon-ng start wlp1s0 and press Enter to put the adapter in monitor mode. d: Type airmon-ng and press Enter to view the new name of the wireless adapter. 2. Use airodump-ng to discover and isolate the hidden access point as follows: a:Type airodump-ng wlp1s0mon and press Enter to discover all of the access points. b: Press Ctrl + c to stop airodump-ng. c: Find the hidden access point ESSID <length : 0>. d: In the top right, select Answer Questions. e: Answer the question. f: In Terminal, type airodump-ng wlp1s0mon --bssid bssid_number and press Enter to isolate the hidden access point. 3. Switch to the Exec-Laptop and connect to the Wi-Fi network as follows: a: From the top navigation tabs, select Floor 1 Overview. b: Under Executive Office, select Exec-Laptop. c: From the notification area, select the Wi-Fi network icon. d: Select Hidden Network. e:Select Connect. f: In the Enter the name (SSID) for the network field, type CoffeeShop. g:Select Next. h: Select Yes. i: Under Lab Questions, select Score Lab.