Time for action – uncovering hidden SSIDs

Follow these instructions to get started:

1. Using Wireshark, if we monitor the Beacon frames of the Wireless Lab network, we are able to see the SSID in plain text. You should see Beacon frames as shown in the following screenshot:

   

2. Configure your access point to set the Wireless Lab network as a hidden SSID. The actual configuration option to do this may differ across access points. In my case, I need to check the Invisible option in the Visibility Status option as shown next:

   

3. Now if you look at the Wireshark trace, you will find that the SSID Wireless Lab has disappeared from the Beacon frames. This is what hidden SSIDs are all about:

   

4. In order to bypass them, first we will use the passive technique of waiting for a legitimate client to connect the access point. This will generate Probe Request and Probe Response packets which will contain the SSID of the network, thus revealing its presence:

   

5. Alternatively, you can use aireplay-ng to send Deauthentication...