[hunt3r972]

unfortunately mine hasn't. If I've read correctly, I have to do 4 steps:

1. airmon-ng start Wlan0
2. airodump-ng -w capture.cap --output-format pcap --channel X --encrypt WPA mon0
3. handshake
4. /pentest/passwords/crunch/crunch 7 14 abcdefghijklmonpqrstuvwxyzABCDEFGHIJKLMONPQRSTUWXYZ0123456789 -u | aircrack-ng -a 2 -b 00:00:00:00:00:00 -l file.txt -w- capture.cap

Right ?

I tried it and it's too long ... over 1 hour and didn't find a 14 char password without number, special char and caps. I really believe that a WPA2 key with caps, numbers and special char is impossible to crack (with dictionary and brute force attack).

Maybe WPS bypassing is better and faster...

[chmod]

if you know the password contains no caps numbers or special chars ommit them from crunch this will signifficantly reduce cracking times

Code:

/pentest/passwords/crunch/crunch 7 14 abcdefghijklmonpqrstuvwxyz -u | aircrack-ng -a 2 -b 00:00:00:00:00:00 -l file.txt -w- capture.cap

other than that it looks right but brute forcing does take a long time many years in some cases WPS can also take a while (up to 10 hours) but the attack can be paused and resumed at a later date if required

[hunt3r972]

yeah you're right but in the case that it's an unknown AP you have to put every chars ( normal, caps and numbers) and it's a little bit too long has I said ... not impossible but too long

[chmod]

True but if you know the router is one provided by the isp then you can find out the format of thwarting default key and try brute forcing that first for example you come across an AP named ISPHUB and you discovered their keys are lowercase no numbers (not all that uncommon or not where I live anyway) you would set up your character set and length accordingly

[hunt3r972]

Oh yeah very smart ! I will remember this thanks !

[chmod]

No problem it's all about thinking outside the box and another reason to change default passwords

[hunt3r972]

So i'm pretty sure that If I change my box login and my WPA2 key for something like @lOh@2k12 i'm securised at 99,9%

[chmod]

no I would use a longer password something at least 20 chars mixed case/numbers/special disable WPS if you have it and hope there isnt an exploit availible for your device, as with everything else nothing is ever going to be 100% secure but you can make it difficult enough that the majority of people give up

[samuraiu1]

Thanks, i will try, will be back with my results

[ingushmen]

On what operating system go?