+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: So you want free WIFI? WPA/WPA2 *incomplete (/Thread-So-you-want-free-WIFI-WPA-WPA2-incomplete)
RE: So you want free WIFI? WPA/WPA2 *incomplete - hunt3r972 - 11-02-2012
unfortunately mine hasn't. If I've read correctly, I have to do 4 steps:
1. airmon-ng start Wlan0
2. airodump-ng -w capture.cap --output-format pcap --channel X --encrypt WPA mon0
3. handshake
4. /pentest/passwords/crunch/crunch 7 14 abcdefghijklmonpqrstuvwxyzABCDEFGHIJKLMONPQRSTUWXYZ0123456789 -u | aircrack-ng -a 2 -b 00:00:00:00:00:00 -l file.txt -w- capture.cap
Right ?
I tried it and it's too long ... over 1 hour and didn't find a 14 char password without number, special char and caps. I really believe that a WPA2 key with caps, numbers and special char is impossible to crack (with dictionary and brute force attack).
Maybe WPS bypassing is better and faster...
RE: So you want free WIFI? WPA/WPA2 *incomplete - chmod - 11-02-2012
if you know the password contains no caps numbers or special chars ommit them from crunch this will signifficantly reduce cracking times
Code:
/pentest/passwords/crunch/crunch 7 14 abcdefghijklmonpqrstuvwxyz -u | aircrack-ng -a 2 -b 00:00:00:00:00:00 -l file.txt -w- capture.capother than that it looks right but brute forcing does take a long time many years in some cases WPS can also take a while (up to 10 hours) but the attack can be paused and resumed at a later date if required
RE: So you want free WIFI? WPA/WPA2 *incomplete - hunt3r972 - 11-02-2012
yeah you're right but in the case that it's an unknown AP you have to put every chars ( normal, caps and numbers) and it's a little bit too long has I said ... not impossible but too long
RE: So you want free WIFI? WPA/WPA2 *incomplete - chmod - 11-02-2012
True but if you know the router is one provided by the isp then you can find out the format of thwarting default key and try brute forcing that first for example you come across an AP named ISPHUB and you discovered their keys are lowercase no numbers (not all that uncommon or not where I live anyway) you would set up your character set and length accordingly
RE: So you want free WIFI? WPA/WPA2 *incomplete - hunt3r972 - 11-02-2012
Oh yeah very smart ! I will remember this
thanks !
RE: So you want free WIFI? WPA/WPA2 *incomplete - chmod - 11-02-2012
No problem it's all about thinking outside the box and another reason to change default passwords
RE: So you want free WIFI? WPA/WPA2 *incomplete - hunt3r972 - 11-03-2012
So i'm pretty sure that If I change my box login and my WPA2 key for something like @lOh@2k12 i'm securised at 99,9%
RE: So you want free WIFI? WPA/WPA2 *incomplete - chmod - 11-03-2012
no I would use a longer password something at least 20 chars mixed case/numbers/special disable WPS if you have it and hope there isnt an exploit availible for your device, as with everything else nothing is ever going to be 100% secure but you can make it difficult enough that the majority of people give up
RE: So you want free WIFI? WPA/WPA2 *incomplete - samuraiu1 - 01-19-2014
Thanks, i will try, will be back with my results
RE: So you want free WIFI? WPA/WPA2 *incomplete - ingushmen - 02-26-2014
On what operating system go?