Sinisterly
cracking WPA2 without dictionary! - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: cracking WPA2 without dictionary! (/Thread-cracking-WPA2-without-dictionary)

Pages: 1 2 3 4

RE: cracking WPA2 without dictionary! - chupacabra - 06-30-2013

Quote:I will work through what you suggested thanx
ended up using --fakeauth in aireplay-ng to get the association to work and the problem was cleared up. thnx

RE: cracking WPA2 without dictionary! - hunt3r972 - 08-20-2013

Most of the routers are now patched against WPS pin attack so reaver is a lil' bit useless

RE: cracking WPA2 without dictionary! - moroaddict - 09-05-2013

http://hackersnewsbulletin.com/2013/09/new-password-cracking-software-tries-8-million-times-per-second-crack-password.html
still there is no problem, check this tool out hehe Smile)

RE: cracking WPA2 without dictionary! - Hardstylerz - 09-08-2013

Hello moroaddict,

As i successfully found the password of a WEP Wireless network, i tried to do the same on a WPA. But no way to get the password with some dictionaries.

In Switzerland, most of the WiFi default passwords are setup directly by Swisscom (National Operator), and the password are like this:
1lap-2k9c-zany-p1la

Do you think that your tool is enough powerful to found keys like that ?

Best regards!

RE: cracking WPA2 without dictionary! - IpLayer - 09-09-2013

(02-20-2013, 03:54 PM)moroaddict Wrote: so in my last thread i showed you all ways how to crack WPA keys WITH dicionary,now I'm going to teach you 2/3 methods i know how to crack it without a dictionary... LINK TO MY LAST THREAD ABOUT WPA PSK

1.) Combination of aricrack-ng and tool called WordField

So first of all you can download WordField here

For all beginners here is code for installation:

Code:
tar xfvz wordfield-0.1beta1.tar.gz cd wordfield-0.1beta1/ && make && sudo make install
tar xfvz gonna unzip it
cd - change directory

so you can combine this tool with John the Ripper aswell, so this is extremely fast way to "make" your own dictionary and you can use all alphanumeric also and special letters....Usage of this tool is very simple:
Code:
wordfield [OPTION...] MINLENGTH [MAXLENGTH

so after you enabled interface on monitor mode with airmon-ng and found with airodump-ng network you want to crack open new terminal and type this command:

Code:
wordfield -a -n 8 10 | aircrack-ng -b BSSID -w - ****.cap

(****) use name of document which ever you want....

-n 8 10 is min and max lenght of key as i told be4....



2.) Second way to crack it without a dictionary is using tool called reaver


So first of all how to get a reaver - just copy paste this code or type 1 by 1 in terminal between &&

Code:
sudo apt-get install libsqlite3-dev && wget http://reaver-wps.googlecode.com/files/reaver-1.4.tar.gz && tar xfvz reaver-1.4.tar.gz && cd reaver-1.4/src/ && ./configure && make && sudo make instal



Now after you enabled your interface mode on mon0 and found network you'd like to crack type this command in new terminal

Code:
sudo reaver -i mon0 -b BSSID -vv

-i interface
-b bssid you found with airodump
-vv give very verbose output

also here is a few more commands for reaver you can type in ( always you can check with --help command list so...)

-dh--small gonna speed it up

-d 0 command to set delay to 0 ( by deafult it's 1)


and 3rd method i'm not talkig about in this thread is Evil Twins Method .... I'm gonna type something about it in next thread it's a bit more complicated....Thanks


_-= THE END=-_
Hi,Im using reaver,but the target AP keep changing the channel every 4-5 minutes ,and every time he change it reaver stops untill i refresh it..any idea how to solve this Problem?

RE: cracking WPA2 without dictionary! - blackzerodagger - 09-12-2013

Hello Moroaddict,

Thanks for providing the two good methods.

i have query i tried using weaver it took me about 15 hours and there was no output , it was also getting disconnected. is this normal ?

RE: cracking WPA2 without dictionary! - moroaddict - 09-23-2013

yes thats normal....during the whole process did the reaver "count" the percentage of completed job? maybe the signal strenght isnt good enough or your neigbor is using new router with protection for this kind of attack
@Hardstylerz you're not cracking network key this time,you're attacking WPS ( 8 chars number which you can find on router)

RE: cracking WPA2 without dictionary! - Shrinivas - 09-30-2013

(09-29-2013, 05:59 PM)Genius_Coder Wrote: thanks a lot ..

moraaddict

i am using reaver .. but its saying association failed or sending EAPOL request and request time out ... do u guide me with any solution ?? Smile

RE: cracking WPA2 without dictionary! - Shrinivas - 09-30-2013

(09-29-2013, 05:59 PM)Genius_Coder Wrote: thanks a lot ..

moraaddict

i am using reaver .. but its saying association failed or sending EAPOL request and request time out ... do u guide me with any solution ?? Smile

RE: cracking WPA2 without dictionary! - Fury_mybb_import13756 - 10-03-2013

Nice Tutorial .