Hacker

[jadm]

Originally Posted by Edgard Chammas

Waw, a thread about hackers

About, hacking wireless WEP key. It takes you ~10 minutes to do it depending on the signal strength.
You get the victim name and channel using any tool (ex kismet), you dump the traffic into a file, inject packets to make the process faster cause you need around 100k-500k of IVs captured. Then you crack the key with aircrack-ng (airsnort is history and no longer supported).

Note: you need a linux distro, you can do it on windows but it is more complicated...

edgard did u try it?

any tutorial step by step so we could try it?

[Google]

http://www.ilabz.net/?p=401

[jadm]

Originally Posted by Edgard Chammas

http://www.ilabz.net/?p=401

tanx edgardd great article!!

i have 2 more questions :

1- this work too on WPA keys?

2 - iza fi wireless connection mana secured , bass i can't open any website
so its using proxy ? aw on mac address no? is ther any method to know the proxy so i can use this connection?

tanx

[jadm]

Edgard 3am nchaghlak ma3na

take a look at this tutorial for WPA keys :

http://tutorials.techiedesign.net/aircrack-ng-wpa/

bass abil check if ur card is compatible with aircrack here in the list : http://www.aircrack-ng.org/doku.php?...bility_drivers

watch the video , u can run it under windows vista too and crack WPA keys


and this is another tutorial for WPA : http://aircrack-ng.org/doku.php?id=cracking_wpa

[Google]

Oops, I didn't notice your previous post! Of course aircrack-ng can be used to crack WPA and WPA2, but the scenario is a little different from cracking WEP.
And yeah, you are right, not any wireless card is supported by airodump and aireplay...
And no, I'm ready all the time to help, you can contact me on my email if you don't find me on vcoderz.

[HizbullaH]

Hey Bro,
I'm Replying Now Through A Cracked Wireless Connection
WEP Cracking Is Very Easy.. And As Edgard Said, It Might Take 10 Minutes To Crack WEP! And Believe Me Some Times 2 Minutes And As Edgard Said You Need To Capture As Much IVs As You Can And Dump Them Into File And Then Use Aircrack-ng To Get The Key..

But WPA And WPA2 Cracking Have Different Technique Than WEP Cracking, For WPA(2) You Need To Capture A Four Way Handshake And Dump It Into A File And Then Use A Dictionary Attack Or A Bruteforce Attack To Get The Key!

Moreover, If You Want To Crack A Wireless Connection Your Wireless Card Must Support Monitoring And You Must Have The Appropriate Drivers And PATCHES Installed..

I Recommend You To Use The BackTrack Linux Distribution Which Contains Tons Of Hacking And Penetration Testing Tools (Including aircrack) With The Appropriate Patches Of The Supported Cards That Support Packet Re-Injection..

And Btw, To Be Able To Use airodump-ng, Your Card Must Be Switched To Monitoring Mode.. And In Order To Do That (Everything Is Under Linux Ok?) You Have To Know First The Name Of Your Wireless Interface.. Just Open The Terminal And Type:

iwconfig

Its Name May Be: wlan0, rausb0, auth0... etc

Well Now To Switch Your Wireless Card To Monitoring Mode (As Root

ifconfig wlan0 down (wlan0 Is The Name Of The Interface, It May Be Different For You!)

Then:

iwconfig wlan0 mode monitor

Then:

ifconfig wlan0 up

Ayt?

In Addition To The Above, There Are Three Types Of Attacking WEP Encrypted Wireless...

Interactive Attack: When A Client Is Connected To The Access Point
Fake Authentication: When Nobody Is Connected To The Access Point
Deauthentication Attack: When Mac Address Filtering Is Enabled!

Feel Free To Ask Any Question

[Google]

Using a dictionary attack with a password which is "Arabic in Latin Font" will surely suck big time! XD
I don't know if there exists such a dictionary lol

[HizbullaH]

Yeah But He Has No Solution
Or He Has To Pay 8000$ For This Automated Cracker
http://www.immunityinc.com/products-silica.shtml

[Google]

SILICAQ will do the same thing, it needs a dictionary to crack the WPA.

Recovering WPA handshake: SILICAQ offers an automated way of recovering a 4-way handshake from the remote end. This data could then be used with a dictionary file to perform a WPA(2) crack.

Problem not solved.

[HizbullaH]

Bas Bel Mabda2, There Is No Wireless That Can't Be Cracked Man!
As You Captured The 4-Way Handshake, Maybe You Don't Wanna Use A Dictionary (Btw There Are Dictionaries With All Possible Combinations), Then You Can Use Bruteforcing.. You'll Tell Me That Bruteforcing May Take Ages To Crack The Password... Then Very Powerful Computers And Hardware And Maybe Clustering Would Solve The Problem..
Ok Nobody Will Buy Expensive Super Computer To Crack A Wireless Password But Countries And Governments Would Do It!
And Btw The New Technology Of Cracking Depeneds On The Power Of The Process Unit Of The VGA Instead Of The CPU! Because The Perfomance Of A Powerful GPU Would Be About 60 Times Faster And Powerful Than A Core2Quade CPU!