Before even starting to read this make sure you have compatible wireless adapter!
For this tutorial you will need backtrack, you can download from here (I am using Backtrack 5 for this tutorial).
Once downloaded you can either burn the .ISO to a cd and boot it, or you can make a frugal install using UNetbootin.
Ok, when you successfully start backtrack go to Applications > Exploitation Tools > Wireless Exploitation Tools > Wlan Exploitation > gerix-wifi-cracker-ng.
![[Image: 86437852.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tc5_f_A8XRrrSvHeh9FLa-LP5Q1BLMzIqcMgZnNFbjZbdYuJcBJzFAXmlb-VcmVRTXn5_15KQh9vORUkMasOvDSjMDShykWFHltIM0jbDWUp-mbY0=s0-d)
Once the program is started go to "Configuration" tab.
![[Image: 79399926.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vlTIPmU073NBM_6bMbDdZ8--m2PxhudCURSspBlvg4j-P6ok7qVWRgoiIRudiJfOKWFZe5j4_lCNjTFTldMGXJysnt5ejMmkleMfiqTu09DRRzGKQH0Og=s0-d)
Press "Set random MAC address"
![[Image: 12150512.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vUDkwcRz8vEpqrFTqA0sCmu9N7M98_HkCjOq-zDM1Humy-Z8S9-oKOKwMIh1zOu_QtEcwoUu5M0HK8AoXjwT-S6d3GXbcKaB-lTXPpkMvagMRK2Dqu=s0-d)
Then "Enable/Disable Monitor Mode"
![[Image: 21993618.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_so-CIcYZyLfpj2NEEdpZcgjVToBi5ybgJZSP0OgS2OVCLe3384JiDDjx11xoXSS7qB2myJnTQUQAMJWFxTqidRmcpLx46cN1IqYdvH6GTi0mdKPBJFvYk=s0-d)
Now press "Rescan networks" and choose the slave.
![[Image: 48030887.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vVN1to3y3eCKMSSNVebW8772Ry7VlirRcpowYosmauvOcyx3HBkUaTi3FuZdXNUXqoaDn_hR6rpOuCZWb8ItVm0SEwOVEAxu7txcZZIXkLr9TXpEw=s0-d)
Then press the "WEP" tab, you will see the "Start Sniffing and logging" button, press that. A new window will pop-up that's airodump console. Look at the "Data" you will need 10000-20000 Data/IV's to crack the wep key (Sometimes more).
![[Image: 42338878.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_u4DtZyEAHJH0hsat2miI5Q4Ylyadr_SH38K3ZAD8yAxPAf1Hhaphhm_sHEgb0vCavGHwaZMMcuNPQaI_axyVFxBGihs1FLNS8HYHeNhN737_913ZHMmQ=s0-d)
Now we are gonna speed up the proccess of getting necessary Data/IV's. Press the "WEP Attacks (No-Client)"
![[Image: 20865461.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_ugoiCwBX85X1DCeLjIWm-42eCzrEGRYuqL5xKhsUw7qXC3ze3qmTTo4qSnXAc4viZL3219N3GR6sMNSkbS3InsJpoBPTx21UVgWA4wbT0_Lj332duDLuA=s0-d)
Then press "Associate with AP using fake auth"
![[Image: 72909853.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vewDHh0maiDOutrCM5zEC_VBXFFHPYxPvjSbMBlsThseUbdQ7vP6Cz9gmwq7ESQCl2WWha7rwwWFQHafG6jNNl5dqYk_iHQ9yNoGWogzSshJBSpfqd=s0-d)
A new shell console will pop-up, wait untill it asks you "Use this packet? Type "Y" and hit enter.
![[Image: 39811637.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vs4CLLcxbEe9SANzeabTTNo5Sqwjneuq4dLqJb-LfUoaxjCJjBhi6AE_1OU3XZfnGu4kvbhdoVSvFlFCkpCZAggQGhgGEuCUXMhQyahhXIQ6uyNtuq=s0-d)
Now press "Fragmented Attack" again a new shell console will pop-up and it will ask you "Use this packet? Type "Y" and hit enter.
![[Image: 66665680.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uf4tBeayhgx9KgzvruZ4tUaS_rCj1e4v9G-tc_bWFdwe-iu0EWzu3joUiHtzJhTiyWszL0O5RqF_SIkK5CxQ8FUKrKIkhX4C1Cq0zlbp9AaQHUbl-ieXU=s0-d)
Wait 20-30 seconds until you get enough Data/IV's to crack the WEP key.
![[Image: 38943479.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_twocmSEshPn-wgPcKo2HCYGD417P95gusk0I07Op7vLDFZZuDyPGn8GCPbnMn_rRfAixJtB8H3e9jyyeCkXkFugLlBvDACiG6FEZaEJaqLcqVZvvXYKk8=s0-d)
Once you get enough Data/IV's go to "Cracking" tab and press "Aircrack-ng Decrypt WEP Password" New shell console will pop-up, when finished decrypting it will look something like this.
For this tutorial you will need backtrack, you can download from here (I am using Backtrack 5 for this tutorial).
Once downloaded you can either burn the .ISO to a cd and boot it, or you can make a frugal install using UNetbootin.
Ok, when you successfully start backtrack go to Applications > Exploitation Tools > Wireless Exploitation Tools > Wlan Exploitation > gerix-wifi-cracker-ng.
Once the program is started go to "Configuration" tab.
Press "Set random MAC address"
Then "Enable/Disable Monitor Mode"
Now press "Rescan networks" and choose the slave.
Then press the "WEP" tab, you will see the "Start Sniffing and logging" button, press that. A new window will pop-up that's airodump console. Look at the "Data" you will need 10000-20000 Data/IV's to crack the wep key (Sometimes more).
Now we are gonna speed up the proccess of getting necessary Data/IV's. Press the "WEP Attacks (No-Client)"
Then press "Associate with AP using fake auth"
A new shell console will pop-up, wait untill it asks you "Use this packet? Type "Y" and hit enter.
Now press "Fragmented Attack" again a new shell console will pop-up and it will ask you "Use this packet? Type "Y" and hit enter.
Wait 20-30 seconds until you get enough Data/IV's to crack the WEP key.
Once you get enough Data/IV's go to "Cracking" tab and press "Aircrack-ng Decrypt WEP Password" New shell console will pop-up, when finished decrypting it will look something like this.
Video Tutorial:

0 comments:
Post a Comment