Mar 19, 2008

Hacking that wireless network

If you got a wire less pc or a wireless laptop with wi-fi you will not be new to seeing other people networks and at some pert of time wished to see that net work or use it.

Now there are hacks out there on the internet that shows you how to do this, but it is illegal and not right. but offcourse if you have a friendly neighbour network that you can take permission to try gain acesss then the tutorial below is a real good one . check it out

Cracking WEP with aircrack-ptw in Windows with AirPcap and Cain

Primer

Recently a team of German cryptography researchers perfected methods to recover a WEP key faster than ever before. The older Weak IV attacks generally needed between 500,000 and 2,000,000 packets to recover a 128-bit WEP key. In contrast, the new PTW method needs a mere 85,000 packets to have a 95% chance of recovering the WEP key.

Unlike the Weak IV attack, instead of collecting weak IVs, the PTW method collects ARP requests and responses to attack the encryption. ARP requests can either be collected naturally, or can be generated via packet injection. Until recently, packet injection was only possible in Linux. With the advent of the AirPcap USB adapter, and some unsupported beta drivers, it’s possible to inject packets in Windows. Update: CACE have released AirPcap Tx, which features fully supported packet injection, for an added premium.

In this tutorial, I’ll guide you through the process of recovering a WEP key, via the PTW attack, in Windows. For this you’ll be using the AirPcap USB adapter, Cain, aircrack-ptw, and the aircrack-ng suite.

Legalities

It’s important to point out that these methods should only be applied with permission from the owner of the target AP. You should either be auditing, penetration testing, or demonstrating the weaknesses of WEP in a Test Lab environment. You should not be using these methods to get “Free internet”!

Preparation

You’ll need:

Now you’ll need to prepare the environment:

  • Install the beta drivers (or if you have AirPcap Tx, install the drivers from the CD-ROM)
  • Plug in the AirPcap
  • Install Cain
  • Extract aircrack-ng to c:\airpcap\
  • Extract aircrack-ptw to c:\airpcap\
  • Move aircrack-ptw.exe to the bin folder (this is no longer required - see my notes)
  • Optional: To make things easier, move the contents of the bin folder to c:\airpcap\. You’ll then be able to run aircrack-ptw.exe with just c:\airpcap\aircrack-ptw.exe mycapture.cap
Let’s get cracking

I added narration to the video this evening at 20:36. It’s my first attempt at narration, and a little noisy, but I’m sure things will improve as time goes on! :)

Youtube Video Link

Countermeasures

The primary counter measure to this WEP attack is to cease using WEP and switch your Access Points to WPA encryption. As you’ve seen in this video, WEP is just too easy to crack. For further reading, Wikipedia has an excellent entry on WPA.

Access Points are so cheap now that, if your AP doesn’t support WPA via a firmware upgrade, you can easily afford a new one with full WPA or WPA2 support.

March (

Read Feeds In browser

Notes

Note 1: After recording this tutorial, I’ve become aware that, as of version 0.9, aircrack-ng.exe natively supports the PTW attack by using the -z switch. For example: aircrack-ng.exe -z mycapturefile.cap. If you want to use this attack, download aircrack-ng from the authors, and replace aircrack-ng.exe in c:\airpcap with the new one.

Note 2: The whole process from starting capture to recovering the WEP key takes about 10 minutes.

Note 3: It is important that you get the Packet Injection drivers and the aircrack-ng release specifically for the AirPcap adapter, or this will not work.

Note 4: Just to summarise the steps in the video:

  1. Run Cain and passively scan for the target AP, making a note of the Channel number.
  2. Using the channel number, tell AirPcap to inject packets once it has collected an ARP request. (You can sometimes force an ARP by sending Deauth. To do that, right click on the client. Otherwise, repair the Wireless connection on the client connected to the AP)
  3. To use the PTW attack, you need to collect all packets. By running airodump-ng you can collect all the packets generated by Cain. The reason we use airodump-ng instead of Cain, is that Cain only collects WEP IVs.
  4. Once you’ve collected enough packets, run aircrack-ptw against the capture file.

ref blog:http://www.twistedethics.com/2007/06/11/cracking-wep-with-aircrack-ptw-in-windows-with-airpcap-and-cain/

Support / Downloads

Drivers (Windows 2000/XP/2003/Vista, 32 and 64 bit)

Product Demos

Reveal Wi-Fi Network Passwords with WirelessKeyView

wirelesskeyview-header.gif
Windows only: By default Windows hides WEP and WPA keys stored on your PC to connect to various Wi-Fi networks, but freeware utility WirelessKeyView lists them for you. When you've forgotten that Wi-Fi network key, run WirelessKeyView to see all the networks your Windows PC has ever connected to using its default Wireless Zero Configuration mechanism. (This utility doesn't reveal keys stored by third-party network connection software.) Delete keys from old networks that you no longer need, and easily copy keys to the clipboard to send or save. WirelessKeyView is a free download for Windows XP and Vista.



Buy Wireless Hotspot finder gadgets on Amazon online

Read More here


http://lifehacker.com/354013/reveal-wi+fi-network-passwords-with-wirelesskeyview

Manuals

  • AirPcap Installation Manual (PDF) (12/10/2007). Download

  • AirPcap User's Guide V 3.2.1 (PDF) (12/10/2007). Download

Development Resources

  • AirPcap Developer's Pack V 3.2.1 (12/10/2007). Download

  • airpcap.dll Source Code V 3.2.1 (12/10/2007). Download

  • Per-Packet Information Header specification (06/15/2007). Download

AirPcap-Enabled Open Source Tools

Search Again?

File Name:

DL Speed:

File Size:

File Date:

Airpcap 3 *DEVIANCE*

131kb/s

47.64 MB

2008-02-07

Airpcap 3 GenX Release

11kb/s

1403 MB

2008-01-30

Airpcap 3 CRACK

326kb/s

1567 MB

2008-01-30

Full Airpcap 3

150kb/s

2130 MB

2008-01-30

Airpcap 3 [KEYGEN]

141kb/s

1372 MB

2008-01-30

Airpcap 3 Latest Release

357kb/s

354.85 MB

2008-01-26

Airpcap 3 CRACK

180kb/s

4844 MB

2008-01-25

Airpcap 3 (06-07)

240kb/s

3420 MB

2008-01-20

Airpcap 3 Latest Release

371kb/s

3543 MB

2008-01-20

Airpcap 3 CRACK

323kb/s

4372 MB

2008-01-20

Airpcap 3 CRACK

14kb/s

7117 MB

2008-01-20

Airpcap 3 CRACK

36kb/s

3543 MB

2008-01-20

Airpcap 3 [FULL-CD]

360kb/s

4372 MB

2008-01-20

Full Airpcap 3

105kb/s

3482 MB

2008-01-20

Airpcap 3 GenX Release

50kb/s

3420 MB

2008-01-20

Airpcap 3 CRACK

71kb/s

4567 MB

2008-01-03

Full Airpcap 3

4 comments:

Anonymous said...

Ok but the thing is if you want to crack a wep where the hell can you get a client connect to the AP when you dont know the damn wep !

raul said...

I like your blog. Thank you. They are really great . Ermunterung ++ .
Some new style Puma Speed is in fashion this year.
chaussure puma is Puma shoes in french . Many Franzose like seach “chaussure sport” by the internet when they need buy the Puma Shoes Or nike max shoes. The information age is really convenient .




By the way ,the nike max ltd is really good NIKE air shoes ,don’t forget buy the puma mens shoes and nike air max ltd by the internet when you need them . Do you know Nike Air Shoes is a best Air Shoes . another kinds of Nike shoes is better . For example , Nike Air Rift is good and Cheap Nike Shoes .the nike shox shoes is fitting to running.



Spring is coming, Do you think this season is not for Ugg Boots? maybe yes .but this season is best time that can buy the cheap ugg boots. Many sellers are selling discounted. Do not miss . Please view my fc2 blog and hair straighteners blog.
.thank you .


I like orange converse shoes ,I like to buy the cheap converse shoes by the internet shop . the puma shoes and the adidas shoes (or addidas shoes) are more on internet shop .i can buy the cheap nike shoes and cheap puma shoes online. It’s really convenient.
Many persons more like Puma basket shoes than nike air rift shoes . the Puma Cat shoes is a kind of Cheap Puma Shoes .
If you want to buy the Cheap Nike Air shoes ,you can buy them online. They are same as the Nike Air shoes authorized shop. Very high-caliber Air shoes and puma cat shoes . the cheap puma shoes as same as other.



polo shirts

ralph lauren polo shirts
chaussure puma

chaussure sport



chaussures puma

puma CAT

ed hardy clothing

ed hardy clothes



ed hardy womens

ed hardy sunglasses




http://www4.atword.jp/sportshoes/
http://www.actiblog.com/sdfsdfsd/
http://d.hatena.ne.jp/iblog99/
http://kurumaro.com/pumashoes

Anonymous said...

http://chinawholedalers.blog126.fc2.com/
http://ameblo.jp/wholesaleproducts/

Anonymous said...

There are ed hardy shirts
,pretty ed hardy shirt for men,

ed hardy womens in the ed hardy online store

designed by ed hardy ,
many cheap ed hardy shirt ,glasses,caps,trouers ed hardy shirts on

sale
,

You can go to edhardyshirts.com to have a look ,you may find one of ed

hardy clothing
fit for you
Top qualitymen's jacket,
These cheap jacket are on sale now,you can find
north face jackets inmage on our web
Ralph Lauren Polo Shirtsbuberry polo shirts

Do you wannaghd hair straighteners for you own , we have many
cheap ghd hair straightenersin style and great,you can choose one from these
hair straighteners
Authentic chaussure puma
chaussure sport
And chaussure nike shoes
Come here to have a look of our Wholesale Jeans
Many fashionMens Jeans ,eye-catching
Womens Jeans ,and special out standing
Blue Jeans ,you can spend less money on our
Discount Jeans but gain really fine jeans, absolutely a great bargain.
www.crazypurchase.com
China Wholesale
wholesale from china
buy products wholesale
China Wholesalers
http://www.weddingdressseason.com

Blog Comments

Softpedia - Latest software

D.e.l.i.c.i.o.u.s

Australia - News and feeds