If you got a wire less pc or a wireless laptop with wi-fi you will not be new to seeing other people networks and at some pert of time wished to see that net work or use it.
Now there are hacks out there on the internet that shows you how to do this, but it is illegal and not right. but offcourse if you have a friendly neighbour network that you can take permission to try gain acesss then the tutorial below is a real good one . check it out
Primer
Recently a team of German cryptography researchers perfected methods to recover a WEP key faster than ever before. The older Weak IV attacks generally needed between 500,000 and 2,000,000 packets to recover a 128-bit WEP key. In contrast, the new PTW method needs a mere 85,000 packets to have a 95% chance of recovering the WEP key.
Unlike the Weak IV attack, instead of collecting weak IVs, the PTW method collects ARP requests and responses to attack the encryption. ARP requests can either be collected naturally, or can be generated via packet injection. Until recently, packet injection was only possible in Linux. With the advent of the AirPcap USB adapter, and some unsupported beta drivers, it’s possible to inject packets in Windows. Update: CACE have released AirPcap Tx, which features fully supported packet injection, for an added premium.
In this tutorial, I’ll guide you through the process of recovering a WEP key, via the PTW attack, in Windows. For this you’ll be using the AirPcap USB adapter, Cain, aircrack-ptw, and the aircrack-ng suite.
Legalities
It’s important to point out that these methods should only be applied with permission from the owner of the target AP. You should either be auditing, penetration testing, or demonstrating the weaknesses of WEP in a Test Lab environment. You should not be using these methods to get “Free internet”!
Preparation
You’ll need:
Now you’ll need to prepare the environment:
- Install the beta drivers (or if you have AirPcap Tx, install the drivers from the CD-ROM)
- Plug in the AirPcap
- Install Cain
- Extract aircrack-ng to c:\airpcap\
- Extract aircrack-ptw to c:\airpcap\
- Move aircrack-ptw.exe to the bin folder (this is no longer required - see my notes)
- Optional: To make things easier, move the contents of the bin folder to c:\airpcap\. You’ll then be able to run aircrack-ptw.exe with just c:\airpcap\aircrack-ptw.exe mycapture.cap
Let’s get cracking
I added narration to the video this evening at 20:36. It’s my first attempt at narration, and a little noisy, but I’m sure things will improve as time goes on! 
Youtube Video Link
Countermeasures
The primary counter measure to this WEP attack is to cease using WEP and switch your Access Points to WPA encryption. As you’ve seen in this video, WEP is just too easy to crack. For further reading, Wikipedia has an excellent entry on WPA.
Access Points are so cheap now that, if your AP doesn’t support WPA via a firmware upgrade, you can easily afford a new one with full WPA or WPA2 support.
March (
Read Feeds In browser
Notes
Note 1: After recording this tutorial, I’ve become aware that, as of version 0.9, aircrack-ng.exe natively supports the PTW attack by using the -z switch. For example: aircrack-ng.exe -z mycapturefile.cap. If you want to use this attack, download aircrack-ng from the authors, and replace aircrack-ng.exe in c:\airpcap with the new one.
Note 2: The whole process from starting capture to recovering the WEP key takes about 10 minutes.
Note 3: It is important that you get the Packet Injection drivers and the aircrack-ng release specifically for the AirPcap adapter, or this will not work.
Note 4: Just to summarise the steps in the video:
- Run Cain and passively scan for the target AP, making a note of the Channel number.
- Using the channel number, tell AirPcap to inject packets once it has collected an ARP request. (You can sometimes force an ARP by sending Deauth. To do that, right click on the client. Otherwise, repair the Wireless connection on the client connected to the AP)
- To use the PTW attack, you need to collect all packets. By running airodump-ng you can collect all the packets generated by Cain. The reason we use airodump-ng instead of Cain, is that Cain only collects WEP IVs.
- Once you’ve collected enough packets, run aircrack-ptw against the capture file.
ref blog:http://www.twistedethics.com/2007/06/11/cracking-wep-with-aircrack-ptw-in-windows-with-airpcap-and-cain/
Support / Downloads
Drivers (Windows 2000/XP/2003/Vista, 32 and 64 bit)
Product Demos
Reveal Wi-Fi Network Passwords with WirelessKeyView

Windows only: By default Windows hides WEP and WPA keys stored on your PC to connect to various Wi-Fi networks, but freeware utility WirelessKeyView lists them for you. When you've forgotten that Wi-Fi network key, run WirelessKeyView to see all the networks your Windows PC has ever connected to using its default Wireless Zero Configuration mechanism. (This utility doesn't reveal keys stored by third-party network connection software.) Delete keys from old networks that you no longer need, and easily copy keys to the clipboard to send or save. WirelessKeyView is a free download for Windows XP and Vista.
Buy Wireless Hotspot finder gadgets on Amazon online
Read More here
http://lifehacker.com/354013/reveal-wi+fi-network-passwords-with-wirelesskeyview
Manuals
Development Resources
AirPcap Developer's Pack V 3.2.1 (12/10/2007). Download 
airpcap.dll Source Code V 3.2.1 (12/10/2007). Download 
Per-Packet Information Header specification (06/15/2007). Download 
AirPcap-Enabled Open Source Tools
Kismet 2007-10-R1 Windows Installer. Download 
Aircrack-ng 0.9.2 with AirPcap support. Download 
Wireshark with AirPcap support. Page Link 
ngrep 1.45 with AirPcap support. Page Link 
WinDump 3.9.5 with AirPcap support. Page Link 
Cain & Abel with AirPcap support. Page Link 
Search Again?

File Name:
DL Speed:
File Size:
File Date:


Airpcap 3 *DEVIANCE*
131kb/s
47.64 MB
2008-02-07

Airpcap 3 GenX Release
11kb/s
1403 MB
2008-01-30

Airpcap 3 CRACK
326kb/s
1567 MB
2008-01-30

Full Airpcap 3
150kb/s
2130 MB
2008-01-30

Airpcap 3 [KEYGEN]
141kb/s
1372 MB
2008-01-30

Airpcap 3 Latest Release
357kb/s
354.85 MB
2008-01-26

Airpcap 3 CRACK
180kb/s
4844 MB
2008-01-25

Airpcap 3 (06-07)
240kb/s
3420 MB
2008-01-20

Airpcap 3 Latest Release
371kb/s
3543 MB
2008-01-20

Airpcap 3 CRACK
323kb/s
4372 MB
2008-01-20

Airpcap 3 CRACK
14kb/s
7117 MB
2008-01-20

Airpcap 3 CRACK
36kb/s
3543 MB
2008-01-20

Airpcap 3 [FULL-CD]
360kb/s
4372 MB
2008-01-20

Full Airpcap 3
105kb/s
3482 MB
2008-01-20

Airpcap 3 GenX Release
50kb/s
3420 MB
2008-01-20

Airpcap 3 CRACK
71kb/s
4567 MB
2008-01-03

Full Airpcap 3