Penetration Testing mailing list archives
Re: Cracking WEP and WPA keys
From: "Fabien Degouet" <fdegouet () conthackto com mx>
Date: Thu, 15 Dec 2005 13:00:11 -0600
Sometimes you try to crack an 802.11b/g and that's the problem. You can capture but you will not be able to crack the wep key because you do not capture more than the header!!. In order to attack a wireless 802.11g you need and atheros/raling chipset and update the drivers. Then you can set the speed and use aireplay as airodump whitout any problem. Check the documentation of aircrack. Once I was trying to break my wep key but my AP is B/G and I had captured like 2 millions packets...without any result. Hope this helps, fabien degouet ----- Original Message ----- From: "Robin Wood" <dninja () gmail com> To: "Fabien Degouet" <fdegouet () conthackto com mx> Cc: <pen-test () securityfocus com> Sent: Thursday, December 15, 2005 7:37 AM Subject: Re: Cracking WEP and WPA keys I'll take this one to the wireless list once I've subscribed but just to let people know that I tried again to crack my key and failed. I collected 1million IVs with a mix of aireplay and copying large files between devices. Even with that I still hadn't cracked it after 521 minutes so I gave up. I'm going to have a read of all the articles that people sent me and if I have any more prolems I'll put them on the wireless list. Thanks All Robin PS the machine doing the cracking is a Sempron 3000+ with a gig of ram in case anyone was going to suggest the machine may not be up to it! On 12/15/05, Fabien Degouet <fdegouet () conthackto com mx> wrote:
In fact, as it is a statiscical attack, it does not depend on the "weaks
IV"
but on the quantity. It's like the more unique IVs, the higher the probability to find the wep key quicker. Anyway, it's probability, even a 99% probability does not ensure you'll win!! In practice I used to crack 104 bit wep keys with around 500 000 packets.
If
you're not lucky you will need more, till a million packets. While collecting packets you can run aircrack. For example you have collected 500 k packets, you can run aircrack on the capture file as it still grows (capturing with airodump), it is even faster. That's what I usually do. Fabien Degouet ----- Original Message ----- From: "Eduardo Espina" <eduardomx () gmail com> To: <pen-test () securityfocus com> Sent: Tuesday, December 13, 2005 9:55 AM Subject: Cracking WEP and WPA keysI cracked my own WEP a few months ago, I just needed to collect about800,000IVs with airodump, then ran aircrack and I got the key in less than onesecond.(104 bit WEP) By the way, i collected the whole traffic in 2 hours. It doesn't just depend on the number of collected IVs, but the weak IVsand yourhardware. My frist try was using a 3Com Card, but I wasn't collectingenoughIVs, then I tried with a Prism2 Intersil card and it was done. You should give it more time to the airodump stage than to the aircrackone.Greetings, Eduardo. -- Eduardo Espina Garcia <eespina () seguridad unam mx> Departamento de Seguridad en Computo - UNAM-CERT DGSCA, UNAM http://www.seguridad.unam.mx Tel.: 5622-8169 Fax: 5622-8043 GPG Key Fingerprint: "8E86 932F C364 03BE 39B8 3F9D D27E 438A 3C6A
750F"
"No matter how hard you try to keep your secret, it's a universal law that sooner or later it will be discovered."-------------------------------------------------------------------------- ----Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on
your
website. Up to 75% of cyber attacks are launched on shopping carts,
forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down serversarefutile against web application hacking. Check your website forvulnerabilitiesto SQL injection, Cross site scripting and other web attacks beforehackers do!Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831-------------------------------------------------------------------------- -------------------------------------------------------------------------------
----
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers
are
futile against web application hacking. Check your website for
vulnerabilities
to SQL injection, Cross site scripting and other web attacks before
hackers do!
Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 --------------------------------------------------------------------------
-----
------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Re: Radio Signal Pent test (RFID), (continued)
- Re: Radio Signal Pent test (RFID) Toufeeq Hussain (Dec 27)
- Re: Cracking WEP and WPA keys David M. Zendzian (Dec 14)
- Re: Cracking WEP and WPA keys Demetrio CarriĆ³n (Dec 16)
- RE: Cracking WEP and WPA keys Rui Pereira (WCG) (Dec 16)
- Re: Cracking WEP and WPA keys Cedric Blancher (Dec 16)
- Re: Cracking WEP and WPA keys Matthias.Vallentin (Dec 16)
- Re: Cracking WEP and WPA keys Robert Baldi (Dec 14)
- Cracking WEP and WPA keys Eduardo Espina (Dec 14)
- Re: Cracking WEP and WPA keys Fabien Degouet (Dec 14)
- Re: Cracking WEP and WPA keys Robin Wood (Dec 15)
- Re: Cracking WEP and WPA keys Fabien Degouet (Dec 17)
- Re: Cracking WEP and WPA keys Fabien Degouet (Dec 14)
- RE: Cracking WEP and WPA keys Hamlesh Motah (Dec 14)
- RE: Cracking WEP and WPA keys Rapaille Maxime (Dec 17)