A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.
Information Security

Questions tagged [aircrack-ng]

Ask Question

An 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured.

118 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0
votes
0answers
45 views

DeAuth not DeAuthing Client (Aireplay-ng)

I'm trying to perform a De-authentication attack on my own network and client. However, the client never disconnects and I cannot boot the client from the AP. I'm running: aireplay-ng -0 0 -a XX:XX:...
1
vote
0answers
40 views

Unable to See Network Clients during Deauth Capture Issue

bit of a general question here, would hope to learn more about exactly what is going on technically. I'm attempting to test and capture a handshake from my own AP (an older Apple Airport router). I'...
0
votes
0answers
33 views

Aireplay-ng doesnt get ACKs

I use the panda pau09 wireless adapter with a kali vm. I am attempting to deaauth my laptop off my home wifi. My last theory was that for some reason i wasn't able to deauth on 5Ghz band but after ...
1
vote
1answer
358 views

How to speed up brute forcing of finding a WEP key from a captured file?

I have been working on decrypting a WEP .cap file using crunch. It has 1268 IVs. I am wondering: Can I get a clue from the captured file to speed the process of brute-forcing? If not, what other ways ...
2
votes
0answers
207 views

Aireplay --deauth on network with multiple access points

I have successfully used the aireplay-ng --deauth attack on a network with a single access points, but when trying on a network with multiple access points (e.g. a network using Google WiFi) it doesn'...
0
votes
0answers
179 views

aireplay-ng --fakeauth issue with deauth packet

I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
1
vote
0answers
45 views

Issue establishing a working AP with Airbase-ngand DNSmasq

I’m able to run airbase-ng, set DNSmasq with a customized config file that includes dhcp options 3, and 6, with the actual router IP address of the network that has internet, and added public DNS ...
2
votes
0answers
260 views

Airgeddon-ng Handshake fail [closed]

I've followed the following instructions below. This is a freshly installed Parrot OS, not using VirtualBox and etc. I am also using Alfa AWUS036NHA wifi adapter. ifconfig sudo airmon-ng start wlan1 (...
0
votes
1answer
110 views

Is it safe to login using HTTP on a WPA2 protected home network?

I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such. Many of those services have an administration web interface which isn't ...
0
votes
0answers
150 views

Airodump-ng stops working after deauthentication attack

I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons... ...
-1
votes
2answers
314 views

Will the new WPA3 protocol make it impossible to hack WIFI Password? [closed]

Like I asked in the thread title; Will the new WPA3 protocol make it impossible to hack a WIFI's password using tools like aircrack-ng?
1
vote
0answers
520 views

aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
169 views

is it possible to create a WEP wifi that accepts any password?

the same as evil twin fluxion but without captive portal so the victim connects to our fake Wep Wifi that accepts any password after getting disconnected from his Wpa 2 Wifi so we sniff data from the ...
1
vote
2answers
439 views

How to get result from airdump-ng on Ubuntu 18.04 LTS?

Issue: when I run airodump-ng wlp3s0mon, no results appear. I recently installed all kali linux tools on Ubuntu 18.04 LTS from this git repo https://github.com/LionSec/katoolin My chipset is the ...
0
votes
0answers
173 views

Unable to join airbase-ng AP

In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following: Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0 USB Wi-...
0
votes
1answer
119 views

Can do I brutefore wifi password with handshake without wifi detection? [closed]

I have captured handshake but now I want to bruteforce wifi without detection it (in different place). Is it possible? If yes, how to do that?
0
votes
0answers
51 views

Aireplay-ng causes connection issues

I recently got myself a router to experiment with wireless security. I'm using the aircrack-ng suite to collect IVs with the goal of cracking the key. As part of the process, I'm use the following to ...
2
votes
2answers
3k views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
0
votes
2answers
4k views

I couldn't deauth any devices using aireplay-ng command in kali linux

I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade. I was using aircrack-ng for pentesting my wlan network. I wanted to deauth any device connected to my ...
1
vote
0answers
92 views

How does fake authentication work with no other clients connected to the AP? (aireplay-ng)

I was reading a tutorial about how to hack a WEP network that has no other clients connected to the AP. It says that fake authentication must be used and it appears to work, but I don't understand how ...
-1
votes
3answers
4k views

DeAuth all AP's in range

In a few days, we are going to be many friends that will gather together and play all night long using 6-7 APs. How can I DeAuth/Disconnect everyone's connection, without being connected to their ...
0
votes
1answer
1k views

Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result

I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network. Here are my terminal Commands ...
1
vote
0answers
80 views

Aireplay issues

I started using the aircrack-suite and to be more specific it is about aireplay-ng. The problem ist that... aireplay-ng -0 wlan0mon ...does work, but... aireplay-ng -9 wlan0mon ...doesn't In fact ...
3
votes
1answer
470 views

What are the factors making a WPA2 handshake suitable for cracking?

Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
1
vote
1answer
3k views

How to continue your Aircrack-ng Bruteforce where you left off? [closed]

I am performing a WPA/WPA2-PSK Attack using Aircrack-ng. The Wordlist i am using is 100 GB but i have to Shutdown my PC after a certain time so how am i supposed to continue the Attack where i left ...
0
votes
1answer
2k views

Is it possible to “deauth” wifi direct connections?

I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them. ...
1
vote
2answers
445 views

Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?

I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
2
votes
0answers
157 views

Duplicate packets in packet injection

I've been trying to develop a few scripts that can forge custom 802.11 frames and inject them through a monitor mode interface. I have gone through the development documentation of radiotap headers ...
0
votes
1answer
3k views

Can't connect to fake AP with airbase-ng

I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are: I put my wirless adapter in monitor mode ...
3
votes
2answers
5k views

Aireplay deauth having no effect, no handshake and Reaver stuck

So I'm trying to hack my own WiFi using aircrack or reaver but have had no success with either. With aircrack I cannot achieve a successful handshake as the deauth doesn't seem to have any effect on ...
3
votes
1answer
130 views

Aireplay-ng broadcast doesn't work on a client

Launching Deauth attacks on my BSSID disconnects all devices except one. I figured out that in order to make it work I have to use the -c command to specifically deauth that client, but is there any ...
4
votes
3answers
528 views

Risk of eavesdropping when using private and encrypted WiFi network but no TLS

Of course, normally I would use HTTPS, but that's not an option in a potential scenario I don't want to get into... This question is similar to Is it possible to secure a web app without HTTPS?, ...
1
vote
1answer
104 views

Why aircrack asks for info about target that isn't really needed?

Why aircrack needs info such as target's BSSID,Channel and more? Also what do those files do? I know one of them is used to save the handshake. But others? Also, how deauth helps in cracking the ...
1
vote
0answers
1k views

how to deauth clients in a “secured wireless network” [closed]

I am using aireplay-ng -0 0 -a *bssid* -c *clientMac* wlan0 command which works fine in my home or school network. I was in a club yesterday that has something such special in their bssid that I am ...
4
votes
1answer
17k views

WPS cracking using reaver-bully on Kali Linux

My hardware looks like this : Lenovo Laptop running RHEL, and Virtual Machine Manager launching a VM with Kali Linux. Tried these network cards : TL-WN722N AWUS051NH AWUS036NH I am booting the VM ...
1
vote
0answers
172 views

Reduce resources consumed by aircrack-ng [closed]

I am trying to perform dictionary attack with aircrack-ng. As soon as I start testing keys in the dictionary file, by executing this, you know, "famous" command: aircrack-ng -w capture-01.cap, my ...
3
votes
1answer
2k views

No clients appearing when using wireless attacking tools in Kali Linux

I'm new to Ethical Hacking so please bear with me. What I'm trying to do currently is to crack the password of my personal router using aircrack, wifite and fern wifi cracker. However, I observed in ...
1
vote
1answer
3k views

DeAuth sent to router doesn't deauthenticate

I'm trying to perform a De-authentication attack on my wifi network. My command is: aireplay-ng -0 0 -a B8:A3:86:5E:9C:DC wlan0 The response looks like this: 20:35:59 Waiting for beacon frame (...
1
vote
0answers
604 views

Different CRC32 implementations? different results?

So recently I managed to implement the Caffe-Latte attack in python. I got stuck for two weeks because the final ICV wouldn't match. After some digging around I found that airbase-ng (which already ...
4
votes
1answer
499 views

Get Device names of surrounding WIFI devices without authentication

I am looking to get a list of devices which are in range of my Wifi antenne (monitor mode). For example: "Tom's Iphone" I can get the MAC's of these devices, but is it possible to get the name of ...
0
votes
1answer
304 views

Caffe-Latte attack in Python

I have a github project called 'Evil-Twin Framework' which basically is a very extensible Wi-Fi pentesting framework. I'm not going to delve into the details but basically one can code any type of Wi-...
1
vote
2answers
1k views

Airodump-ng doesn't capture handshake or sees any devices connected on Kali, but captures everything on Backtrack. How to fix it? [closed]

I ran into a problem in using kali linux system. Kali doesn't allow me to see any devices connected to certain spot or capture any handshakes, I know that it can capture them(and see connected ...
0
votes
1answer
2k views

Can you use an android device as a wireless adapter for kali linux? [closed]

I am experimenting with Kali Linux. I set up Kali in Virtual Box on a mac. I realized that to do WPA/WPA2 cracking I would need a wireless adapter. Before running out to buy one I thought that I might ...
6
votes
2answers
3k views

Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?

I'd like to know if there exists at least the possibility of a known/theoretical attack on a wireless SSID that does not involve a host within the network, what I mean by this is that some of the ...
3
votes
3answers
8k views

Does aircrack-ng use GPU/CUDA capabilities?

As stated, does aircrack-ng when brute forcing a WPA2 handshake capture use GPU/CUDA resources such as a program like Hashcat does?
1
vote
1answer
452 views

Utilizing OCLHashcat to crack WPA/WPA2 passwords obtained via airodump-ng

Wondering if its possible (edit - Found ways to do so, the question now is does it make more sense) to do so? Did a little bit of searching but it would seem that most people utilize Aircrack-NG. ...
1
vote
1answer
823 views

I am unable to secure a WPA handshake (4 way handshake)

I am training to be a pen tester and am having some issues obtaining a 4 way handshake. I use airodump-ng -c -w file --bssid wlo1 followed by Aireplay-ng -0 0 -a (Mac) wlo1 Here's all the steps I ...
3
votes
0answers
430 views

Raspberry Pi (Raspbian) not capturing WPA2 handshake with Aircrack-ng [closed]

I've been using Aircrack for a short time now with my Alfa wfif adapter on my laptop and it's been working perfectly. However when I try and do the same thing on my Raspberry Pi it's having issues ...
2
votes
2answers
254 views

I am having difficulty maintaining a wpa handshake (4 way handshake) airodump-ng

Ifconfig wlo1 ifconfig wlo1 down iwconfig wlo1 mode monitor ifconfig wlo1 up airmon-ng check wlo1 kill processes Airodump-ng wlo1 airodump-ng -c (channel) -w (file) --bssid wlo1 aireplay-ng -0 0 -a ...
1
vote
1answer
431 views

Does turning off output make aircrack-ng work faster?

I know that preventing output on the console or in anyway makes the program run much faster. Displaying the output is a long process to complete. But I wonder if using -q option in aircrack-ng, which ...

1 2 3