Questions tagged [aircrack-ng]
An 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured.
1
vote
0answers
31 views
How does fake authentication work with no other clients connected to the AP? (aireplay-ng)
I was reading a tutorial about how to hack a WEP network that has no other clients connected to the AP. It says that fake authentication must be used and it appears to work, but I don't understand how ...
-1
votes
2answers
87 views
DeAuth all AP's in range
In a few days, we are going to be many friends that will gather together and play all night long using 6-7 APs.
How can I DeAuth/Disconnect everyone's connection, without being connected to their ...
0
votes
1answer
265 views
Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result
I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network.
Here are my terminal Commands ...
1
vote
0answers
45 views
Aireplay issues
I started using the aircrack-suite and to be more specific it is about aireplay-ng. The problem ist that...
aireplay-ng -0 wlan0mon
...does work, but...
aireplay-ng -9 wlan0mon
...doesn't
In fact ...
3
votes
1answer
229 views
What are the factors making a WPA2 handshake suitable for cracking?
Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
1
vote
1answer
398 views
How to continue your Aircrack-ng Bruteforce where you left off? [closed]
I am performing a WPA/WPA2-PSK Attack using Aircrack-ng. The Wordlist i am using is 100 GB but i have to Shutdown my PC after a certain time so how am i supposed to continue the Attack where i left ...
0
votes
1answer
904 views
Is it possible to “deauth” wifi direct connections?
I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them.
...
1
vote
2answers
236 views
Is there a way to tell, when looking at a packet, that an aircrack-ng attack happened?
I'm trying to understand how to find these attacks when using a packet sniffer (specifically using Omnipeek). Is there a way to look at a packet and know that this type attack happened? I want to find ...
2
votes
0answers
90 views
Duplicate packets in packet injection
I've been trying to develop a few scripts that can forge custom 802.11 frames and inject them through a monitor mode interface. I have gone through the development documentation of radiotap headers ...
0
votes
1answer
866 views
Can't connect to fake AP with airbase-ng
I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are:
I put my wirless adapter in monitor mode ...
2
votes
2answers
1k views
Aireplay deauth having no effect, no handshake and Reaver stuck
So I'm trying to hack my own WiFi using aircrack or reaver but have had no success with either. With aircrack I cannot achieve a successful handshake as the deauth doesn't seem to have any effect on ...
3
votes
1answer
68 views
Aireplay-ng broadcast doesn't work on a client
Launching Deauth attacks on my BSSID disconnects all devices except one. I figured out that in order to make it work I have to use the -c command to specifically deauth that client, but is there any ...
0
votes
0answers
497 views
Unable to deauthenticate client using aireplay-ng
I am unable to deauth a device using aireplay-ng. I am pretty sure I typed the command correctly.
I used:
aireplay-ng --deauth 2000 -a AA:BB:CC:DD -c EE:FF:GG:HH wlan1mon
It sends deauth packets ...
4
votes
3answers
288 views
Risk of eavesdropping when using private and encrypted WiFi network but no TLS
Of course, normally I would use HTTPS, but that's not an option in a potential scenario I don't want to get into...
This question is similar to Is it possible to secure a web app without HTTPS?, ...
1
vote
1answer
98 views
Why aircrack asks for info about target that isn't really needed?
Why aircrack needs info such as target's BSSID,Channel and more? Also what do those files do? I know one of them is used to save the handshake. But others?
Also, how deauth helps in cracking the ...
1
vote
0answers
805 views
how to deauth clients in a “secured wireless network” [closed]
I am using aireplay-ng -0 0 -a *bssid* -c *clientMac* wlan0 command which works fine in my home or school network.
I was in a club yesterday that has something such special in their bssid that I am ...
3
votes
1answer
9k views
WPS cracking using reaver-bully on Kali Linux
My hardware looks like this :
Lenovo Laptop running RHEL, and Virtual Machine Manager launching a VM with Kali Linux.
Tried these network cards :
TL-WN722N
AWUS051NH
AWUS036NH
I am booting the VM ...
1
vote
0answers
58 views
Reduce resources consumed by aircrack-ng [closed]
I am trying to perform dictionary attack with aircrack-ng.
As soon as I start testing keys in the dictionary file, by executing this, you know, "famous" command: aircrack-ng -w capture-01.cap, my ...
3
votes
1answer
906 views
No clients appearing when using wireless attacking tools in Kali Linux
I'm new to Ethical Hacking so please bear with me. What I'm trying to do currently is to crack the password of my personal router using aircrack, wifite and fern wifi cracker.
However, I observed in ...
1
vote
1answer
1k views
DeAuth sent to router doesn't deauthenticate
I'm trying to perform a De-authentication attack on my wifi network.
My command is:
aireplay-ng -0 0 -a B8:A3:86:5E:9C:DC wlan0
The response looks like this:
20:35:59 Waiting for beacon frame (...
1
vote
0answers
261 views
Different CRC32 implementations? different results?
So recently I managed to implement the Caffe-Latte attack in python. I got stuck for two weeks because the final ICV wouldn't match.
After some digging around I found that airbase-ng (which already ...
4
votes
1answer
269 views
Get Device names of surrounding WIFI devices without authentication
I am looking to get a list of devices which are in range of my Wifi antenne (monitor mode).
For example: "Tom's Iphone"
I can get the MAC's of these devices, but is it possible to get the name of ...
0
votes
1answer
202 views
Caffe-Latte attack in Python
I have a github project called 'Evil-Twin Framework' which basically is a very extensible Wi-Fi pentesting framework. I'm not going to delve into the details but basically one can code any type of Wi-...
1
vote
2answers
753 views
Airodump-ng doesn't capture handshake or sees any devices connected on Kali, but captures everything on Backtrack. How to fix it? [closed]
I ran into a problem in using kali linux system.
Kali doesn't allow me to see any devices connected to certain spot or capture any handshakes, I know that it can capture them(and see connected ...
0
votes
1answer
1k views
Can you use an android device as a wireless adapter for kali linux? [closed]
I am experimenting with Kali Linux. I set up Kali in Virtual Box on a mac. I realized that to do WPA/WPA2 cracking I would need a wireless adapter. Before running out to buy one I thought that I might ...
6
votes
2answers
1k views
Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?
I'd like to know if there exists at least the possibility of a known/theoretical attack on a wireless SSID that does not involve a host within the network, what I mean by this is that some of the ...
2
votes
3answers
3k views
Does aircrack-ng use GPU/CUDA capabilities?
As stated, does aircrack-ng when brute forcing a WPA2 handshake capture use GPU/CUDA resources such as a program like Hashcat does?
1
vote
1answer
296 views
Utilizing OCLHashcat to crack WPA/WPA2 passwords obtained via airodump-ng
Wondering if its possible (edit - Found ways to do so, the question now is does it make more sense) to do so? Did a little bit of searching but it would seem that most people utilize Aircrack-NG. ...
1
vote
1answer
399 views
I am unable to secure a WPA handshake (4 way handshake)
I am training to be a pen tester and am having some issues obtaining a 4 way handshake. I use airodump-ng -c -w file --bssid wlo1 followed by Aireplay-ng -0 0 -a (Mac) wlo1
Here's all the steps I ...
3
votes
0answers
333 views
Raspberry Pi (Raspbian) not capturing WPA2 handshake with Aircrack-ng [closed]
I've been using Aircrack for a short time now with my Alfa wfif adapter on my laptop and it's been working perfectly. However when I try and do the same thing on my Raspberry Pi it's having issues ...
2
votes
2answers
187 views
I am having difficulty maintaining a wpa handshake (4 way handshake) airodump-ng
Ifconfig wlo1
ifconfig wlo1 down
iwconfig wlo1 mode monitor
ifconfig wlo1 up
airmon-ng check wlo1
kill processes
Airodump-ng wlo1
airodump-ng -c (channel) -w (file) --bssid wlo1
aireplay-ng -0 0 -a ...
1
vote
1answer
246 views
Does turning off output make aircrack-ng work faster?
I know that preventing output on the console or in anyway makes the program run much faster. Displaying the output is a long process to complete.
But I wonder if using -q option in aircrack-ng, which ...
1
vote
0answers
92 views
Is the keystream recovered by tkiptun-ng the same key used to encrypt all data frames between the client and the AP?
Looking at the manual for tkiptun-ng,(http://www.aircrack-ng.org/doku.php?id=tkiptun-ng) The output saves the keystream in the example near the end of the program. Is this the same keystream used to ...
1
vote
3answers
350 views
Handshake not recording
I am trying to crack wireless WEP password of my wireless AP.
When I enable monitor mode and issue this command:
root#airodump-ng -w TESTFILE1 -c 1 --bssid 68:72:51:58:A3:14 wlan0mon
No handshake ...
1
vote
1answer
300 views
How to get attacker mac address aireplay-ng
I'm currently working on a WIPS and I would like to know how to obtain the attacking MAC address when he launches a aireplay-ng deauth attack.
On wireshark, if the attacker broadcast the deauth ...
5
votes
2answers
205 views
Aircrack-ng does not have cuda implementation. Are there alternatives?
I need a program to crack .cap files , and would like to use my cuda devices.
I know there is pyrit, but I have very severe driver issues on Linux with it and it does not exist for windows, and ...
4
votes
2answers
859 views
How deauth attack works in mkd3
I watched a video on YouTube about it, and the guy did not explain well how mdk3 and its deauth attack works. Can someone please explain me this?
P.s: the guy used the tool aircrack-ng; This tool is ...
1
vote
2answers
1k views
Stations not deauthenticating when using Aircrack-ng
I am attempting to conduct a deauthentication attack on a stand alone AP using Aircrack-ng. Im using an ASUS 802.11ac router and using aireplay-ng to send the deauthentication packets.
But when ...
4
votes
1answer
244 views
Cant access most websites using a fake AP created by aircrack-ng suite
The question , Setting up a fake AP - problem with iptables and DNS server , I posted before was answered and fixed, to not confuse people looking for the same problem in the future I wanted to post a ...
3
votes
1answer
1k views
Setting up a fake AP - problem with iptables and DNS server
Im trying to set up a fake AP using aircrack-ng suite, DHCP server & iptables.
After creating the fake AP:
airmon-ng start wlan1
airbase-ng -c 11 -e "freewifi" wlan1mon
running iptables ...
0
votes
0answers
879 views
Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode
I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
0
votes
1answer
340 views
How to connect to AP when attacker is deauth'ing my device?
Scenario is: attacker is disconnecting devices using aireplay --deauth command on AP so none of my devices are connecting to AP. Then what do I do now when none of my device is connected to AP?
0
votes
2answers
582 views
RaspberryPi3 wont show fake AP created by Airbase-ng
Im using Aircrack-ng suite to apply an evil-twin attack with my RaspberryPi3 operated by Kali-linux on another RspberryPi3 with Raspbian Jessie.
The steps are as followed:
1.configuring the apache2 ...
7
votes
3answers
7k views
Why use a USB WiFi adapter with Aircrack-ng?
What are the limitations we have when we are performing aircrack-ng pen testing using laptop's built-in WiFi adapter? Many pen testers are using USB WiFi dongles for this purpose and I wonder why.
...
1
vote
1answer
2k views
Airodump on wireless interface error [closed]
I'm unable to airodump on my wlo1 interface.
To set things up, first I set wlo1 to monitoring mode:
sudo ifconfig wlo1 down
sudo iwconfig wlo1 mode monitor
sudo ifconfig wlo1 up
After running ...
1
vote
1answer
857 views
Broadcast deauth requests are not working
While using aireplay-ng broadcast deauth requests are not working but if i use deauth for specific user it's working fine. But the problem is i don't know how to get the Mac address of specific user. ...
2
votes
2answers
10k views
How to get clients mac address for aireplay-ng [closed]
While I was reading the docs on deauth for aireplay, I found that the parameter -c 'mac addr' is used for deauth of a specific client if I am not wrong. But what I don't know is how to find the MAC ...
4
votes
2answers
660 views
How Aircrack reliable is for decrypting password? other alternative?
I'm testing over a Handshake captured file I have (handshake.cap) launching aircrack attacks against it with a lot of dictionaries and bruteforce to decrypt its password, but I don't have a strong ...
0
votes
1answer
1k views
Finding password length using Airmon-ng and Crunch on Kali Linux [WPA/WPA2]
I want to find the length of a password on my wireless network.
How can I monitor/track the behavior of the WiFi reaction to entering the current password?
Once I find the exact length of the ...
1
vote
1answer
205 views
Prevention against De-Auth Attack for Handshake Capturing [duplicate]
As far as I know about De-authentication attack, the attacker sends de-auth packets to both router and the victim asking the victim to disconnect and reconnect. But I wonder what would happen if I ...
