Questions tagged [aircrack-ng]
An 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured.
135
questions
4
votes
1
answer
13k
views
PMKID found , but it should be WPA handshake
i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect
WPA handshake
in right top ...
CommunityBot
- 1
1
vote
1
answer
3k
views
Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode
I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
CommunityBot
- 1
0
votes
1
answer
304
views
Aireplay-ng - Deauth not working
While using this command
aireplay-ng --deauth 1000 -a <router mac address> -c <user mac address> interface name
After hitting enter and sending two deauths, it says
write failed:Network is ...
CommunityBot
- 1
1
vote
1
answer
493
views
Unable to See Network Clients during Deauth Capture Issue
bit of a general question here, would hope to learn more about exactly what is going on technically.
I'm attempting to test and capture a handshake from my own AP (an older Apple Airport router).
I'...
CommunityBot
- 1
1
vote
1
answer
200
views
How to prevent the device from connecting to the original AP?
I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one.
The aireplay is likes so:
...
CommunityBot
- 1
6
votes
3
answers
5k
views
Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?
I'd like to know if there exists at least the possibility of a known/theoretical attack on a wireless SSID that does not involve a host within the network, what I mean by this is that some of the ...
- 128k
3
votes
2
answers
5k
views
aircrack-ng issue: No mon0 when run "airmon-ng start wlan0" and "No such BSSID available"
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
CommunityBot
- 1
0
votes
0
answers
2k
views
besside-ng "bad beacon" error when attempting to deauth (aircrack-ng)
Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200
Fresh Install of Kali Linux, fully updated (not on a VM)
I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
- 1
1
vote
0
answers
42
views
How to disable n or ac mode aircrack
I am unable to see clients connected to an ap when using airodump. After extensive research i have found that it’s because my adapter is using 802.11n. n mode doesn’t work when capturing, neither does ...
1
vote
0
answers
178
views
airodump-ng -d returns nothing
I am using Kali Linux on VMWare Fusion on my Mac.
I am able to airodump and see my router, but when I run airodump-ng -d BSSID to see devices connecting to the network, then connect my phone, nothing ...
- 1,554
0
votes
1
answer
1k
views
Airodump-ng shows AP as OPN and WPA2 at the same time. What does it mean?
The result of airodump-ng lists some AP's as both OPN and WPA2. How does the authentication work in that case?
12:34:56:78:AB:CD, 2011-09-09 15:29:47, 2022-10-21 16:09:05, 1, WPA2 OPN, CCMP, MGT, -75,...
CommunityBot
- 1
-1
votes
1
answer
1k
views
aircrack-ng on Raspberry pi 3 and WiFi adapter
I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
CommunityBot
- 1
0
votes
0
answers
426
views
Airodump-ng shows AP on negative channel
I am new to WiFi and was trying to learn pentesting with the aircrack-ng suite.
In the following airodump-ng excerpt, any idea why airodump-ng is showing an access point with negative value -1 as the ...
- 128k
1
vote
2
answers
26k
views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
- 128k
0
votes
0
answers
16
views
Significant differences in hash cracking speeds? [duplicate]
I'm doing an educational hash research. I generated MD5 hash using online tools and cracked it within a second using Hashcat and certain wordlist (yes, one second). Then I produced a WPA handshake ...
- 684
0
votes
1
answer
126
views
WEP keystream extraction
After having captured multiple packets with repeated IVs you can perform cipher1 XOR cipher2 which is the same as having cleartext1 XOR cleartext2, and performing cipher1 XOR cleartext1 gives you the ...
- 9,294
3
votes
1
answer
6k
views
No clients appearing when using wireless attacking tools in Kali Linux
I'm new to Ethical Hacking so please bear with me. What I'm trying to do currently is to crack the password of my personal router using aircrack, wifite and fern wifi cracker.
However, I observed in ...
3
votes
2
answers
17k
views
Airodump-ng : why are BSSID not associated?
Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run.
I have a few questions :
Why do BSSIDs show as "not associated" (note: not all of them show as ...
0
votes
2
answers
3k
views
airodump-ng station not associated with bssid
Why do some BSSIDs show as "not associated" (note: not all of them show as such; some just show a usual BSSID).
I have tried to use the other BSSID that shows up for the other station but it didn't ...
2
votes
1
answer
10k
views
DeAuth sent to router doesn't deauthenticate
I'm trying to perform a De-authentication attack on my wifi network.
My command is:
aireplay-ng -0 0 -a B8:A3:86:5E:9C:DC wlan0
The response looks like this:
20:35:59 Waiting for beacon frame (...
- 1
1
vote
0
answers
244
views
Problems in stopping/restoring Aircrack session
I'm running aircrack-ng version 1.6 on Live Kali. I noticed that "recently" a -N option has been added for saving a session, which can be later resumed with the option -R.
However this seems ...
- 119
1
vote
1
answer
2k
views
How to get attacker mac address aireplay-ng
I'm currently working on a WIPS and I would like to know how to obtain the attacking MAC address when he launches a aireplay-ng deauth attack.
On wireshark, if the attacker broadcast the deauth ...
- 1
0
votes
0
answers
180
views
Why ifconfig and airmon-ng show me a different result?
I can see encryption details and AUTH types with ifconfig but not airmon-ng.
Do I need to do something about it in order to to get better results from
Fake authentication attack
ARP request attack
...
- 128k
0
votes
1
answer
183
views
Aireplay handshakes, were working now has an error
I'm trying to learn to do pen testing and wifi cracking.
I had captured handshakes and begun cracking the handshake a day ago, with the password not being in my dictionary list.
When trying with a new ...
- 146
3
votes
1
answer
833
views
What are the factors making a WPA2 handshake suitable for cracking?
Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
- 146
1
vote
0
answers
133
views
Detecting changes in surrounding WiFi networks [closed]
I’m considering developing a simple WiFi scanner and logging App that can run as a service 24 hours a day for months, passively collecting changes in the surrounding wireless environment with the ...
- 111
1
vote
1
answer
2k
views
Access point uses different BSSID and deauth attack fails
I'm using airgeddon (https://github.com/v1s1t0r1sh3r3/airgeddon) to perform a deauthentication attack on my wifi network.
When i put my wireless interface in monitor mode to scan the network from the ...
5
votes
4
answers
25k
views
Does aircrack-ng use GPU/CUDA capabilities?
As stated, does aircrack-ng when brute forcing a WPA2 handshake capture use GPU/CUDA resources such as a program like Hashcat does?
1
vote
1
answer
410
views
With WiFi now having protected management frames, is it still worth attempting an evil twin attack?
I was trying to aireplay'ng my home WiFi but I understood that with the new generation of APs, there is a system of protected management frames. So I'm asking, is it still worth it to perform an evil ...
- 32.7k
11
votes
3
answers
47k
views
Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng
For some reason, I can't turn the built-in Wi-Fi adapter on the new Raspberry Pi 3 into monitor mode like I used to do on other platforms.
First I kill the processes that interfere with sudo airmon-...
- 1,736
-1
votes
1
answer
1k
views
wifi cracking using a network adapter which doesn't support packet injection
I'm trying to crack my wifi (WPA-CCMP) password to test its strength and security, I'm using the commview for wifi and aircrack-ng software on windows 10. I've three laptops, Windows 10 (64bit) with ...
- 1,106
1
vote
0
answers
1k
views
I'm not able to DeAuth a Client (Aireplay-ng)
I'm trying to perform a De-authentication attack on my own network and client. However, the client never disconnects and I cannot boot the client from the AP.
I'm running:
aireplay-ng -0 0 -a [BSSID]...
- 128k
1
vote
1
answer
910
views
802.11 data frames missing from Wireless frames capturing
By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel.
I generate some traffic from my ...
- 3,997
3
votes
3
answers
16k
views
Aireplay deauth having no effect, no handshake and Reaver stuck
So I'm trying to hack my own WiFi using aircrack or reaver but have had no success with either. With aircrack I cannot achieve a successful handshake as the deauth doesn't seem to have any effect on ...
- 11
2
votes
4
answers
15k
views
How long til a 4-way handshake is captured with Aireplay-ng
I've got a TP-Link TL-WN722N wifi adapter which I believe allows monitoring/injection to a network (was reassured by the comments of other users).
When I follow a guide by Vulnerableuser I can get to ...
- 128k
0
votes
0
answers
411
views
DeAuth not DeAuthing Client (Aireplay-ng)
I'm trying to perform a De-authentication attack on my own network and client. However, the client never disconnects and I cannot boot the client from the AP.
I'm running:
aireplay-ng -0 0 -a XX:XX:...
- 11
3
votes
1
answer
9k
views
Enterprise Wireless 5Ghz deauth
I am running blackbox pentests on an enterprise wireless setup. My area of attack consists of multiple APs that have a 2.4 GHz interface and also a 5GHz one.
I have successfully deauthenticated users ...
- 1,035
1
vote
1
answer
3k
views
How to speed up brute forcing of finding a WEP key from a captured file?
I have been working on decrypting a WEP .cap file using crunch. It has 1268 IVs. I am wondering:
Can I get a clue from the captured file to speed the process of brute-forcing?
If not, what other ways ...
CommunityBot
- 1
3
votes
0
answers
4k
views
Aireplay --deauth on network with multiple access points
I have successfully used the aireplay-ng --deauth attack on a network with a single access points, but when trying on a network with multiple access points (e.g. a network using Google WiFi) it doesn'...
- 128k
0
votes
0
answers
1k
views
aireplay-ng --fakeauth issue with deauth packet
I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
- 1,460
1
vote
0
answers
223
views
Issue establishing a working AP with Airbase-ngand DNSmasq
I’m able to run airbase-ng, set DNSmasq with a customized config file that includes dhcp options 3, and 6, with the actual router IP address of the network that has internet, and added public DNS ...
- 11
2
votes
0
answers
2k
views
Airgeddon-ng Handshake fail [closed]
I've followed the following instructions below. This is a freshly installed Parrot OS, not using VirtualBox and etc. I am also using Alfa AWUS036NHA wifi adapter.
ifconfig
sudo airmon-ng start wlan1 (...
- 21
0
votes
1
answer
5k
views
Can't connect to fake AP with airbase-ng
I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are:
I put my wirless adapter in monitor mode ...
1
vote
1
answer
883
views
How to get result from airdump-ng on Ubuntu 18.04 LTS?
Issue: when I run airodump-ng wlp3s0mon, no results appear.
I recently installed all kali linux tools on Ubuntu 18.04 LTS from this git repo https://github.com/LionSec/katoolin
My chipset is the ...
- 111
0
votes
1
answer
502
views
Is it safe to login using HTTP on a WPA2 protected home network?
I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such.
Many of those services have an administration web interface which isn't ...
- 1,106
1
vote
1
answer
2k
views
I am unable to secure a WPA handshake (4 way handshake)
I am training to be a pen tester and am having some issues obtaining a 4 way handshake. I use airodump-ng -c -w file --bssid wlo1 followed by Aireplay-ng -0 0 -a (Mac) wlo1
Here's all the steps I ...
- 1
0
votes
2
answers
3k
views
Will the new WPA3 protocol make it impossible to hack WIFI Password? [closed]
Like I asked in the thread title; Will the new WPA3 protocol make it impossible to hack a WIFI's password using tools like aircrack-ng?
- 1,029
2
votes
1
answer
3k
views
Evil AP with known WPA2 password
So I have been playing around with the aircrack-ng suite and beef a mitmf.
Until now I have been able to host an Evil Twin with DHCP server and providing internet access to connected clients while ...
CommunityBot
- 1
0
votes
1
answer
548
views
is it possible to create a WEP wifi that accepts any password?
the same as evil twin fluxion but without captive portal so the victim connects to our fake Wep Wifi that accepts any password after getting disconnected from his Wpa 2 Wifi so we sniff data from the ...
CommunityBot
- 1
0
votes
3
answers
16k
views
DeAuth all AP's in range
In a few days, we are going to be many friends that will gather together and play all night long using 6-7 APs.
How can I DeAuth/Disconnect everyone's connection, without being connected to their ...
- 2,657