Honestly, why reinvent the wheel. Use Wifite2 with a proper password list and done.
Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
61–70 of 140 posts
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#62wifite2[1] is a wrapper tool that does all this automatically.
Not trying to say that easier is better, in this case. Just wanted to show this tool for those who don't know it.
[1] - https://github.com/derv82/wifite2
edit: added wifite initially, replaced it with wifite2
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#63Earlier quoted context omitted.
Can someone define what is considered a weak vs strong password now for WiFi? The only guides I found online are years old. Is 10 characters considered weak for mixed case letters, numbers, plus punctuation now?
To do this formally, you need to consider information entropy. This is all about how you generated your password. 10 characters of totally random mixed case, numbers and punctuation gives about 60 bits of entropy which is strong enough. HOWEVER, that calculation only works if all 10 characters were generated uniformly and randomly. Humans are terrible at this. Now, maybe your trick for turning words into safe passwor…
I would love to see a comparison between where physically and which modifiers are used for each character are, and the strength of a password.
Is a password which is very easy/comfortable to type out physically any more/less strong than another of the same length?
I ask this because I often use a visual pattern on the keyboard for a password and I don't recall which characters they may be, but I recall the pattern in need to type out on a qwerty kb
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#644,733,979 out of the 14,344,391 passwords (33%) in the rockyou.txt dictionary file used for cracking in this guide are too short to be WPA2 passwords, which have a minimum length of 8 characters. Are aircrack and/or hashcat smart enough to not bother hashing those short passwords?
hashcat is smart enough in a subtle way. It will not bother with candidates that are unsuitable for a certain hash type.
It checks this after the rules have been applied.
(stusmall's comment explains the influence of rules better than I could). Hashcat shows these candidates as "Rejected".
The interesting part is that you can't configure the minimum or maximum length anymore[1], the restrictions are hard coded for every hash type. This is because for fast hashes the branch introduced by the check would be slower than just hashing away[2].
[1] It was possible with the old CPU-based hashcat (--pw-min and --pw-max)
[2] https://hashcat.net/forum/thread-3444.html?highlight=branch
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#65Honestly, why reinvent the wheel. Use Wifite2 with a proper password list and done.
there are two kinds of people, the ones that want to learn how to do it "manually" and the script kiddies.
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#66I attempted to do this once and it turned out to be monumentally difficult. I got as far as setting up a bootable kali thumb drive before getting stopped in my tracks by hardware incompatibilities and unexpected behaviors and errors. These articles make it sounds a LOT easier than it is. I was very disappointed because I was really excited about it.
I beg to differ. I was doing this at 15 or 16 years old in 2006 when it was still called backtrack. So long as you had a mainstream laptop, the most difficult part was buying a compatible wireless card. To note, the extent of my technical abilities at that time wasn't much beyond being able to install a mainstream linux distribution or write a simple program in C.
Yeah, I used Backtrack to show my brother that his big complex password didn't mean anything if he was using WEP (this was quite a while ago).
On a pretty standard laptop (intel chipset/CPU/GPU/Wireless) it booted right up with no effort.
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#67I'm not sure why this is amazing enough to make the first page but W/E it's HN :). Just so less informed are aware, this has been feasible for maybe 7 years (since GPU calculation became possible). Just so nobody freaks out, this is cracking weak passwords, not broken WPA. I have myself cracked countless WiFi passwords when security testing. It's easy if the passwords are bad, which is maybe 90% of the time for home…
> but W/E it's HN
Would you please simply type "whatever", instead of this "W/E" nonsense? Considering the amount of 8+ character adjectives you used, you clearly aren't trying to be less verbose.
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#68I'm not sure why this is amazing enough to make the first page but W/E it's HN :). Just so less informed are aware, this has been feasible for maybe 7 years (since GPU calculation became possible). Just so nobody freaks out, this is cracking weak passwords, not broken WPA. I have myself cracked countless WiFi passwords when security testing. It's easy if the passwords are bad, which is maybe 90% of the time for home…
> but W/E it's HN Would you please simply type "whatever", instead of this "W/E" nonsense? Considering the amount of 8+ character adjectives you used, you clearly aren't trying to be less verbose.
I am okay with abbreviations, but I had to think twice for this one.
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#69How long does the cracking process take? I remember WEP only taking 10 minutes using aircrack-ng in BackTrace... I imagine this takes substantially longer.
If it is as slow as SHA512 then it will take 20 days on AWS g2 x8 large for 8 characters (made of alphanumeric or some 10 other symbols).
Re: Crack WPA/WPA2 Wi-Fi Routers with Aircrack-Ng and Hashcat
#70I attempted to do this once and it turned out to be monumentally difficult. I got as far as setting up a bootable kali thumb drive before getting stopped in my tracks by hardware incompatibilities and unexpected behaviors and errors. These articles make it sounds a LOT easier than it is. I was very disappointed because I was really excited about it.
I beg to differ. I was doing this at 15 or 16 years old in 2006 when it was still called backtrack. So long as you had a mainstream laptop, the most difficult part was buying a compatible wireless card. To note, the extent of my technical abilities at that time wasn't much beyond being able to install a mainstream linux distribution or write a simple program in C.
Regrettably it didn't work out that way for me. I had a brand new macbook air at the time I tried this. When I booted into Kali, I was unable to access the network settings at all[1], period, let alone get any packet sniffing going. I couldn't even connect to the internet.
[1] https://unix.stackexchange.com/questions/273941/missing-netw...