Comments on: Clientless WEP Cracking

By: 破解wep加密的无线路由器（无客户端） | 海纳百川 Linux

破解wep加密的无线路由器（无客户端） | 海纳百川 Linux — Mon, 22 Feb 2010 15:35:46 +0000

[...] 很快就可以看到用 : 分割的密码了，整个过程不超过10分钟。以上只是一个快速破解的过程，具体的解释和细节请参考aircrack-ng的wiki。本文参考了durdle的博客，向其致敬，我稍作调整并修正了原作者的笔误。 [...]

By: tw

tw — Fri, 09 Oct 2009 09:01:23 +0000

Great tutorial!
The line
airodump-ng -c 11 -bssid $AP –ivs -w cap ath1
should be
airodump-ng -c 11 -bssid $AP –ivs -w cap ath1

By: Jordan

Jordan — Sat, 28 Mar 2009 14:40:24 +0000

rogerssssss: I have been trying to get wep crack working on my unibody macbook pro but I haven’t had any success. I think it is impossible with the current drivers. The macbook pros have a broadcom 43xx driver, but according to the aircrack-ng website, the wireless N card that is in the macbook pro is not supported.

Here is where it says it’s not supported…
http://aircrack-ng.org/doku.php?id=broadcom

By: rogerssssss

rogerssssss — Mon, 23 Feb 2009 04:46:37 +0000

Hi,
Did anyone manage to crack a wep network with those new macbook pro unibody built late 2008 or early 2009 ?? I only managed to install Backtrack 4 beta on those machines, after mainy tests with BT3. But my wireless card doesn’t seem to be supported. It says there is a Broadcom 43xx driver included but it has to be installed anyway and it’s really complicated. So, if anybody has a solution I would highly appreciate him to share it on this blog ! ;)
Regards,
Rogerssssss

By: yes, you can

yes, you can — Thu, 06 Nov 2008 17:36:27 +0000

[...] els passos aquí i més info a [...]

By: doa

doa — Thu, 21 Aug 2008 16:36:21 +0000

I had this working yesterday and then rebooted to test again – now i have the following issue:

aireplay-ng -5 -b $AP -h $WIFI ath1

Saving chosen packet in replay_src-0821-082546.cap
08:25:48 Data packet found!
08:25:48 Sending fragmented packet
08:25:48 Not enough acks, repeating…
08:25:48 Sending fragmented packet
08:25:49 No answer, repeating…
08:25:49 Trying a LLC NULL packet
08:25:49 Sending fragmented packet
08:25:51 No answer, repeating…
08:25:51 Sending fragmented packet
08:25:53 No answer, repeating…
08:25:53 Trying a LLC NULL packet
08:25:53 Sending fragmented packet
08:25:53 Not enough acks, repeating…
08:25:53 Trying a LLC NULL packet
08:25:53 Sending fragmented packet
08:25:54 No answer, repeating…
08:25:54 Sending fragmented packet
08:25:56 No answer, repeating…
08:25:56 Trying a LLC NULL packet
08:25:56 Sending fragmented packet
08:25:58 No answer, repeating…
08:25:58 Sending fragmented packet
08:25:58 Not enough acks, repeating…
08:25:58 Sending fragmented packet
08:25:59 No answer, repeating…
08:25:59 Trying a LLC NULL packet
08:25:59 Sending fragmented packet
08:26:01 Got a deauthentication packet!
08:26:06 No answer, repeating…
08:26:06 Sending fragmented packet
08:26:06 Got a deauthentication packet!
08:26:11 Not enough acks, repeating…
08:26:11 Sending fragmented packet
08:26:12 No answer, repeating…
08:26:12 Trying a LLC NULL packet
08:26:12 Sending fragmented packet
08:26:13 Not enough acks, repeating…
08:26:13 Trying a LLC NULL packet
08:26:13 Sending fragmented packet
08:26:13 Not enough acks, repeating…
08:26:13 Trying a LLC NULL packet
08:26:13 Sending fragmented packet
08:26:14 No answer, repeating…
08:26:14 Sending fragmented packet
08:26:16 No answer, repeating…
08:26:16 Still nothing, trying another packet…

I have tried changing my router to a channel that other routers are not using but this also does not help.

Anyone got any ideas on this?

doa

By: Brent

Brent — Fri, 11 Jul 2008 23:36:49 +0000

thanks for the informative how to. After reading the comment that this works on a macbook pro, I decided to try it. I get as far as the first aireplay-ng command and no networks are found. upon destroying ath0, KDE’s internet utilities cannot detect any wireless networks. Is there a different workaround if I putting my Arport Extreme into passive mode doesn’t seem to be working? I know the AE card isn’t supported really in Kismac, but I was led to believe it would work with Backtrack3. Thanks!

By: da sheriff

da sheriff — Thu, 12 Jun 2008 15:46:20 +0000

sorry about spelling

By: da sheriff

da sheriff — Thu, 12 Jun 2008 15:44:53 +0000

i tried backtrack 2 live CD, problem is i don’t know which wireles card i need (currently using my laptop’s built in card). when i log on it says i can use flux or KDE. i use KDE but the internet tutorials don’t work. there is one for flux. “backtrack> analyzers>kismet” when i do that nothing happens. htired coomand on KDE and flux to run kismet it won’t work.

any ideas? pleaseeeee!!!

By: bonita

bonita — Mon, 26 May 2008 03:41:48 +0000

Hello Howard, thanks for your easy wep steps :)

I am using BT3 Beta for USB, I’ve tried to hack my own wireless ap, with success(I was using WEP 128). Now, I’m trying to “hack” my brothers wireless ap (he knows about),
but without success! ( he uses open system – wep 64bit and no mac filtering, channel 6 )

I have an atheros 5006 built in my notebook, and I can succesfuly authenticate with his AP.

But when I try to receive data packets to be saved as fragment.xor, … nothing happens,it just continues to read packets, and it never stoped, even after 2 hours!

Here is the screen log:-
=======================================
aireplay-ng -1 0 -e $SSID -a $AP -h $WIFI ath1 (i am always using my actual mac address not fake)

Sending Authentication Request
Authentication successful
Sending Association Request
Association successful :-)

Everything OK, no error message here.

After that:

aireplay-ng -5 -b $AP -h $WIFI ath1
Waiting for a data packet
Read 21,293 packets (and it never stoped, even after 2 hours!)
========================================

I also have tried it on some other ap, to see if it
was my card or config problem, but with other ap, i managed to save fragment.xor in less than 3 minutes!

I am stuck now, Any help would be apreciated

Thank you and have a nice day.