This guide was created to demonstrate the encryption vulnerabilities of WEP (Wired Equivalent Privacy).Breaking into a protected wireless network is illegal!The content and instructions contained herein are for educational purposes, only.I did not break the law when creating this example. All information in the screenshots is that of my own networks that I compromised for this demonstration.You may attempt the steps outlined at your own risk - on your own network.

Auto Mass Friend Messages. Facebook blaster pro v 11 0 0 free.

Download Aircrack-ng Windows GUI for free. This is mainly just an interface tweak. Added function of mac address changer. Popular Alternatives to Aircrack-ng for Linux, Windows, Mac, Aircrack-ng, Software as a Service (SaaS) and more. Explore 6 apps like Aircrack-ng, all suggested and ranked by the AlternativeTo user community.

If you wish to hack an other wireless network you must get permission from the network owner.Breaking a WEP key involves using network monitoring software to capture weak IVs (initialization vectors) and a cracking software to decrypt them. In this scenario we are targetting a WEP encrypted network with open authentication that has at least 1 client connected.This is probably the easiest possible scenario in terms of hacking wifi networks.

It works almost every time.Even if there isn't much network traffic - a deauth packet can still be issued to any idle clients to stimulate an ARP request.In this scenario we are making 3 assumptions:(1) You've got Backtrack running properly.(2) The target network is using WEP (open).(3) There is at least 1 client connected to the Access point.The lesson to be learned from this demonstration is that WEP should be avoided whenever possible.Instead you should use WPA-PSK with a strong password consisting of both letters AND numbers. There are a few terms used throughout this guide that are important to know when beginning the processes.A set of tools included with Backtrack.

Includes aircrack, airodump, aireplay, airdecap, airolib.A unique combination of letters/numbers assigned as a 'permanent' identifier to network hardware.The technical term for the 'Router' or 'Gateway'. Also referred to as a 'WAP'.The MAC Address of the Access Point.The Broadcast name of the Access Point.The frequency at which data is being broadcast.The device used to send/receive data. Example: wlan0 or mon0.A computer/device connected/associated to an Access point.The process/data that is collected when monitoring an Access point with Airodump.Is a packet sent to/from the router/client in an to establish or maintain a connection.' Initialization Vectors' are packets that contain a small encrypted portion of the wep key.- Throughout this guide the terms Client and Station will be used interchangeably as they refer to the same thing.- The terms Password and Key will also be used interchangeably as they too mean the same thing. Now that we have the required information - we can lock in on the Access Point and start capturing data.- This step also uses the airodump-ng command however we will add some parameters so that it saves traffic to a file.- The first parameter to specify is the channel. This is done with the -c Channel parameter.- The next parameter to specify is the output filename.

This is done with the -w Filename parameter.- Another parameter we will use is the -ivs parameter. This tells airodump only to save the IVs in our capture.- This will display the same output as it did before but will be focused on a specified channel and will also save any traffic to our capture file.- The capture file automatically appends a number to the filename as well as a.ivs extension. Example: mycapture-01.ivs- This command should be kept running in the background while you complete the next steps. Do not terminate it.Syntax:. airodump-ng -c Channel -w Filename -ivs InterfaceParameters:-cThe channel the Access Point is broadcasting on.-wThe output filename to write to.-ivsSave IVs to file.InterfaceYour wireless network interface / (wifi card) (wlan0, mon0, rausb0, etc).Example:.

airodump-ng -c 11 -w mycapture -ivs wlan0. After we have collected enough IVs we can begin decrypting the collected data.Usually about 100-200k is good for a 128 Bit wep key.

If you want to know how to hack WiFi access point – just read this step by step aircrack-ng tutorial, run the verified commands and hack WiFi password easily.

With the help a these commands you will be able to hack WiFi AP (access points) that use WPA/WPA2-PSK (pre-shared key) encryption.

The basis of this method of hacking WiFi lies in capturing of the WPA/WPA2 authentication handshake and then cracking the PSK using aircrack-ng.

How to hack WiFi – the action plan:

1. Download and install the latest aircrack-ng
2. Start the wireless interface in monitor mode using the airmon-ng
3. Start the airodump-ng on AP channel with filter for BSSID to collect authentication handshake
4. [Optional] Use the aireplay-ng to deauthenticate the wireless client
5. Run the aircrack-ng to hack the WiFi password by cracking the authentication handshake

1. Aircrack-ng: Download and Install

The Latest Version Only: If you really want to hack WiFi – do not install the old aircrack-ng from your OS repositories. Download and compile the latest version manually.

Install the required dependencies:

Download and install the latest aircrack-ng (current version):

Ensure that you have installed the latest version of aircrack-ng:

2. Airmon-ng: Monitor Mode

Now it is required to start the wireless interface in monitor mode.

Monitor mode allows a computer with a wireless network interface to monitor all traffic received from the wireless network.

What is especially important for us – monitor mode allows packets to be captured without having to associate with an access point.

Find and stop all the processes that use the wireless interface and may cause troubles:

Start the wireless interface in monitor mode:

In the example above the airmon-ng has created a new wireless interface called mon0 and enabled on it monitor mode.

So the correct interface name to use in the next parts of this tutorial is the mon0.

3. Airodump-ng: Authentication Handshake

Cool Tip: Want to have some “fun”? Create a Linux fork bomb! One small string that is able to hang the whole system! Read more →

Now, when our wireless adapter is in monitor mode, we have a capability to see all the wireless traffic that passes by in the air.

This can be done with the airodump-ng command:

All of the visible APs are listed in the upper part of the screen and the clients are listed in the lower part of the screen:

Start the airodump-ng on AP channel with the filter for BSSID to collect the authentication handshake for the access point we are interested in:

Option	Description
-c	The channel for the wireless network
--bssid	The MAC address of the access point
-w	The file name prefix for the file which will contain authentication handshake
mon0	The wireless interface
--ignore-negative-one	Fixes the ‘fixed channel : -1’ error message

Now wait until airodump-ng captures a handshake.

If you want to speed up this process – go to the step #4 and try to force wireless client reauthentication.

After some time you should see the WPA handshake: 00:11:22:33:44:55 in the top right-hand corner of the screen.

This means that the airodump-ng has successfully captured the handshake:

4. Aireplay-ng: Deauthenticate Client

Cool Tip: Want to stay anonymous? Learn how to use PROXY on the Linux command line. Read more →

If you can’t wait till airodump-ng captures a handshake, you can send a message to the wireless client saying that it is no longer associated with the AP.

The wireless client will then hopefully reauthenticate with the AP and we’ll capture the authentication handshake.

Send deauth to broadcast:

Send directed deauth (attack is more effective when it is targeted):

Option	Description
--deauth 100	The number of de-authenticate frames you want to send (0 for unlimited)
-a	The MAC address of the access point
-c	The MAC address of the client
mon0	The wireless interface
--ignore-negative-one	Fixes the ‘fixed channel : -1’ error message

Cool Tip: Need to hack WiFi password? Don’t wast your time! Use “John the Ripper” – the fastest password cracker! Read more →

5. Aircrack-ng: Hack WiFi Password

Unfortunately there is no way except brute force to break WPA/WPA2-PSK encryption.

To hack WiFi password, you need a password dictionary.

And remember that this type of attack is only as good as your password dictionary.

You can download some dictionaries from here.

Crack the WPA/WPA2-PSK with the following command:

Option	Description
-w	The name of the dictionary file
-b	The MAC address of the access point
WPAcrack.cap	The name of the file that contains the authentication handshake

Cool Tip: Password cracking often takes time. Combine aircrack-ng with “John The Ripper” to pause/resume cracking whenever you want without loosing the progress! Read more →