Hacking WPA (Wi-Fi) with pyrit (old version of pyrit)

[samljer]

1000 /sec? i get more then that using a CPU.

my GPU on pyrit hits 150k/sec

something is wrong with your setup

[happyhatred23]

is this possible with ATI instead of Nvidia?

[cyberjackcyberjack]

@happyhatred23 Yes just install the ATI driver, ill pm you with the specs

[cyberjackcyberjack]

not sure what you mean "produce" if you mean to process a 1GB wordlist, the this would depend on your system spec for ex a core2duo at 2.4 Ghz (same as the video) runs at around 500pmk/s per core so around 2-3 hours. My new setup is on a small cluster of servers, and runs at around 40,000 pmks and that would do a 1 gb wordlist in 10-15 min

[KiddingSpree]

Dude, I LOVE YOU.

[iamdabestuploader]

do i have to be a computer expert to do this or can beginners do this?? and where can i get pyrit from and da rest of da tools?? pls help!!

[samljer]

@iamdabestuploader

"backtrack linux"

thats all imma tell ya.

[iamdabestuploader]

do i have to be a computer expert to do this or can beginners do this??

[cyberjackcyberjack]

@iamdabestuploader it could'nt take you long to learn

[kevlar3342004]

@iamdabestuploader you have to have a degree in common sense

[cyberjackcyberjack]

@furko23 Hmm ???? whats that mean

[Heelixxrogue]

can Pyrit also calc number crunching or is there a dictionary etc that has a pre-computed list from 0000000001 onward? i.e. for use in Aircrack etc

[cyberjackcyberjack]

@Heelixxrogue its more for WPA or "aircrack" if you like.

[mordsgaudimachen]

So with this method, does my password need to be in that dictionary file?

[cyberjackcyberjack]

@mordsgaudimachen YES, this is always the case ....for now at least.

[mordsgaudimachen]

@cyberjackcyberjack Thanks for the response! Im trying to learn about Rainbow Tables but all I can really find is dictionary attacks. I am dead set on breaking my own network, but I know my password isnt in a dictionary file. So I made a dictionary with crunch, and a trillion words is too much to go through ;)

[cyberjackcyberjack]

@mordsgaudimachen lol, yes a trillion is silly in size. In fact if the ESSID is set to default such as SKYxxxx or NETGEAR, BELKIN54g TalkTalkxxxx then you are wasting your time, as the default set key is way to complicated (well not true for SKY that got cracked along time ago, as the WPA key is made from the mac address)

[stan464]

Yea, WPA is waste of time to Attack. just doing it as a "Network Sercuity" project really.

[Atlemj]

we all know it works its just to fint the commands thats correkt 4 your own computer hardware

[xsplittx740]

i still cant crack a wpa on backtrack 4, i always run out of space.....im trying pyrit to see if it can hold more info, but so for i dont know

[cyberjackcyberjack]

@xsplittx740 yes you will need 1 large hard-drive and a a big wordlist. (mine is around 6 GB)

[cyberjackcyberjack]

@cyberjackcyberjack mines 13 GB you can download it hear thepiratebay(dot)org/torrent/5­945498/WPA-PSK_WORDLIST_3_Fina­l_%2813_GB%29.rar

[happyhatred23]

@cyberjackcyberjack how long dose it take to produce a 1 GB list? and props too ya awesome job.

[stan464]

Ohhh ok, i use Back Track 3. for some reason im not massive fan of BT4.

is it at all possible for you to make a video on the best ways to capture a wpa handshake?. the stanard deauth doesnt always work. ive been at it for 25 minutes deauthing and i get nothing back yet i can do it to my own network and get a wpa handshake in around 2 minutes.

[cyberjackcyberjack]

you could try the following to capture wpa handshake

try lowering the transmit rate to 2mbs

iwconfig "name.of.interface" rate 2M

or try to lower the packet size with the -x 3 option

[stan464]

@cyberjackcyberjack Ohhhhhhh ok. il'l have to try that.

thanks for your help :)

[n00oob]

@stan464

You shouldn't really be attacking WPA because realistically you wouldn't want to waste time with it.

[cyberjackcyberjack]

@n00oob lol thats true, however if the user hase changed the default essid to somthing like "daves-wireless" then thaires a good chance of cracking it, as the user will more likly changed the deffault WPA key from the the ISP set one witch usualy is more secure

[n00oob]

@cyberjackcyberjack But you usually wont know though really. Guess it really depends on if you are dedicated enough and know how to use rainbow tables.

[cyberjackcyberjack]

@n00oob rainbow tables. ? thats what pyrit is ! or rather makes

[n00oob]

@cyberjackcyberjack Yea.. Hence why I said "Know how to use" not use.. lol

[stan464]

Ohhhhh ok. well this is undeeded for me being as most now these days run Dual Core +. im running quad :). and if you keep the .Cap file airodump keeps that holds the handsake in it so it can be used again and again.

though pyrit seems interesting, could be useful for me, does it help with larger dictionary files?

[cyberjackcyberjack]

sadly the 32-bit OS/CPU of backtrack4 is restrained a 2gb limit.

However if you download the 64 bit Ubuntu 9.0.4 and you have a 64 bit CPU then it should be unlimited

[stan464]

Nice Vid, But a question? why didnt you just do all this in aircrack? with the Dumpfile and Wordlist option? still just as quick..?.

But good vid anyways dude.

[cyberjackcyberjack]

Yes you right i could have done that. But i only did it this way as it has the following bennifits

speed, with pyrit you can have a huge increes with use of the GPU if you have a compatabe Graphics card

Speed for the next time, just incase the user changes the passphrase or you come accross an AP with the same ESSID

[RAZcracK]

What are the "compatible" Graphics cards ???

I own an nVidia CUDA GT240M 1 GB ... is this card compatible?

[cyberjackcyberjack]

@RAZcracK Full list of compatible cards hear en(dot)wikipedia(dot)org/wiki/­CUDA