Backtrack Series - 9: Cracking AP-less WPA Protected Network Using Rogue AP

[theinvictus1]

but you still have to use a dictionary attack? it's just local and faster now? what if the password isn't a dictionary word?

[fifothekid]

@theinvictus1 you'll be screwed :P

[TheNewy1234]

@fifothekid nope just make a passlist in a bruteforce type like a, aa, aaa, b, bb,bbb,... it will take years on a super fast computer, but it's doable

[fifothekid]

@TheNewy1234 I'll take that as a joke

[KeybladerAlf]

Good job..i think the same with @falthas how can you control what ap is the right ap for the victim

[brianleong3099]

please make your font bigger. we can't read 

[fifothekid]

@brianleong3099 you can find the text on the forum

[drecksyutube]

@brianleong3099 wtf just enlarge the fucking Video noob

[falthas]

And how you force the client to reconnect to your SoftAP since there suddenly will be 2 AP's with the same name and the original one will probably have better reception on the victim's side?

[maigpl2]

thanks for a great tutorial, however after getting handshake and running aircrack-ng -r testdb -e essid capture-01.cap I am getting: SQL error: no such table: pmk...

I am quite new to linux, tried to search forum but had no luck....

would be grateful for any suggestions(bt4 pre installed on virtualbox, tried live cd as well same error)

thanks

[LarsX2]

In fact, -W 1 is supposed to specify the WEP flag since it is needed for wep/wpa.

Nice Collection of Videos.