Cracking WPA (and Some WPA2) with Back Track 5

[Nirajkmr007]

i m unable to find station no.... is something required 4 it..

plz help

[suwardigedad]

how to get diactonary

[TheEnrique32149569]

how you get the dictionary

[buzzdown69]

does this work for windows vista or only for linux?

[crazypcdude]

@buzzdown69 It only works in linux, but you can run virtual linux inside vista and do it that way. You will need a usb wifi adapter though.

[Lokivoid]

@crazypcdude

Well techniquely you can do it in windows but involes dumping down 290+ on a single Wifi adapter, Airpcap is vary effective at doing that task within windows. However in the terms of hardware costs you better off using linux and cheap realtek adepter. That and you dont really learn anything by clicking through a windows GUI.

[0igo]

please help i have been looking everywhere on how to add my wordlist to backtrack. I am booting backtrack 5 from a dvd and i have a 13gb wordlist .txt file. i have no idea on how to locate the file in backtrack i looked everywhere please can someone help me. it wont show up on the backtrack dolphine file manager so im stuck. if someone can please help me out i know how to do it with a usb but i dont have one of that size please help me out please thanks. (:

[crazypcdude]

@0igo You can use magicISO to open the backtrack iso and add the wordlist to the DVD image, then it is easy to find.

[0igo]

@crazypcdude hey i finally figured out how to get to my wordlist. hey would you happen to know of a number wordlist to crack a 2wire router (wpa2). i have 2wire and so do most of my friends and all there passwords are numbers would you happen to know of a number list i could download? i looked on ebay and some torrents but have found nothing )

[UnknownEX1]

@0igo

I can try and create one. I don't know how long it will take. WPA2 is 8-63 characters long. How many characters do you want the list to go up to?

[rogeriopazduarte]

i use fisical conection , rj45 i dont like wireless lol

[thinkxtraFIN]

hmmm.. i use bt4 with vmware about and win7. but i don't can become the wpa handshake. i've tried deauth, fakeauth, and mooore things, but i dont get it...

[iaqov]

i didn't understand how to add wordlists to backtrack i'm runing win xp.

can you help me with that?

[iaqov]

do you know where i can get wordlist that include all the combinations of numbers?

[joevalle90]

Men, is it possible to hide yourself if your using neighbors wifi so that they can't detect you on their network? How?

[LOUD5000]

HEY MAN....PLS HELP ME!!!! WEN I PUT ,,airodump-ng wlan0" it sas no device found?????? I dont have wirreles as card in my comp I have small device thah I conect with usb port to my comp IS THATH PROBLEM OR ITS SOMETHING ELSE!!!!!!! PLS REPLAY PLS!!!!!!!!

[crazypcdude]

@LOUD5000 That is most likely the issue, only certain usb models work in backtrack (and most linux), google back track compatible USB wifi and see if yours is on the list.

[Raventattoo]

@LOUD5000 you can type in airmon-ng press enter and see if it shows your interface and chipset. If it is blank, there is a good chance that your wifi card/stick is not connected or it is not supported by backtrack. You can find cheap usb wifi sticks for less than 20 dollars that are compatible. also are you using VMware ? VMware itself can be an issue. let me know if anything comes up for airmon-ng.

[isamaru108]

i cant get my station mac from my network...where i can see it?

[leonardcua456]

hey so I'm assuming that if i can't seen any of my network details after punching the airmon-ng prompt that's it??? it's not gonna work?????

[GunzCoty]

@leonardcua456 I got the same problem let me know how you get on.

[Raventattoo]

@leonardcua456 send me a message.

[joevalle90]

Dude, can you hack this kind of password using backtrack, "adasi1231jkh13^&1313(@31!%$@"­?

[OreoYifu]

understood the video fully and i've successfully cracked my own network but i was wondering why it has to be the latest password file like yours was pass-06 why not use the other 5 files?

[crazypcdude]

@OreoYifu Everytime you run the this method it creates a new file pass01 - pass05 would be from previous attempts. If you use them you are hacking an old attempt. Basically, I was saying make sure you are using the file for the network you are currently working on.

[OreoYifu]

@crazypcdude ... that seems so obvious now i feel dumb thanks lol

[herng77]

how to get dictionary

?

[M4A1Nerve]

Im not getting a handshake. Why?

[buzz200066]

How does it work if there aren't clients on the network...?

[crazypcdude]

@buzz200066 Not Well, you must have patience young Jedi.

[Raventattoo]

@crazypcdude lol

[theoriginalfatdonkey]

@buzz200066 u can use rogue ap to force yourself on the network and hack the routers login port forward all data to your port 10000 and use wifizoo!

[89shahrizal]

how to get dictionary,wordlist..and so on...

please somebody help me...

[MUNZEKONZA94]

how to backtrack 3

read NanoStation like vajrles card

and not as a regular internet

[DA509BOY]

im trying to hack my wpa wireless internet but i cant get a handshake can you please tell me why is that happening.

[synonyx]

Thanks, works perfect ! just get a bigger word list !

[Zwairyz]

Really good and clear guide, however I cannot get station MAC, thus I cannot complete a handshake :/ The connection is WPA

[Panzos111]

2.09 password is the name of which file dude??

[Enikoro]

@Panzos111 Its the name of the file where the airodump should save the data it collects. Its needed to use the airocrack.

[kritikos986]

you are very good. nice video.please help me. (please specify a dictionary <option -w). what his mean??? the last clik.

i have backtrack4 from boot cd.

thank you

[TheRicardo787]

cuando hagan un video que almenos se vea no se para q suven algo asi de mal gracias

[Ishkrish]

oops sry for doulbe msg internets locked up ... also im running BT4 R2

[Ishkrish]

does anyone know why I cant get any handshakes when doing this manually or using wifite ...youst to work on at least one of my wireless cards and now neither my netbook or desktop all weps wworks fine just not wpa handshake.... any ideas

[Ishkrish]

does anyone know why I cant get any handshakes when doing this manually or using wifite ...youst to work on at least one of my wireless cards and now neither my netbook or desktop all weps wworks fine just not wpa handshake.... any ideas

[MrAndrewphill]

i cant get handshake. what is the problem?

[CamCam8771]

@crazypcdude Hey, how do i get the station mac number? its blank for hours.

[tist006]

cracking wpa seems to require a little luck with the targets PW

[XxTHEPORTAxX]

man HEX IF THE KEY IS GOOD AS LONG BECAUSE HE SEEN THE LOOK DICTIONARIES SAY ONLY for 2 3 or 4 digit HEX AND ARE LONGER PLEASE AYUDAMEEE

[lincaorain]

I try to hack WPA2, I had waited for 1 hour, the station number still not come out, why?!

[hover1977]

cant seem to get a handshake, following every step, running vmware, i get to the de-authenticate with aireplay-ng, the packets increase by the hundreds but still no handshake and now lost the packets altogether!

the power of the wifi is 36 or 37, an help appreciated

[acapsta]

Need help.. after i enter airmon-ng.. nothing pops up, i only see interface chipset and driver.. dang!!

[rafalza1983]

how did you get the wireless adaptor to work in vmware?

[crazypcdude]

@rafalza1983 Any virtualisation software can only use USB wireless network cards as physical devices, all other types of wireless card are seen as virtual ethernet devices and can only be seen as a wireless device by the host and not by the guest operating system. So if you want to run BackTrack in VMWare or Virtualbox and have full wireless capabilities, make sure you are using a USB device.

[xsplittx740]

@crazypcdude is there a way to crack wpa when using as a boot disk? how would it find your password list on a dictionary attack when ur not using vm ware and just booting it?

[xsplittx740]

@crazypcdude is there a way to crack wpa when using as a boot disk? how would it find your password list on a dictionary attack when ur not using vm ware and just booting it? i thought about putting password list on a flash drive but how would you get it to reconize the flash drive.

[crazypcdude]

@xsplittx740 Sure, you could store it on the main system hard drive and then connect through the file system, or plug in a flash drive and read off that. Either way, Linux will should the drive. Or you could always open the bootdisk iso with 7zip, add the list files to the CD and then re-burn it.

[DA509BOY]

@xsplittx740

[frank0067]

WHATS going on with magic ISO.. been on google on youtube for hours .. no one seems to be able to explain what file is needed to make the disk bootable

I am trying to make BT4 iso bootable.. but when it asked for the file to do that..("from bootable image file") there is NOTHING mentioned to help you find what file that is !!!

[crazypcdude]

@frank0067 All versions of the BT4 are already a bootable ISO. Just burn it to a disk like a standard ISO, and don't worry about adding any boot options.

[frank0067]

@crazypcdude

well they are supposed to be..but when i want to make my own Cd magic iso wont allow me, because it wont mention what boot file to use..actually no one does;

its like a secret mystery thats covered up.

anyways i threw magic iso in the trash...now i have power iso

[AnoxOnline]

do i need to get data?

[sddfs777]

man i really hope this works cuz i have a ipod touch but when ever i try to connect to internet it asks me for a password >:(

[oadriankeith]

thanks for the helpful video.

[happygamestvfun1]

why cant u use windows?

[Vaschka1]

is there a reason why you couldnt just use /pentest/passwords/wordlists/d­arkc0de.lst ?

[crazypcdude]

@Vaschka1 You can use any list you have had good results with. :-)

[TheAcemannn]

Hey, i have the problem that i cant fint the "STATION" adress if i focused my target with airodump-ng -c Chanel ..........

ofcourse, i know the adress because its my network and my router i attack, but usually Airodump has to find them on his self, but he never did :(...

so has anyone an idea?

THX

[rockbutt123]

thanks for the video man. quick question. for some reason i can never get the handshake, could someone put something so that someone like me wouldnt be able to get the handshake? is there like some sort of blocking program that can stop the handshakes from happening from people like me that are trying to crack their wpa? just wondering, probably not but who knows. thanks again

[TheDashingification]

Thanx Sooo Much

Very Nice Tutorial

It Really Worked For Me

But Plz You Also Use 1 Of The Softwares For Recording Your Screen

& Thanx Again Bro

God Bless Ya

[italiantetey]

its easy to get "WPA handshake", but cracking it is another story. if the password is not in the dictionary then ur gone. so don't tell that it's easy to crack wpa password ur just fooling them

[pheaneasphreak77]

when i type : root@bt:~# airodump-ng wlan0

ioctl(SIOCSIWMODE) failed: Device or resource busy

help please

[haggiboy]

@pheaneasphreak77 everyones wlan isn't called wlan0, mine is called something totally diffrent (rausb0)

you'll have to see what's the name of it is by doing: airmon-ng

[Gunpowdermaniac22]

@haggiboy  noob

[Lilg1412]

hey do you know were i can get a good dictionary pleas message back thanks..

[SiamJihad]

is it backtrack3???or

[crazypcdude]

@SiamJihad Yes it is Backtrack 3 on VMWare

[SiamJihadDX]

PWR is 100...so u can do it better :P

[8uckme69]

Top vid but where can I find more wordlists and how ( cause I am booting from cd ) do I get backtrack to see them

[superbeast0934]

would it be possible to create a rainbow table of md5 or something and have backtrack use that?

[pacorocks1]

hack me mudarfuckars 75.179.132.130

[a5ecedgrt]

man u know how to crack wpa but u had bad video use frapland man

[buhdee555tothe666]

hey umm, When I type airmon-ng all it says is interface chipset and driver, i saw what you said to shadowmosesgreen but i dont know much about this and i can still can run it, i just dont have a CD or DVD boot version.

[Acrokidflyer098]

how do you get a shell konsole

[ShadowMosesGreen]

When I type airmon-ng into the konsole, it just has "Interface" "Chipset" and "Driver" but nothing under them. I'm connected to the internet on it. Could it be due to it being loaded on a virtual machine?

[crazypcdude]

@ShadowMosesGreen Yes, change your virtual machine settings for network card access. IT should be bridged to a real card on your host machine. You can always try the CD or DVD boot version first. If that works then you know your card is compatible and your VM needs settings changed.

[Matice21]

the list or text process take forever...rainbow table are many times faster

[Intensification]

question: I tried this out on myself, but it turns out when it the attacks went to my connection, the connection just reconnected itself automatically since that is my setting. my computer remembers the password and automatically connects to my router..so if other computers have this same setting, then it won't ask the user for their password, thus resulting in no "handshake." Doesn't that = fail?

[ntomi26]

@strangerchris I have the same problem too, wpa handshake just not appearing, what could be the problem?

[BARH000M19]

hi every1

nice video you have bro :)

but i have proplem and i hope you can help me

i tried to do what did you did but i think i have failed in the last step which is location of password

and BTW handshake didnt appear in the konsole

[flyin20052005]

Hi iv looked in my backtrack folder and there aint a password folder am using bt4 and running it off a live cd. Can i still find a list and save it to my backtrack

Plus do you know how i vmcan conect to the net while am using back track

[SalioPutacio]

HI, men i have a problem, for me don't appear the station numbers idk why can you help me?thx

[flyin20052005]

Hi iv got bt4 but carnt find the passwords all ready on here to do wpa could you help me

[arbrsword]

Great Video dude Liked your video you earn my subscribe xD

but you need to work Clarity Use Hyper Cam Registered version u will get high Quality

Thanks again

[nigeeb2002]

Great video and nice precise explanation, however you should work on attaining a good video capture software for clarity of your videos. I think, once you attain a good video capture software, you can be rated as the best in explaining stuff.

[crazypcdude]

@nigeeb2002 Thanks for the nice comments. Actually, I have better software now than when I recorded this. Maybe I will redo this video someday soon.

[xDJxZYLENx]

@crazypcdude Benutzt du beim schreiben Google Translate?

[twistedmisery666]

hey when i try to do this "airmon-ng" there are no drivers or chip set showing up ??

like on ur video is i dont think its connected to the internet how do i connect the backtrack to the wifi im getting ?>>>thanks

[twistedmisery666]

so i have windows xp and i downloaded virtrual box and i have the iso of backtrack 4

and i have a linux iso file to ,,,,so i need to have linux to do this ???like a full operating system to download vmware to it ??? im confuzed plese tell me

[fireinmycrotch]

i noticed you didnt set your wlan0 to monitor mode using airmon-ng start wlan0..hmmm nice vid tho

[fireinmycrotch]

i noticed you didnt set your wlan0 to monitor mode using airmon-ng start wlan0..hmmm nice vid tho

[tonnymty]

Hello. Good video, a question maybe you can help me? How do I add a directory to a live dvd?, I run the live dvd on a laptop with Windows 7. I have to burn any disk folder? Or how I add? or some live dvd folder? I lower the bactrack 4 total releace.

thanks

[crazypcdude]

@tonnymty rather than modify the CD, use a USB flash drive to hold additional files or connect to your hard drive under the samba shares folder.

[yt1209tm]

Hi, thanks for the video, I downloaded bt4 ISO and use in VMware Player, for some reason I can't see the shell konsole icon on bottom, what am I doing wrong?

Also, can I use my laptop's internal wifi to do this?

Thank you.

[pedeapsaa]

usless if passprhase is not in the dictionary , the WPA or WPA2 it;s usually setted to randrom (u have the key in the back of the router) if it;s so it's imposible to crack it cuz u have to guess 14 digits milions of combinations

[efa1001]

gimana caranya copy bssid?????

[Artisticmindd]

where to find a good password list????please tell me or tell me some good software to create password lists in WINDOWS...

[Artisticmindd]

yah this is hopefully the easiest video and nice work i have seen uptil now...and i recommend to anyone...but in the previous i was getting this problem....when trying to deauthenticate..

AP IS USING CHANNEL 1 WHILE WLAN IS USING 9...whats that?

[pkar1979]

hey bdy nice vdo, can u suggest anything to speedup the data reading it is very slow and where to get some standard dictionary files, thanx and keep doing the great job

[rushwhq]

hI

I made all. monitor, handshake bla bla bla...

but i cant connect to my hidden wireless... lol

[rahj8786]

not all ap is accessible.!

[xakep1cifik]

is there any way to crack password like wep with out password list becouse i live in Macedonia i can find some good password list help me with this one or if have some good password list

[giorgarasGRE]

when it starts to read all passwords from the list it stops and say something about the dictionary...that word is not in the dictionary something like that...sorry for my bad english!!

[adewilt]

So now we have the password, how do we proceed to the next step to actual sniff those packets by decrypting realtime the WPA(2) key?

[strangerchris]

nice video...

i want to ask something..

i'm trying for WPA..there is a connected station,it gets data packets,i do the Deauth proccess a lot of times until i get a Handshake but no Handshake..what could be the problem?is there anything else i can do??

[crazypcdude]

@strangerchris Not sure. Try changing the aireplay string to start with aireplay-ng -0 50.  The 50 is just how many times it tries to work. Maybe more tries will improve your results.

[fen008]

when you are waiting for the wpa hand shake . if you have a other computer . just mess with the wireless network . like try to conect to the network with any key . and it will keep tying to conect and it will give you the hand shake fast

[krize604]

nice video ! thx

[njordan3]

i am booting bt4 off a cd and i am needing to kno the best way to copy and past the password dictionary u used from windows

plz n thanx

[crazypcdude]

If you are using the bootable cd, the best way is to copy the password file to a flash drive.

[CryptoDriver]

I have a neighbor that has a WEP "secured" network with an SSID name of "Ha Ha Can't Hack Me". He's just BEGGING for it.

[crazypcdude]

LOL, that's a challenge I couldn't resist.

[GeminiFyre]

I would go to his house and say sup here's your password pz~

[RAZcracK]

@CryptoDriver Fuck him up his network , and change the SSID to "I'm a Hacked motherfucker" ... It would be my pleasure to do it for you but is impossible ...

I had a neighbor that he named his SSID "Selling cheap internet connection" (WEP), i broke in i sniffed his activities and i found a rapidshare acc and one website he owned, i fucked up everything ... I Changed the SSID to "You can't sell something i already own" OWNED !!!

[SONYOFJAPAN]

@CryptoDriver FUNNY, I HAVE SOMEONE WITH WPA "ITS LOCK BITCHES WUT NOW"

[fladfishey]

@CryptoDriver AHHAH Dude hack into the roughter and change the ssid name to like IV BEEN HACKED! ahhahahaha

[coveranonimo]

@CryptoDriver

What if you crack your neighbour's password and than he's got no internet or network?

What if he's using a firewall or ISA server to keep all non-domain users off internet?

[spinctah]

@CryptoDriver Hack him m8. Then nmap scan his network, you might just find he has a networked printer. Then just install the right drivers and print out alittle "Ha Ha You Got Hacked!" surprise.

[gh5643]

ok what about wildpackets I couldn't know how to install it,can you help me?

[gh5643]

can you make a video about installing aircrack that works on xp.

[crazypcdude]

Sadly, I have never been able to get aircrack to work in windows. :-(

[teddyroxpin20]

does it matter if ur using backtrack 4?

[valcamas]

no it does not matter

[crazypcdude]

No, BT4 was still beta when I made this, so i used 3. Either will work.

[219013252]

can you please send me the password list you have please i would like to try this on my network

[crazypcdude]

the link to the password list is in the video

[OmarThePug]

couple of things...in the annotations you capitalize the commands "Aireplay-ng" ...I get an error when I capitalize the commands. And at the end you annotate the "Aircrack-ng" command as just "Aircrack" It definitely wont work without "-ng" attached. THX

[crazypcdude]

Thanks, Fixed both. Linux is definitely case sensitive.

[tonybaxter2006]

hi ,which bt are u using 3 or 4...?

i manage to crack wep but not wpa... i been following your video exactly but i dont get bssid and station nubers on my screen..... ex: (in your video at 2:30)

p.s. i use bt4

thx

[crazypcdude]

I use BT3, but either should work. You will only get a station number when someone is connected to the network you are cracking. Just start it up and wait for someone to connect. Then run the attack, when they do.

[tonybaxter2006]

hi , I recently install backtrack 4 beta on vmware.But my wifi card isn't working properly can you help me? please

[crazypcdude]

try accessing it with airmon. Ignore any of gui prompts as they might be changing the settings from bootup. Also make sure that VMware is sharing the card as NAT in the machine settings.