How To Hack Wireless Networks (WPA - Windows/Linux) - Part 2

[yang1tachi]

@boboth3killer linux only

[yang1tachi]

@LuminatX you need to make the directory using "mkdir" command

[LuminatX]

when i go to change directory, it says it doesnt exist?

[WiredByte]

didn't quite understand what hash tables was, could anyone please send a link to some page(s) where I could learn more about it?

[kickthedamcat]

Fuck that, 5 Hours later you gain access just to find out they have a week/slow internet connection and to top it off no shares, whats the point? Something to do when your bored I guess, try and install more exploits? fuck that I would just rather play sexybeach zero and also what dumb asses have short keys and also what dumb asses have actual words in there password

[Fetalchupacabra1]

Dude. You rock. Thumbs up this if this hack worked for you.

[DragonDevil100]

@Fetalchupacabra1 Ive Still gotta do it, does it acc work ?

[benjabean1]

Amazing video. Without it, I will probably never crack my neighbor's network. The only problem I came across, however, was that I couldn't get mon0 to broadcast on channel 11. It kept broadcasting on -1. Problem solved, however. I just waited until I got a WPA handshake. It took overnight, but it was worth it.

[americanboy130]

bash: ./genpmk: command not found. help pleasse?

[Misterdave5555]

@americanboy130 Try typing only genpmk without the ./

[americanboy130]

@Misterdave5555 tried that it didnt work :/

[sabbi6678]

bash; permission denied. please help a loyal subscriber please?

[91pranjal]

its not showing any network adapter nd driver installed after [airmon-ng]...pls help.

[epyemelianenko]

BETTER THAN BACKTRACK /watch?v=wCxVReiwF2w

[Gary1q2]

What is a wordlist?

Is it a notepad file with millions of words?

If not, what is it.

[deernardz]

root@bt:/pentest/wireless/cowp­atty-4.6# ./genpmk.c -s Yo -f /root/Desktop/Super-WPA.txt -d my_wpa_hash

bash: ./genpmk.c: Permission denied

why does this happen to me?

[MrE82y]

YOU DONT EVEN NEED TO BUY A NETWORK ADAPTER IF YOU HAVE A LAPTOP WITH INTERNAL NETWORK CARD... JUST BURN THE BACKTRACK 4 ISO FILE TO A DISK. THEN RESTART YOUR COMPUTER AND THEN GO TO BOOT MENU AND SELECT THE DVD DRIVER. NOW YOU WILL BE USING BACKTRACK 4 OF THE DISK.

[AristotleGr]

man all ok installing backtrack but i run windows 7 when i pressed comands airmong-ng it doesnt shows connections what shoyld i do ? ask soon ill appriciate it

[harper690]

The Best Network Adaptor For It Is The Alfa AWUS036H The Cheapest One I Found Is Ebay Item Number: 270764073764

You Dont Need To Install It. It works straight away with Backtrack, Amazing Adapter For Receiving Packet Data

[naz7dotcom]

How to add wordlists on backtrack?

[TheGamingDirect]

Anyone willing to give a word list?

[NLterror6000]

i need the wordslists imao

[kaput450]

@NLterror6000

I will trade you a wordlist for info on how to map a hard drive.

[NLterror6000]

@kaput450 already have a wordslist with 64million words :D

[NLterror6000]

great the handshake wont take place



[kaput450]

How can I map my Local Hard Drive in BackTrack? I have my wordlist but cant figure out how to move it over. HELP!

[NLterror6000]

@kaput450 usb drive.......

[kaput450]

@NLterror6000 Tried that, couldnt find how to access it although it did mount.

[rajjad]

i have cowpatty working in my fc12, where do you get the word list? does cowpatty make one for you, it seems it also requires a dictionary file

[AusUtuber]

took a bit of time. but i completed it.. some strange reason it couldn't locate my directories.. but i closed the shell and started a new one and it worked.. might help for others :)

Thanks bud!

[mike75479]

do you will do it for me ?????

i dont speak english, so this is difficult for me ?

I know a little English

ok do you will do it for me in teamviewer 6 ?.....

[Nedialkata1]

thanx 

[213Algeria]

@mushroomHEADBANGERS How to upload the wordlist.txt to backtrack and where to put it???

[rj200811]

do u think if it is going to work to hack the school wifi password on a laptop using linux?

[1ndev]

what version VM ware are you using?

[Cassello69]

hello all, can someone help for the Wordlist file please ?

[BikeStand122]

@Cassello69 did you find any help?i want too

[sabbi6678]

How do you get the file (wordlist) into backtrack please explain noob friendly

[Chic01taliano]

Does this apply even to WPA2 ?

[2milehigh]

great vids dude. One question, you need a wireless network card for this right? can't with a integrated wireless card?

[saad6633]

Can you explain the drivers ?

I don't understand them . I mean when I want to run aircrack they say download the driver . I have windows xp and I've searched for the drivers I couldn't understand !

could you please tell me how ?

[DerrickTheFleaBee]

very good video the retards who dont know how to work it are doooooowns

[aznjohnyjj]

is this illgal and is the police going to get me iam just 10 years old i just want to know to to get internet only

[2milehigh]

@aznjohnyjj yes, this is Illegal. Any form of hacking without the persons consent is illegal. But, if you are attempting to get into a neighbors wireless router... 9/10 chances they'll have no idea whats happening. be careful.

[xxcky1]

How to make self admin i need help (parental controls)

[MAD8RAD]

i have run into a few snags in this process. see on my backtrack 4 virtual machine i cant access my wireless card it is an intergrated atheros card not a usb one and on the live cd i cannot get or save wordslists on the live cd i dont know how to save things to the disc for one and two i caant access the internet because my access point is wireless and encrypted. do you know how i can use my wireless card in virtualbox? i tried vmware and it didnt work for me either. i apreciate any help thanx

[DutchHackerNewbie]

@MAD8RAD

backtrack forums:

[MAD8RAD]

@DutchHackerNewbie can you be a lil more specific than that?

[DutchHackerNewbie]

@MAD8RAD

yes,

1. typ " backtrack" in google

2. enter the first hit

3. click on forum and register

4. read the forum, if you can't find your question,just ask them

[DutchHackerNewbie]

@MAD8RAD

I am not able to typ a direct link here, so read my previous post.

[videomavric]

can you save the hash as a .pl or .py file, and execute the file without all the code in the Konsole, and one more thing, is the Terminal and Konsole the same program and are they both included in linux, or just one

[DaveHudak]

great video. i have never used linux before and i was wondering if/how i would be able to find the table i have saved on the desktop of my host computer or if I would have to transfer it somehow

[trueblu8]

Who was that kid at the end? Is he the one making the video? Very good tutorial btw.

[hamstanz]

you are so smart

me so horny

[TimTimO7]

man this dudes a nerd haha i dont understand a word your talkin about in the first 2 mins of the vid thts why im turnin this dork attractor off manmy head hurts now, its suppose to be east not, wtf are you talkin about i jus wanna get on my neighbors internet

[DutchHackerNewbie]

Hi mushroomHEADBANGERS,

Great video,Thanx, I already cracked a WEP key after one of your other video's

I now have a .cap file with the handshake from another channel.I am trying to crack the .cap with aircrack now, but it doesn't seem like to succeed.

I have a question for you: I wanna try this with cowpatty, but i have a few wordlists, 10 Mb, 100 Mb, a few others and even one of around 700 Mb.Which one should I use?And bruteforcing with John te ripper, is it always possible. Big Thanx

[Adamulduren]

when i type airmon-ng. there comes only interface, driver and chipset. buth underneath there is nothing

[jonaqwerty]

@Adamulduren I have the same problem

[wspirify]

Hi there ) to hack wpa need huge amount of time! or some grid network or maybe cluster like Nvidia Tesla to increase the chances ) home PC even coolliest can`t bruteforce good password ever, if only gets BIG LUCK with a dictionary atack, so it is used to crack only wear (user defined) passwords ))) HAVE FUN

[Cyf531]

How do you add more than one dictionary file to genpmk?

[rsh0071]

Where can i download wordlist?

[the2dipip]

where did you learn all this?

[teddyroxpin20]

What is the best way to get a wordlist?

[thrash318]

Not to repeat the question, or at least in a coherent one, if a station doesn't show up when you are looking at the bssid, then you can't really proceed to hack into the WPA/WPA2 correct? When you said you could wait and sniff the network out, do you mean to just leave the airodump-ng command on and keep letting it run?

[a5ecedgrt]

whats the best wireless usb adapter for bt4 is it alpha or gsk??

[Bakanelli]

i suggest u buy a new cpu ...200words per sec!? i have intel quad and it has 2775 passwrds per sec, thats 9 million per hour :D

[Lacihun1]

what is the difference between WPA and WPA2? :D Ohh and do you think I can do this at my school? :D they blocked the wifi so we can't use net there =( XD But I hope I can do this without any punishment :D

[Lacihun1]

what is the difference between WPA and WPA2? :D

[volpsp]

can u be more detail on how to crack the wpa because i got confuse when u use cowpatty.

because i am using backtrack 4 on my mackbook pro and using a Alfa awuso36h card

[volpsp]

so that how u do the .cap files

or how do you make it

[clint0nify]

you said your system BSOD'd. Why in the hell are you using windows anyway if you already know GNU/Linux? Are you a gamer?

[tricia1024]

lol this is too intense ;x it's witchcraft! XD

[modroff]

all my praises to you where not posted, just wanted to say thanks a lot great tutorial, somehow i missed how or where to get the wordlist, u said to others is in the video but somehow i missed it, still great video, noob aproved, (me=ubernoob) second time i coment in this thing (somehow the firs one didnt go in) but thank u

[sinister1957]

Thanks for your tutorials. Very Well done . I did the WEP crack with no problem. When I try the WPA I cant get a handshake. I do see the packets flying when the deautherization is taking place. I even tried increasing the deuth attempts, nothing seems to work.

Thanks

Sinister

PS I posted this message in WPa 1 Also For some reason the first time I psoted it it di not show up .

[sinister1957]

Hey Great Tutorials I tried the WEp hack and it worked just fine. Wjen I try the WPA I get the bssid and the station but when I use aireplay I cant get a handshake. I See it sending the deauth signal and packets but no handshake

[greyfox278]

so when u do all this and theres no station just shwing them and there bssid like theres only one computer on there then what r u supposed to do u fucked then pretty much right?????

[mushroomHEADBANGERS]

Assuming I understand your question correctly, there needs to be a computer already on the network to be able to obtain a hand-shake. Of course, you could also just wait and sniff the network until a computer gets on the network and obtain the handshake that way too.

[InfoSeeker93]

thanks another 5 stars... which program do you personally prefer to crack wpa? Cowpatty or aircrack?

[mushroomHEADBANGERS]

I usually use Cowpatty but I have so many Hash Tables and that Top 1000 SSID Hash-Table so it's obviously the preferred method. However, when I come across a unique SSID I usually just stick with Aircrack. If I really want access to the network I use John The Ripper as well.

[alicecoopercss]

So you already had your key in a dictionary.. How did you go about getting the key in the first place? Or how would you, other than just making the one in the dictionary and the actual one the same? I am trying to find out how secure my network is without a dictionary with the key in it.

[mushroomHEADBANGERS]

If the key is not in the wordlist then it won't be found UNLESS you utilize a tool like John The Ripper, True-Brute Force, or throw in some additional flags to mix it up a bit. True Brute Forcing would take an unrealistic amount of time so can be excluded as a possibility. Using programs like John The Ripper alongside with Aircrack or Cowpatty allows words in the word list to be manipulated to increase the success rate.

[FanisXa]

@mushroomHEADBANGERS where to download allround hack my friend???I am from Greece and I want some help .. sorry I do not know English....thanks

[GOLTURBO555]

@mushroomHEADBANGERS where can I find the BT5 for windows?

[TjR3O3]

@GOLTURBO555

if you dont know that, u have know business fuckin with this tool.... to answer your question.... u wont.

[np51]

how did u get the wordlist...thts the part im confused at and where do u put the .txt document in? help pls

[mushroomHEADBANGERS]

There is a variety of places you can get a wordlist. Check the Video Description :P

As far as the wordlist goes. I mounted my Host OS as a Shared-Drive and accessed it that way. You can simply store the wordlist on a removable device like a Flash Drive and reference it there or copy it over to the Desktop.

[jose12181980]

i just have one question where can get the wordlist from..and thanks for the vidoe

[mushroomHEADBANGERS]

Check the Video Description ;)

[dlmyp]

thnaks ... I have some network isues thats I have sent the message four times ... :)

[dlmyp]

I have a problem ... when I tape airmon-ng and enter I don't have the interface name chipset, driver ... way I have this problem because I tried on several laptops .... what is the problem .... thank you very much

[mushroomHEADBANGERS]

There is no need to post your comment 4 times....I took the liberty of removing the other three. Your issue is most likely with a compatibility issue between VMWare and your network adapter. So give a Live-Disc a try.

[stalkers111]

Is there any faster possibility then 30 hours of word list checking?. I know this from cracking rar archives.

[mushroomHEADBANGERS]

Once you have the Handshake you can crack it on your Host OS which will give you a big speed boost. You can use the same programs used in this video to do it.

[SiddyV4]

how can i do this on windows 7 without a VM plz tell me soon! thkz

[mushroomHEADBANGERS]

Live-Disc.

Burn the Backtrack ISO to a DVD-R at x4-x8 Write-Speed and boot from it. No installation required :)

[SiddyV4]

thkz! and ur tutorials are quiet cool so keep up the work!

[mushroomHEADBANGERS]

Thank you :)

[Mikey1004]

P.S i meant that everytime i want to hack a wireless network i would have to put the wordlist onto backtrack from a pendrive which would be quite annoying. Is there no way of saving things on a live cd so that you can use them after youve shut down?

[mushroomHEADBANGERS]

If you are using a Live-Disc you should be able to access your Hard-Drive(s) on your computer. If not you can mount them to access them. You can also write to the discs from the Live-Disc. I often use Knoppix to fix boot issues with Windows on my home computer be replacing system files and so forth on my hard-drive.

You can try booting off a Flash-Drive instead. You should be able to write that way.

[Mikey1004]

hey do u need a wordlist or does it create 1 for u if u dont hav any on the pc, coz on a live cd it doesnt save anything so it would be quite annoying to put the wordlist onto the pc from a pendrive

[hellorbk]

I run backtrack from a live cd and when I try to run the aircrack command it says that it cant open the wordlist wordlist, wich is stored on my harddrive. Do u have any suggestions?

[mushroomHEADBANGERS]

You need to ensure you're referencing the absolute path to the wordlist since it's on another device. I believe you can check the device name with dmesg (Should be like hda or sda). You also may need to mount the drive as well. You can do this with the mount command.

[hellobitches1000]

ther is a lot of wordlist websites when i click the link help :|

[mushroomHEADBANGERS]

Lol, because it's a google search. If you can't deduce a valid search query from a Google Search then maybe you shouldn't be trying to hack wireless networks :P

[oscar9268]

what is the worlist website?

[mushroomHEADBANGERS]

Check the link in the Video Description :P

[eurohim]

There's always the 40GB WPA-Tables file.

[mushroomHEADBANGERS]

Are you referring to a Hash-Table? That's very different from a Wordlist :P

[419starter]

you can get a wpa handshake using windows and commview. i use a linksys wmp wireless network adapter. all typical. no bullshit.

[vasgeorge]

the wordlist site doesnt work

[mushroomHEADBANGERS]

Lol, yes it does...

I just verified it :P

[recess677]

y does it take so long

[recess677]

hi again just making the hash tables takin ages

i have been going 45mins and at key 301000

[mushroomHEADBANGERS]

Yes, this is normal. Like I said, it can take a very long time depending on the system specs. It best to do it over night. Some tables can take over a day. It's great to do with generic SSID's so you can quickly crack those SSID's but if it's a single unique SSID your better off trying to Brute it.

[kdogg69er]

hahha lol u dont reply much lol,,, if you help me and get the problem fixed, i will pay you in paypal

thanks man

[mushroomHEADBANGERS]

Sorry, I'm really busy and bogged down. I normally wait to reply to certain comments and PM's until I have enough to say what I'd like to say. Like right now, I am knocking out all the quick replies because my G/F will be here in less then 20 minutes to go Grocery Shopping. I usually tackle the longer, more in-depth responses for when I am at work during the night. I have your comment notification flagged for response. Be patient.

(You don't have to pay me, I don't do this for money).

[kdogg69er]

is that router good or should i use my other router which is a netgear

[mushroomHEADBANGERS]

Alright, back to you now...

I actually had to do some research on this one. From what all I gathered one possible issue may be that your network is broadcasting with a standard not compatible with your card. I researched your router model and it appears to only broadcast in 802.11b and 802.11g. I'd think your card would be compatible with this as well as the driver. What model chipset/interface do you use?

[kdogg69er]

atheros AR5007 802.11b/g WiFi Adapter

[mushroomHEADBANGERS]

Sounds like it should work just fine then. Can you check what your router is broadcasting in just to be sure it's within that range? Should be able to determine this within the Router Configuration page.

[kdogg69er]

@mushroomHEADBANGERS its saying 802.11b/g

[mushroomHEADBANGERS]

Then I am honestly not to sure. Have you tried other networks around you other then your own. That would at least isolate the issue to your network (AP) or your adapter. If it does occur with other networks too then perhaps you should try re-installing or updating the driver. Other then that I don't know what else to do tell you. Seems illogical to me. Being that it's your home network I would assume your close enough to the clients to send De-authentication Requests.

[mushroomHEADBANGERS]

Also, ensure your adapter it set to the same channel as the Access-Point. Work only on that channel as well.

[kdogg69er]

@mushroomHEADBANGERS ok i will try other networks around me,, and yea i am very close to clients on my network,, weird i can't to it, but thanks anyway,, i will try reintall/update my driver

[mushroomHEADBANGERS]

Best of luck. Let me know your results :)

[kdogg69er]

i get the handshake but i just gotta wait like 10 mins and keep trying that aireplay-ng over and over to get it working

[mushroomHEADBANGERS]

Ah, alright. I appreciate the up-date. You could try increasing the amount of De-Authentication requests sent to.

Well, I am glad you finally got it working! I was starting to get baffled :/

[ritherz]

Downloaded the vid... I'll be using it. wouldn't want something crazy to happen like your WEP vid lol.

[mushroomHEADBANGERS]

Haha, touche~

I was surprised how many people actually downloaded that video and even re-uploaded it on other streaming sites. It was very helpful in the end.

[kdogg69er]

do u no wat i am doin wrong,, cause i got no clue wat is wrong,, and i have tryed all forums and everything and on-one knows wat is wrong!

[mushroomHEADBANGERS]

Geesh, I love how I reply to someone and in less then 10 minutes you hop on to reply. Are you refreshing or monitoring my channel to see when I reply or am online?

Anyways....What kind of router do you have? It's possible your router could be preventing the Hand-Shake from being obtained.

[kdogg69er]

do u have msn so we can chat or something, cause i reakky neeed help

[kdogg69er]

u there?

[kdogg69er]

are u gonna reply?

[mushroomHEADBANGERS]

Yes...

[kdogg69er]

hello, i can get as far as trying to make the handshake,, i do everything u say,, but i have 3 stations on my network not one does that matter?

[mushroomHEADBANGERS]

Are you saying your testing it on your own network and your not seeing 3 stations connected to your network that you know should be there?

[kdogg69er]

no i get three stations, that are my own home laptops but the thing is, i do those two commands with airodump-ng and aireplay but i cant get the handshake,, and i tryed with another network around me and still can't get the handshake,, is there something wrong?

[mushroomHEADBANGERS]

What is the exact syntax of the command your entering. If three systems are on the network and you send multiple deauthentication attempts then you should be obtaining a handshake with no problem. Also, what type of router do you have?

[kdogg69er]

ok,, aireplay-ng -0 15 -a [MAC OF ROUTER] -c [MAC OF SYSTEM ON NETWORK] [ADAPTER]

but with my info of course lol

and i have Thomson TG782T

[tholany1986]

Well, almost correct. Rewriting. / Cowpatty-s [ESSID - Name of network] d [HASH FILE NAME]-r / root / (name of cap file). Then it was okay. Do you know of any Norwegian WordList :) ???????

[mushroomHEADBANGERS]

No, I don't :/ I am sure a quick Google search will find a few though :)

[john199619]

srry my copy exspired in my email

[mushroomHEADBANGERS]

No worries, I was sent another copy and a ton of users apparently had a copy.

[l1v1ngfr33]

mushroomHEADBANGERS,

I am running Backtrack 4 and I did not see the sample_wordlist anywhere on the distro. I may be missing the obvious...

[tholany1986]

what am I doing wrong? ./cowpatty -s rado74no -d rado_hash -r rado-01.cap cowpatty 4.3 - WPA-PSK dictionary attack.

cowpatty: Could not stat the pcap file. Check file path

[mushroomHEADBANGERS]

I think I may have made an edit error at that part. Since we are working in the cowpatty directory we need to specify the directory of the .cap file. If you watch until 5:10 you will see this demonstrated. So for you it will be /home/USERNAME/rado-01.cap

You may need to encapsulate that in Quotations. Please let me know if this corrects the issue for you so I can add an annotation to this video. I will be sure to give you credit for pointing out that edit error :)

Good-Luck!

[Physc0o]

did you get it working again?? because it works...

[mushroomHEADBANGERS]

Did I get what working? If your referring to the Part 2 being disabled, that was for the WEP Hacking tutorial, not WPA. Weird huh?

[mangoleeallan]

is windows ubunto good linux

[valcamas]

windows is good:P

and linux too>:p

[tholany1986]

I don`t find my worldlist in backtrack 3. can you plz tell me where to find it? Sample_wordlist is the only thing I can find. Need To Crack some wpa Bro :):)

[mushroomHEADBANGERS]

Sample_Wordlist is the default wordlist that comes with the distro. If you want another wordlist you will have to download it (I provided a link in the Video Description to find wordlists). If your using a Virtual Machine you can share one of your hosts local folders as I did and access the file in the virtual machine at /mnt/hgfs/. The option to share a folder is in the Virtual Machine settings in VMWare. On a Live-CD you'd need to save the wordlist on the CD before or use ethernet to DL

[VENTRUE05]

i'll try this tomarrow morning. i was hopeing it was the answer to what i asked the other day!! :-(

[mushroomHEADBANGERS]

Lol, that will still be coming. I figured it's best to cover most of the ways to get on a network prior to making a tutorial of things to do while on the network.

[VENTRUE05]

hope soon, i'm on pins and needles lolz!.

[SchmitySoup]

very nice ty i might need this soon

[ohmynicoley]

i love you more