How to Hack/Audit WPA and WPA2 networks

[warrioryoyoyo]

Please explain like I'm 5 :( Where do I type all this in? I just want to get the key to the apartment next door's network because my internet itself is shit and the maintenance people are not helping.. I downloaded aircrack-ng and all it's fancy shmancy stuff, but only one that works is Aircrack-ng GUI and that needs some files and stuff. I have no idea where to type whatever you typed in. Using windows 7 64 bit

[indseytate718l]

I want this video on my iPhone 4 phone.

[DZbinski]

I like this video. You know what you're doing and yoou do it right.

[jessehaley615]

This video went viral on Gaborone

[Turambar1337]

I have a WLI-U2-G300N adapter. If i install backtrack am i able to crack passwords? Under windows my adapter cannot change do read mode... :s

[Treewizard12365]

@Turambar1337 if u look on backtracks webpage u can actually find a list of compatible adapters

[ThePeter74Peter]

LOL at 10:10 look at one of the keys 6th down.... "Aliensex" LOL!

[onlyfornintendo]

at 2:54 you say I need to specify a prefix but I can't see what you wrote plz help thanks!!!

[onlyfornintendo]

@onlyfornintendo also my diccionary is a 36GB wpa_tables.tar.lzma got it from a torrent made it by renderlab

[DHAtEnclaveForensics]

@onlyfornintendo Hey there!

The "Prefix" that I'm talking about is a prefix to the filename that will be stored.  I don't remember exactly, but I likely used airodump-ng -w SSIDName where SSIDName is the prefix. That's what I typically do.

That prefix will be used to create a bunch of files that airodump produces.

[chenxiaozhu123456789]

holy shit 101010th view

[NirmalBhetwalVEVO]

what if the passkey is not in the dictionary list????

is there any other way to crack wpa2 keys???

i'm using backtrack 4 final...

[hotshot2472010]

can you point me in the direction where you got the auto_deauth script? i'm trying to crack a wpa2 with no luck yet. thanks!

[DHAtEnclaveForensics]

Can't post a link in a comment. Google for "church wifi renderlab"

[DHAtEnclaveForensics]

I'd suggest you grab the ones from Renderlab via a Torrent.

[lilfatl]

can you tell me how to get a good wordlist? the one that came with backtrack4 cannot find the key of the network I am trying to get.thanks

[omanazzal]

broo idk wtf yuu sayyinn :P

[MrRahul123919]

i have 1 software to creck this , but this only crack wep key , and there are option in wpa and wpa2 as well , can u give me ur mail id , i will send this to u , u try this and pls let me know .

[anunakii]

Hi David, very concise video, I enjoyed it alot. Did you write the script you refer to in the video? Are you able to email me the script? If thats possible just contact me through u tube and I will pm you my email add. Thanks again. :)

[ivansegos]

I wish I was your son or something and you could teach me to use Terminal or Konsole in this case so naturally..

I'm kinda wandering how you learnt to do it, was it a friend who got you into Linux or?

[killersurprise86]

works on win7????

[stefiava]

@killersurprise86 Use linux or unix systems for the real things not windows.

[TheVukadin]

@stefiava *WARNING IGNORANT COMMENT STARTS HERE* LOL LINUX SUCKS ASS MAC AND WINDOWS FTW! *ATTENTION IGNORANT COMMENT STOPS HERE* Sorry had to say it...

[pochincol]

@TheVukadin sorry but for me the Ubuntu 11.10 versions ftw :)

[mtsacricky09]

Have a question??

Why does it collect data very slowly in my testing router (100 data an hour)?? Anyway to speed up process??

In my other router collects data very fast! successful hack?? Why is that?

[anunakii]

@mtsacricky09 its because there would be more network traffic on ur everyday router as opposed to the test one. ;) The more they use it, the faster it falls...

[maicon9]

@mtsacricky09 most likely because no one is using that connection there for theres no traffic being generated.you could have another computer connect to the router you cracking then go on here youtube and just open up a video or movie whatever you want it dont matter and it should start to go up faster.or you can use aireplay-ng to generate traffic for you. YOU NEED DATA TO KEEP FLOWING. you have none thats why its so slow

[insertnamehere568]

will it make a difference if i use backtrack 5?

[themainstreamstereo]

QUESTION!!! my webcam wont work. my speakers dont work. and i cant play my cds. what do i do???

[NeutralNegotiator]

Dude, thank god you are not my neighbor....!!!

[theoriginalfatdonkey]

Learn real auditing on my channel. youtubecom/theoriginalfatdonke­y or search thesupergeeks all one word.

[DUBtheNewEra]

This dude knows his shit...stop reading comments and watch it. lol

[pacojavier81]

Thx.

[xXCyrax002Xx]

I have been working at cracking a WPA key and I have been running a dictionary attack on it with aircrack-ng, I went through hours worth of cracking and after 105 Million keys still nothing, any tips?

[DHAtEnclaveForensics]

@xXCyrax002Xx Sounds to me like they picked a good passphrase. Don't forget that you can pick long passphrases. My recommendation to people who cannot run enterprise mode is to use a 20+ character passphrase and to change the SSID to something that is unlikely to be in someone's precomputed list. If you do this, the computing resources are prohibitively high and precomputation attacks are unlikely.

[xXCyrax002Xx]

@DHAtEnclaveForensics Alright, thanks for the quick response. Great Vid, Keep it up.

[BigThangsPoppinMayne]

@DHAtEnclaveForensics hi i was wondering how to use a list? because i have a wpalist.txt file and idk wat to do with it

[TheSunog]

very cmmands

[XxTHEPORTAxX]

man HEX IF THE KEY IS GOOD AS LONG BECAUSE HE SEEN THE LOOK DICTIONARIES SAY ONLY for 2 3 or 4 digit HEX AND ARE LONGER PLEASE AYUDAMEEE

[kpwlek]

I wish to have your Rainbow dir :)

[sniperthirteen]

is the commands work with BT3?

[Teiko21]

If I'm using VMware, how do I get my VMware to recognize my wireless card? Please help!!!

[nfhslugger]

@Teiko21 VMware only can recognize USB wireless cards

[clanbozz]

@nfhslugger yep thats why vmware sucks major nigger dick,, STOP MAKING VMWARE TUTORILA SYOU DUMB FUCKING KIDS,, WE NEED A BOOTABLE BT4 DISC  WPA HACK VID !!! worthless vmware vids,!!!!!!

[JimmyWOWOlsson]

@clanbozz or you can pick up a usb wireless card that handles 20mbit/s up and 10 mbit/s down for 5$?

[salamat306]

PLz help me my wireless card sitecom not work on backtrack 4 plzzzzz help meee

[lastat06]

the reason he called his program cowpatty he thought his code was shit not to make fun of wpa

[saad6633]

what's the name of that program ?

[iamtallpoppy]

@rebornac3 I do... Google "passphrase"

[DHAtEnclaveForensics]

@XtremTutorials I would expect that someone watching this video at least has the basic knowledge necessary to open a terminal window!!

[kejuanthompson]

i cant hand shake help me i done it many time is it becuase am not close

[cyberjackcyberjack]

@kejuanthompson try lowering your power level "iwconfig wlan0 rate 2M"

[SiamJihad]

i think it is not able to crack password like wep right??

[rougeson]

why mine takes too long to capture the station? i have linksys

[DHAtEnclaveForensics]

That's a nice thought. The trouble is that you cross a threshold of diminishing returns. As soon as you are using more characters than are actually produced by the hashing algorithm you are forced to produce hash collisions. In other words, once you get to a certain size there are guaranteed to be other (shorter) keys that will match your really long key.

Sorry!

[VisualBasicProgger]

@DHAtEnclaveForensics hi i have a question : in minute 5:10 you write "| /usr/sbin/auto-deauth" . was is it because in my folder there isnt it so it shows an error . please answer !

PS: loook at the time ;)

grez from germany ;)

[cyberjackcyberjack]

@VisualBasicProgger the "/usr/sbin/auto-deauth" was most prob a custom script, as bt4 dont have such an option. So you will have to do the standard "aireplay-ng -0 10 -a xx:xx:xx:xx:xx:xx -c xx:xx:xx:xx:xx:xx wlan0

[VisualBasicProgger]

@cyberjackcyberjack ok thx ;)

greez from germany :)

[QuickFox2]

It doesn't matter if you think PSK is insecure. It may be breakable, but a 63 character alphanumeric with symbols would take in excess of 10,000 years to break, PSK can be very effective if you use it properly.

[RebornAc3]

@QuickFox2 Who uses 63 character long passphrase?

[QuickFox2]

@RebornAc3 My fathers home business network uses 63 character WPA2-PSK. Basically impossible to break and audit.

[MikeCK1969]

@RebornAc3 I do! :P

[QuickFox2]

@RebornAc3 My Father's home business network, because he doesn't want to set up an 802.1x wireless access point for only a few computers, so PSK will be just as effective.

[Toxiccity90]

i have a question for you? have you ever used pyrit? and does it make a huge difference compared to using cowpatty alone? i mean it says it uses all cores and the gpu to create the hash file lists. I have a 1 million word list and all 1000 ssids all ready generaterated. i figure this will make a big difference too.

[NeytiriOwns]

What rainbow table did you use for this? The biggest one is 35Gb but i cant download that one. And i know just the alpha numeric one won't do. So what one did you use?

[419starter]

great tutorial! one question, what model network adapter are you using and is it dependable?

[DHAtEnclaveForensics]

In this example I'm using the mini-PCI atheros card that comes with the Asus EEE PCs. I've modified it a bit to add a external antenna connector to the chassis of the netbook since the card maxes out at 37 milliwatts. While the card is extremely reliable it is a bit on the low-power end. You can get similar Atheros cards with up to about 200 mW of power but I haven't looked around to find one that will fit into the tiny space that's available in this netbook.

[watchit25]

you are incredible. your explanation is superior to the rest. You also speak from a mindset that is derived from a real world perspective. I will stay tuned to to any other videos you have to offer.. Thank you for your time and effort

[DHAtEnclaveForensics]

:) I think we're on the same page. Crypto is really important but when it is likely that your adversaries can see the encrypted data you really need to step it up. Weak keys will continue to be a huge problem until we find a better way to secure things. :)

[DHAtEnclaveForensics]

Well, frankly, no. The problem is that there are standards (PCI/DSS for instance) that permit companies to use WPA with PSK with period key changes.

Brute forcing a PSK in 3 months is feasible. Worse, if the WPA is being used to protect credit card information it's definitely worthwhile. Once the key is broken I can decrypt captured traffic where that key was in use. Given a good position to sniff and time I can compromise every card used where my antenna can see the WPA or WPA2 with PSK.

[CyberDefense]

The blog entry has info on how to save $1,100 on an upcoming SANS class! Great deal!

[DHAtEnclaveForensics]

That discount code is only good through Friday January 29. I'll be teaching the class that the code is good for, so if you decide to sign up please drop me a line!