Cracking "Hacking" WEP with a Hidden SSID Ubuntu 9.04

A short demonstration on how I've "hacked", WIFI before in the past.

In this video I "hacked" a 64bit encrypted wireless network, after de-authenticating client to get the ESSID, then using aireplay-ng attacks 0 and 1 to generate network traffic and attack 3 to continue to generate traffic.

I will be uploading more videos, demonstrating other techniques in the new future for both WEP and WPA/2

Category:

Science & Technology

Tags:

• wireless
• network
• cracking
• hacking
• ubuntu
• 9.04
• airodump-ng
• aircrack-ng
• aireplay-ng
• wep
• WEP
• WPA
• wpa
• WPA2
• wpa2
• 64bit
• 128bit
• hidden
• ssid
• bssid
• essid

[leonelex2009]

failed. Next try with 5000 ivs. help place

[ubuntusoilder]

Leave every thing running, when you've collected enough ivs aircrack-ng will try again automatically .

[4santa4]

when I write "sudo airmon-ng start rausb0" It comes up 5 processes that could cause trouble.

PID Name

2863 NetworkManeger

2881 wpa_supplicant

2887 avahi-deamon

2888 avahi-deamon

6154 dhclient

The dhclient is causing trouble. how do I kill it??

(Yes, I have only had ubuntu for a month)

[ubuntusoilder]

sudo killall dhclient

[nowymercedes]

it is not working for me - probably, because I don't know how to proced step by step from begining... But thank you for readable text on the screen. There are so many unreadable videos on youtube...

[ubuntusoilder]

Try reading the aircrack-ng manual, you just need to give it time, this stuff doesn't come to you straight away.

[musaddiqali1]

I am using Ubuntu 11.04 (Natty). Can you please tell me anything on how to crack a hidden or unknown SSID for an Open (unsecured) network.

[porngmanith]

what this program named?



[Kingpee03]

There is an E-book called Wi-foo you can learn from there

[lastat06]

there is a faster way use mdk3

[TheSkullBreakers]

@ubuntusoilder @ubuntusoilder Found 1 processes that could cause trouble. If airodump-ng, aireplay-ng or airtun-ng stops working after a short period of time, you may want to kill (some of) them! PID Name 5753 dhclient Interface Chipset Driver wlan0 RTL8187 rtl8187 - [phy0] mon0 RTL8187  rtl8187 - [phy0] (monitor mode enabled on mon3) mon1 RTL8187 rtl8187 - [phy0] mon2 RTL8187 rtl8187 - [phy0]

[TheSkullBreakers]

@ubuntusoilder root@bt:~# sudo killall pid 5753 dhclient pid: no process killed 5753: no process killed root@bt:~# sudo killall pid 5753 pid: no process killed 5753: no process killed root@bt:~# sudo killall pid dhclient pid: no process killed root@bt:~# sudo killall dhclient root@bt:~# sudo killall 5753 5753: no process killed root@bt:~# airmon-ng start mon0

[ctopslegaltube]

Yea I use a trial and error to find the client that's not broadcasting their SSID (nobody does it with simple WEP), I tried Ubuntu before, and I'm giving it another shot but Ubuntu v10.10 can only get the OLD version of aircrack-ng, the newest version aircrack-ng-1.1 wont install in Ubuntu v10.10 damm linux file permission commands don't work the same on Ubuntu, my goal is to get a better injection rate than with the VMware image of aircrack-ng-1.1 which is very laggy.

[mendeth]

man i says key found 02:05:8:06:09 .. what should i do with tham i mean in your example....that the pass or what??

[thereaper489]

so how do you actually use the key? is the key in HEX? would there be a way to get the pass-phrase? like the actual set password and not just the key?

[Fortyn9n3]

when I type 'sudo airodump-ng --ivs -c 11 --write hack wlan0' in terminal on BT4 it says "invalid output format IVS and PCAP format can not be used together.

ideas?