In another console, fake auth: aireplay-ng -1 0 -e -a -h In another console, listen for ARP requests and reinject them. In practice: Quit monitoring mode: airmon-ng stop Lock your interface on the same channel as your target: airmon-ng start wlan0 Start capturing IVs: airodump-ng -c -bssid -w capture-file We now want the AP to generate many IVs. Sniffing enough traffic enables an attacker to crack the key. The design of WEP violates this assumption and repeats them quite often: IVs of standard WEP are 24 bits long (this gives a space of 2 24), the maximum length of an IP datagram sent over an Ethernet is 1500 octets (sic ), 802.11g’s maximum speed is 54Mbps, so by the pidgeon hole principle we will have a repetition after at most (2 24 + 1) * (1500 * 8) / (54*10 6) seconds, so roughly 1 hour. WEP uses keys. RC4 requires a random or pseudo-random (IVs). The great weakness of WEP is its use of static keys: they have to be set manually, and both the AP and every connected client have the same key to encrypt traffic. Optionally, change your: ifconfig down & macchanger -m 00:20:91:11:22:33 wlan0mon & ifconfig wlan0mon up Figure 2: changing your MAC address WEP – Wired Equivalent Privacy WEP was used from 1997 to 2003 until it was deprecated due to its weak security. Getting started Put your card in and scan for APs and connections with: Find out the interface name of your adapter using ifconfig and start it in monitor mode open a terminal and type the following commands: ifconfig airmon-ng start airodump-ng -wps airmon-ng might ask you to: airmon-ng check kill airodump-ng should yield an output like this: Figure 1: example of airodump-ng results It displays a list of detected access points (APs – the ones we will attempt to gain access to) and a list of connected clients, or stations (STA – phones, laptops, etc connected at this moment to an AP).

Run the VM and physically unplug/replug and you should be good to go. To make your adapter usable in VirtualBox, go to the settings and choose USB. Now add your device with the plus button on the right.

Before buying one, verify that it is compatible with Kali.

Optional (if you don’t want to use a VM and will install Kali straight on your computer): a Wireless USB adapter if you run Kali in a VM.

Be sure to install the if you run it in a VM.

A version of: a Linux distro designed for penetration testing that comes by default with all the tools we will be using.

It goes without saying that you should not use the techniques described below without the consent of the wireless owner.

Wps pin list txt