Aircrack-ng

Update on 12 Aug 2006 on SUSE10.1

Install Madwifi Driver

This installation will install madwifi driver with patch aircrack.

Download driver and patch. First, download the latest patch, and then download the corresponding version of driver.

# get http://patches.aircrack-ng.org/madwifi-ng-r1679.patch
# get http://snapshots.madwifi.org/madwifi-ng/madwifi-ng-r1679-20060707.tar.gz

Install

# tar zxvf madwifi-ng-r1679-20060707.tar.gz
# cd madwifi-ng-r1679-20060707/
# patch -Np1 -i ../madwifi-ng-r1679.patch
# make
# make install
# mod_probe ath_pci

Create a new interface from wifi0. This might be required only for madwifi-ng driver. This creates ath1 monitor mode.

# wlanconfig ath1 create wlandev wifi0 wlanmode monitor

Install aircrack-ng

Download aircrack-ng from http://www.aircrack-ng.org/

Compile and install

# tar zxvf aircrack-ng-0.6.tar.gz
# cd aircrack-ng-0.6/
# make
# make install
# modprobe ath_pci

Find wireless AP

# iwlist ath0 scan
ath0      Scan completed :
          Cell 01 - Address: 00:03:2F:23:96:68
                    ESSID:"hoge1"
                    Mode:Master
                    Frequency:2.412 GHz (Channel 1)
                    Quality=56/94  Signal level=-39 dBm  Noise level=-95 dBm
                    Encryption key:on
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 6 Mb/s
                              12 Mb/s; 24 Mb/s; 36 Mb/s; 9 Mb/s; 18 Mb/s
                              48 Mb/s; 54 Mb/s
                    Extra:bcn_int=100
                    IE: WPA Version 1
                        Group Cipher : TKIP
                        Pairwise Ciphers (1) : TKIP
                        Authentication Suites (1) : PSK
                    Extra:ath_ie=dd0900037f0101000eff7f
          Cell 02 - Address: 00:03:2F:23:92:64
                    ESSID:"hoge2"
                    Mode:Master
                    Frequency:2.437 GHz (Channel 6)
                    Quality=12/94  Signal level=-83 dBm  Noise level=-95 dBm
                    Encryption key:on
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 6 Mb/s
                              12 Mb/s; 24 Mb/s; 36 Mb/s; 9 Mb/s; 18 Mb/s
                              48 Mb/s; 54 Mb/s
                    Extra:bcn_int=100
                    IE: WPA Version 1
                        Group Cipher : TKIP
                        Pairwise Ciphers (1) : TKIP
                        Authentication Suites (1) : PSK
                    Extra:ath_ie=dd0900037f01010017ff7f

Create a new interface from wifi0. This might be required only for madwifi-ng driver. This creates ath1 monitor mode.

# wlanconfig ath1 create wlandev wifi0 wlanmode monitor

Use aurodump-ng to look the network

# airodump-ng ath1

 CH 13 ][ Elapsed: 28 s ][ 2006-08-12 15:32

 BSSID              PWR  Beacons   # Data  CH  MB  ENC   ESSID

 00:03:2F:23:96:68  150       65       72   1  54. WPA   hoge1
 00:03:2F:23:92:64  101        4        0   6  54. WEP?  hoge2

 BSSID              STATION            PWR  Packets  Probes

 00:03:2F:23:96:68  00:0F:A3:1C:C4:31  140        7
 00:03:2F:23:96:68  00:0F:A3:1C:C4:3E  134        5
 00:03:2F:23:96:68  00:0F:A3:1C:C4:48  132       10  hoge1
 00:03:2F:23:96:68  00:0F:A3:11:02:C7  120       11  hoge1

This result shows some access points and clients associated with APs

Crack WEP

...Soon

WPA Handshare capture with an Athros

Deauthentication attack

# aireplay-ng -a 0:03:2F:23:96:68 -c 00:03:2F:23:96:68 ath1 --deauth 1

... Soon

Back