Chitsogozo cha Aircrack-ng pa Linux kwa Oyamba

Moni nonse. Poyembekezera kuyamba kwa maphunzirowo "Kali Linux Workshop" Takukonzerani kumasulira kwa nkhani yosangalatsa kwa inu.

Chitsogozo cha Aircrack-ng pa Linux kwa Oyamba

Maphunziro amasiku ano adzakuyendetsani pazoyambira zoyambira ndi phukusi ndege-ng. Inde, n'zosatheka kupereka zidziwitso zonse zofunika ndikuphimba zochitika zonse. Choncho khalani okonzeka kuchita homuweki yanu ndi kufufuza nokha. Yambani forum ndi wiki Pali maphunziro ambiri owonjezera ndi zina zothandiza.

Ngakhale sichikuphimba masitepe onse kuyambira koyambira mpaka kumapeto, kalozera Easy WEP Crack amawulula mwatsatanetsatane ntchito ndi ndege-ng.

Kukhazikitsa zida, kukhazikitsa Aircrack-ng

Gawo loyamba pakuonetsetsa ntchito yoyenera ndege-ng pa dongosolo lanu la Linux ndikuyika ndi kukhazikitsa dalaivala yoyenera pa khadi lanu la intaneti. Makhadi ambiri amagwira ntchito ndi madalaivala angapo, ena omwe amapereka magwiridwe antchito ofunikira kuti agwiritse ntchito ndege-ng, ena samatero.

Ndikuganiza kuti zimapita popanda kunena kuti mukufuna khadi yamaneti yogwirizana ndi phukusi ndege-ng. Ndiko kuti, zida zomwe zimagwirizana kwathunthu ndipo zimatha kugwiritsa ntchito jakisoni wa paketi. Pogwiritsa ntchito khadi yolumikizana ndi netiweki, mutha kuthyolako malo opanda zingwe pasanathe ola limodzi.

Kuti mudziwe kuti khadi lanu ndi liti, onani tsambalo zida zogwirizana. Werengani Maphunziro: Kodi Khadi Langa Lopanda Ziwaya Limagwirizana?, ngati simukudziwa momwe mungagwirire tebulo. Komabe, izi sizingakulepheretseni kuwerenga bukuli, zomwe zingakuthandizeni kuphunzira zatsopano ndikuonetsetsa kuti muli ndi khadi lanu.

Choyamba, muyenera kudziwa zomwe chipset khadi lanu la netiweki limagwiritsa ntchito ndi driver yemwe mungafunikire. Muyenera kudziwa izi pogwiritsa ntchito zomwe zili m'ndime pamwambapa. Mu mutu madalaivala mupeza madalaivala omwe mukufuna.

Kuyika aircrack-ng

Mtundu waposachedwa wa aircrack-ng utha kupezeka kuchokera dawunilodi kuchokera patsamba lalikulu, kapena mutha kugwiritsa ntchito kugawa kuyesa kulowa monga Kali Linux kapena Pentoo, yomwe ili ndi mtundu waposachedwa ndege-ng.

Kuyika aircrack-ng onani zolembedwa patsamba unsembe.

IEEE 802.11 Zoyambira

Chabwino, popeza tonse takhazikika, ndi nthawi yoti tiyime tisanayambe ndikuphunzirapo kanthu kapena ziwiri za momwe maukonde opanda zingwe amagwirira ntchito.

Gawo lotsatira ndilofunika kumvetsetsa kuti mutha kulingalira ngati chinachake sichikuyenda monga momwe mukuyembekezera. Kumvetsetsa momwe zonsezi zimagwirira ntchito kudzakuthandizani kupeza vuto, kapena kufotokoza bwino kuti wina akuthandizeni. Zinthu zimakhala zovuta apa ndipo mungafune kudumpha gawo ili. Komabe, kubera maukonde opanda zingwe kumafuna chidziwitso pang'ono, kotero kubera sikungongolemba lamulo limodzi ndikulola aircrack kukuchitirani.

Momwe mungapezere maukonde opanda zingwe

Gawo ili ndichidule chachidule cha maukonde oyendetsedwa omwe amagwira ntchito ndi ma access point (AP). Malo aliwonse ofikira amatumiza pafupifupi mafelemu 10 otchedwa ma beacon frame pa sekondi iliyonse. Maphukusiwa ali ndi izi:

  • Dzina la intaneti (ESSID);
  • Kaya kubisa kumagwiritsidwa ntchito (ndi kubisa kotani komwe kumagwiritsidwa ntchito, koma dziwani kuti chidziwitsochi sichingakhale chowona chifukwa chakuti malo ofikira amafotokoza);
  • Ndi mitengo iti yotumizira deta yomwe imathandizidwa (mu MBit);
  • Kodi netiweki ili pa tchanelo chotani?

Ndi chidziwitso ichi chomwe chikuwonetsedwa mu chida chomwe chimalumikizana mwachindunji ndi netiweki iyi. Imawonekera mukalola khadi kuti ijambule ma netiweki pogwiritsa ntchito iwlist <interface> scan ndi pamene muchita airodump-ng.

Malo aliwonse olowera ali ndi adilesi yapadera ya MAC (48 bits, 6 hex pairs). It looks something like this: 00:01:23:4A:BC:DE. Chida chilichonse cha netiweki chimakhala ndi adilesi yotere, ndipo zida zama netiweki zimalumikizana wina ndi mnzake pogwiritsa ntchito iwo. Kotero ndi mtundu wa dzina lapadera. Maadiresi a MAC ndi apadera ndipo palibe zida ziwiri zomwe zili ndi adilesi ya MAC yofanana.

Kulumikiza ndi netiweki

Pali njira zingapo zolumikizira netiweki yopanda zingwe. Nthawi zambiri, Open System Authentication imagwiritsidwa ntchito. (Ngati mukufuna: Ngati mukufuna kudziwa zambiri za kutsimikizika, werengani izi.)

Tsegulani Kutsimikizira Kwadongosolo:

  1. Imapempha kutsimikizika kwa malo ofikira;
  2. Malo olowera akuyankha: Chabwino, ndinu ovomerezeka.
  3. Imapempha mgwirizano wa malo ofikira;
  4. Malo olowera akuyankha: Chabwino, mwalumikizidwa.

Ili ndiye vuto losavuta, koma mavuto amadza ngati mulibe ufulu wopeza chifukwa:

  • Imagwiritsa ntchito WPA/WPA2 ndipo mukufuna kutsimikizika kwa APOL. Malo olowera adzakana mu sitepe yachiwiri.
  • Malo olowera ali ndi mndandanda wamakasitomala ololedwa (maadiresi a MAC) ndipo sangalole kuti wina aliyense alumikizane. Izi zimatchedwa kusefa kwa MAC.
  • Malo olowera amagwiritsa ntchito Shared Key Authentication, kutanthauza kuti muyenera kupereka kiyi yolondola ya WEP kuti mulumikizane. (Onani gawo "Kodi mungatani kuti mutsimikizire makiyi abodza?" kuti mudziwe zambiri)

Kununkhiza kosavuta ndi kusaka

Kupezeka kwa netiweki

Chinthu choyamba kuchita ndikupeza chandamale chomwe chingachitike. Phukusi la aircrack-ng lili ndi izi airodump-ng, koma mutha kugwiritsa ntchito mapulogalamu ena monga, mwachitsanzo, Kismet.

Musanafufuze ma netiweki, muyenera kusintha khadi lanu kuzomwe zimatchedwa "Monitoring mode". Monitor mode ndi njira yapadera yomwe imalola kompyuta yanu kumvera mapaketi a netiweki. Njirayi imalolanso jakisoni. Tikambirana za jakisoni nthawi ina.

Kuti muyike netiweki khadi munjira yowunikira, gwiritsani ntchito airmon-ng:

airmon-ng start wlan0

Mwanjira iyi mudzapanga mawonekedwe ena ndikuwonjezerapo "mwani". Chifukwa chake wlan0 adzakhala wlan0mo. Kuti muwone ngati khadi ya netiweki ili munjira yowunikira, thamangani iwconfig ndipo mudzionere nokha.

Ndiye, thamangani airodump-ng kufufuza maukonde:

airodump-ng wlan0mon

ngati airodump-ng simungathe kulumikiza chipangizo cha WLAN, mudzawona chonchi:

Chitsogozo cha Aircrack-ng pa Linux kwa Oyamba

airodump-ng imalumpha kuchokera ku tchanelo kupita ku tchanelo ndikuwonetsa malo onse olowera komwe imalandila ma beacons. Makanema 1 mpaka 14 amagwiritsidwa ntchito pamiyezo ya 802.11 b ndi g (ku US kokha 1 mpaka 11 amaloledwa; ku Europe 1 mpaka 13 kupatulapo ena; ku Japan 1 mpaka 14). 802.11a imagwira ntchito mu bandi ya 5 GHz, ndipo kupezeka kwake kumasiyana kwambiri m'mayiko osiyanasiyana kusiyana ndi gulu la 2,4 GHz. Kawirikawiri, njira zodziwika bwino zimayambira ku 36 (32 m'mayiko ena) mpaka 64 (68 m'mayiko ena) komanso kuchokera ku 96 mpaka 165. Mukhoza kupeza zambiri zokhudza kupezeka kwa njira pa Wikipedia. Ku Linux, zimasamalira kulola / kukana kufalitsa pamakina ena adziko lanu Central Regulatory Domain Agent; komabe, iyenera kukhazikitsidwa moyenera.

Njira yamakono ikuwonetsedwa kumtunda kumanzere.
Patapita kanthawi padzakhala malo olowera ndipo (mwachiyembekezo) makasitomala ena ogwirizana nawo.
Tsamba lapamwamba likuwonetsa malo omwe apezeka:

bssid
mac adilesi ya malo ofikira

pw
khalidwe la chizindikiro mukasankha njira

pw
mphamvu ya chizindikiro. madalaivala ena samanena.

ma beacon
chiwerengero cha ma beacons analandira. ngati mulibe chizindikiro cha mphamvu ya siginecha, mutha kuyeza mu ma beacons: ma beacons ochulukirapo, chizindikirocho chimakhala bwino.

deta
chiwerengero cha mafelemu a data omwe alandilidwa

ch
njira yomwe malo olowera amagwirirapo ntchito

mb
liwiro kapena njira yofikira. 11 ndi yoyera 802.11b, 54 ndi yoyera 802.11g. makhalidwe pakati pa awiriwa ndi osakaniza.

pa
encryption: opn: palibe encryption, wep: wep encryption, wpa: wpa kapena wpa2, wep?: wep kapena wpa (osamveka bwino)

zamanyazi
dzina la intaneti, nthawi zina zobisika

Pansi pa block ikuwonetsa makasitomala omwe apezeka:

bssid
mac adilesi yomwe kasitomala amalumikizidwa ndi malo olowera awa

siteshoni
mac adilesi ya kasitomala wokha

pw
mphamvu ya chizindikiro. madalaivala ena samanena.

mapaketi
chiwerengero cha mafelemu a data omwe alandilidwa

kufufuza
mayina a netiweki (ma essids) omwe kasitomalayu adayesa kale

Tsopano muyenera kuyang'anira chandamale maukonde. Osachepera kasitomala m'modzi ayenera kulumikizidwa nazo, popeza kubera maukonde opanda makasitomala ndi nkhani yovuta kwambiri (onani gawo Momwe mungaswekere WEP popanda makasitomala). Iyenera kugwiritsa ntchito kubisa kwa WEP ndikukhala ndi chizindikiro chabwino. Mutha kusintha malo a mlongoti kuti muwongolere kulandila kwazizindikiro. Nthawi zina ma centimita angapo amatha kukhala otsimikiza kulimba kwa chizindikiro.

Mu chitsanzo pamwambapa pali network 00:01:02:03:04:05. Zinapezeka kuti ndizokhazo zomwe zingatheke, popeza ndizomwe zimagwirizanitsidwa ndi kasitomala. Ilinso ndi chizindikiro chabwino, ndikupangitsa kuti ikhale chandamale choyenera kuchita.

Kununkhiza Ma Vector Oyambitsa

Chifukwa chodumphira pamalumikizidwe, simudzalanda mapaketi onse kuchokera pa netiweki yomwe mukufuna. Chifukwa chake, tikufuna kumvera panjira imodzi yokha ndikuwonjezeranso zolemba zonse ku diski, kuti titha kuzigwiritsa ntchito pakubera:

airodump-ng -c 11 --bssid 00:01:02:03:04:05 -w dump wlan0mon

Kugwiritsa ntchito parameter -с mumasankha njira ndi parameter pambuyo pake -w ndi chiyambi cha zotayika za netiweki zolembedwa ku disk. Mbendera –bssid pamodzi ndi adilesi ya MAC ya malo ofikira, amaletsa mapaketi omwe amalandilidwa kumalo amodzi olowera. Mbendera –bssid kupezeka m'mabaibulo atsopano airodump-ng.

Musanaphwanye WEP, mudzafunika pakati pa 40 ndi 000 osiyana Initialization Vectors (IV). Paketi iliyonse ya data imakhala ndi vekitala yoyambira. Atha kugwiritsidwanso ntchito, kotero kuchuluka kwa ma vector nthawi zambiri kumakhala kotsika pang'ono poyerekeza ndi mapaketi omwe agwidwa.
Chifukwa chake muyenera kudikirira kuti mugwire mapaketi a data a 40k mpaka 85k (ndi IV). Ngati maukonde sali otanganidwa, izi zitenga nthawi yayitali kwambiri. Mutha kufulumizitsa njirayi pogwiritsa ntchito kuwukira (kapena kuwukiranso). Tikambirana za iwo mu gawo lotsatira.

Kuswa

Ngati muli ndi ma IV okwanira omwe amasungidwa mufayilo imodzi kapena zingapo, mutha kuyesa kuphwanya kiyi ya WEP:

aircrack-ng -b 00:01:02:03:04:05 dump-01.cap

Adilesi ya MAC pambuyo pa mbendera -b ndi BSSID ya chandamale, ndi dump-01.cap ndi fayilo yomwe ili ndi mapaketi olandidwa. Mutha kugwiritsa ntchito mafayilo angapo, ingowonjezerani mayina onse kulamulo kapena gwiritsani ntchito khadi yakutchire, mwachitsanzo dump*.cap.

Zambiri za magawo ndege-ng, zotulutsa ndi ntchito zomwe mungapeze kuchokera utsogoleri.

Chiwerengero cha ma vector oyambira omwe amafunikira kuti aphwanye makiyi alibe malire. Izi zimachitika chifukwa ma vector ena ndi ofooka ndipo amataya chidziwitso chofunikira kuposa ena. Nthawi zambiri ma vector oyambitsawa amasakanizidwa ndi amphamvu. Chifukwa chake ngati muli ndi mwayi, mutha kuthyola kiyi ndi ma IV 20 okha. Komabe, nthawi zambiri izi sizokwanira, ndege-ng ikhoza kuthamanga kwa nthawi yayitali (sabata kapena kupitilira apo ngati cholakwikacho chili chachikulu) ndikukuwuzani kuti fungulo silingathe kusweka. Mukakhala ndi ma vector oyambilira, kuthyolako kumatha kuchitika mwachangu ndipo nthawi zambiri kumatero mphindi zochepa kapena masekondi. Zochitika zikuwonetsa kuti ma vector 40 - 000 ndiokwanira kubera.

Pali malo ofikira otsogola omwe amagwiritsa ntchito ma aligorivimu apadera kusefa ma IV ofooka. Zotsatira zake, simudzatha kupeza ma vectors opitilira N kuchokera pamalo ofikira, kapena mudzafunika mamiliyoni a ma vector (mwachitsanzo, 5-7 miliyoni) kuti muphwanye kiyi. Mutha werengani pa forumchochita zikatere.

Kuwukira mwachangu
Zida zambiri sizigwirizana ndi jakisoni, osachepera popanda madalaivala okhala ndi zigamba. Ena amangothandizira kuukira kwina. Lankhulani ndi tsamba logwirizana ndipo yang'anani pansi kusewera. Nthawi zina tebulo ili silipereka zambiri zaposachedwa, ndiye ngati muwona mawuwo "Ayi" moyang'anizana ndi dalaivala wanu, musakhumudwe, koma yang'anani tsamba loyambira la dalaivala, mndandanda wamakalata a driver forum yathu. Ngati munatha kubwereza bwino ndi dalaivala yemwe sanaphatikizidwe pamndandanda wothandizidwa, omasuka kunena zosintha patsamba lofananira ndikuwonjezera ulalo ku kalozera woyambira mwachangu. (Kuti muchite izi, muyenera kupempha akaunti ya wiki pa IRC.)

Choyamba muyenera kuonetsetsa kuti jekeseni wa paketi imagwira ntchito ndi khadi lanu la intaneti ndi dalaivala. Njira yosavuta yowunika ndikuyesa kuyesa jekeseni. Onetsetsani kuti mwapambana mayesowa musanapitirize. Khadi lanu liyenera kubaya jekeseni kuti mumalize zotsatirazi.

Mudzafunika BSSID (MAC adilesi ya malo olowera) ndi ESSID (dzina la netiweki) ya malo ofikira omwe samasefa ndi ma adilesi a MAC (monga anu) ndipo ali pamndandanda womwe ulipo.

Yesani kulumikiza malo olowera pogwiritsa ntchito wochita-ng:

aireplay-ng --fakeauth 0 -e "your network ESSID" -a 00:01:02:03:04:05 wlan0mon

Kutanthauza pambuyo -Π° idzakhala BSSID ya malo anu olowera.
Jakisoniyo adagwira ntchito ngati muwona chonga ichi:

12:14:06  Sending Authentication Request
12:14:06  Authentication successful
12:14:06  Sending Association Request
12:14:07  Association successful :-)

Ngati sichoncho:

  • Onaninso kulondola kwa ESSID ndi BSSID;
  • Onetsetsani kuti kusefa adilesi ya MAC kwayimitsidwa pamalo anu olowera;
  • Yesani zomwezo pa malo ena ofikira;
  • Onetsetsani kuti dalaivala wanu wakonzedwa bwino ndikuthandizidwa;
  • M'malo mwa "0" yesani "6000 -o 1 -q 10".

Kubwereza kwa ARP

Tsopano popeza tikudziwa kuti jekeseni wa paketi imagwira ntchito, titha kuchita china chake chomwe chingafulumizitse kuletsa ma IV: jekeseni. Zopempha za ARP.

Lingaliro lalikulu

Mwachidule, ARP imagwira ntchito pofalitsa pempho ku adilesi ya IP, ndipo chipangizo chokhala ndi adilesi ya IP chimatumizanso yankho. Popeza WEP siyimateteza kubwereza, mutha kununkhiza paketi ndikuitumiza mobwerezabwereza bola ngati ili yovomerezeka. Chifukwa chake, mukungofunika kutsata ndikubwereza pempho la ARP lomwe latumizidwa kumalo ofikira kuti mupange magalimoto (ndikupeza ma IV).

Waulesi njira

Choyamba tsegulani zenera ndi airodump-ng, zomwe zidzanunkhiza magalimoto (onani pamwambapa). kusewera-ng ΠΈ airodump-ng akhoza kugwira ntchito nthawi imodzi. Dikirani kuti kasitomala awonekere pa netiweki yomwe mukufuna ndikuyamba kuwukira:

aireplay-ng --arpreplay -b 00:01:02:03:04:05 -h 00:04:05:06:07:08 wlan0mon

-b amalozera ku chandamale cha BSSID, -h ku adilesi ya MAC ya kasitomala wolumikizidwa.

Tsopano muyenera kudikirira kuti paketi ya ARP ifike. Nthawi zambiri muyenera kudikirira mphindi zingapo (kapena werengani nkhaniyi mopitilira).
Ngati muli ndi mwayi, muwona zonga izi:

Saving ARP requests in replay_arp-0627-121526.cap
You must also start airodump to capture replies.
Read 2493 packets (got 1 ARP requests), sent 1305 packets...

Ngati mukufuna kusiya kusewera, simuyenera kudikirira kuti paketi yotsatira ya ARP ifike, mutha kugwiritsa ntchito mapaketi omwe adagwidwa kale pogwiritsa ntchito chizindikiro. -r <filename>.
Mukamagwiritsa ntchito jakisoni wa ARP, mutha kugwiritsa ntchito njira ya PTW kuti muphwanye kiyi ya WEP. Zimachepetsa kwambiri kuchuluka kwa maphukusi ofunikira, komanso nthawi yosokoneza. Muyenera kujambula paketi yonse ndi airodump-ng, ndiko kuti, musagwiritse ntchito njirayo β€œ--ivs” popereka lamulo. Za ndege-ng gwiritsani ntchito β€œaircrack -z <file name>”. (PTW ndiye mtundu wosasinthika)

Ngati chiwerengero cha mapaketi deta analandira airodump-ng imasiya kuwonjezeka, mungafunike kuchepetsa liwiro losewera. Chitani izi ndi parameter -x <packets per second>. Nthawi zambiri ndimayamba pa 50 ndikugwira ntchito mpaka nditayambanso kulandira mapaketi mosalekeza. Kusintha malo a mlongoti kungakuthandizeninso.

Mwamakani njira

Makina ambiri ogwiritsira ntchito amachotsa cache ya ARP akatseka. Ngati akufunika kutumiza paketi yotsatira atalumikizanso (kapena ingogwiritsani ntchito DHCP), amatumiza pempho la ARP. Monga zotsatira zake, mutha kununkhiza ESSID komanso mwina keystream panthawi yolumikizananso. Izi ndizothandiza ngati ESSID ya chandamale chanu yabisika kapena ikagwiritsa ntchito makiyi ogawana nawo.
Tiyeni airodump-ng ΠΈ wochita-ng zikugwira ntchito. Tsegulani zenera lina ndikuthamanga deauthentication attack:

ndi -a - iyi ndi BSSID ya malo ofikira, -с Adilesi ya MAC ya kasitomala wosankhidwa.
Dikirani masekondi angapo ndipo kubwereza kwa ARP kudzagwira ntchito.
Makasitomala ambiri amayesa kulumikizananso zokha. Koma chiwopsezo cha wina kuzindikira kuwukiraku, kapena kulabadira zomwe zikuchitika pa WLAN, ndizokwera kuposa kuukira kwina.

Zida zambiri ndi zambiri za iwo, inu pezani apa.

Dziwani zambiri za maphunzirowa

Source: www.habr.com

Kuwonjezera ndemanga