NetStumbler.org Forums

Go Back   NetStumbler.org Forums > Software > Windows
Register Search Today's Posts Mark Forums Read

Closed Thread
 
LinkBack Thread Tools Display Modes
Old 01-15-2005   #286 (permalink)
jlmcp
Registered Member
 
Join Date: Jul 2002
Posts: 17
wzcook.exe ?

All,

Just spent some serious time on a (legit) wardriving effort for a client. The airo* suite was a HUGE help! Thumbs up for CD!

Q: neither myself nor anyone else on my team could get wzcook to work. Is there something special required. We just double-clicked and got something to the effect of:

ESSID WEP KEY / WPA PM

Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed
Error: CryptUnprotectData failed

Press Ctrl-C to exit.

I am thinking that this would be a slick little app to use in some of our social engineering engagements (think, "Hey, can you pop this (autorun) CD/USB key into your drive/USB slot real quick ...")

At any rate - for the moment we can't even get data from our own registries it would appear... and YES before someone asks, we do have both WPA and WEP keys stored in WZC.

Thanks - Jake
jlmcp is offline  
Old 01-19-2005   #287 (permalink)
devine
Emergence
 
Join Date: Jul 2004
Location: Paris
Posts: 389
Error: CryptUnprotectData failed

Yeah, an offset changed in that crappy SP2 - will be fixed in 2.2.
devine is offline  
Old 01-19-2005   #288 (permalink)
jlmcp
Registered Member
 
Join Date: Jul 2002
Posts: 17
Error: CryptUnprotectData failed

Quote:
Originally Posted by devine
Error: CryptUnprotectData failed

Yeah, an offset changed in that crappy SP2 - will be fixed in 2.2.
SP2 once again the culprit. Figures. Thanks Chris. Looking forward to the .2 release.

-jake
jlmcp is offline  
Old 02-15-2005   #289 (permalink)
Sweex
Registered Member
 
Join Date: Apr 2004
Posts: 6
First I have to thank everyone who worked on this great program. Ofcause I do have a (newbie) question:

I use a Dell 1150 802.11b WLAN card on a W2K system. It seems to work correct (it is collecting packages as we speak).

I do know Airodump has the possibility to hop between the B and G standard. But my card only supports the 802.11B standard. Normaly a g-AP would downgrade the speed/standard to the standard used by a client.

But:
Will Airodump be able to receive packets / aircrack crack the wepkey if I (using an B-Standard card) would listen-in on a network that only uses G-standard devices? (AP and clients).

(PS: If this question was asked/answer before I'm sorry I asked it again. I'm Dutch so perhaps I missed a few posts)

Thanks in advance and keep up the good work;-)
Sweex is offline  
Old 02-23-2005   #290 (permalink)
devine
Emergence
 
Join Date: Jul 2004
Location: Paris
Posts: 389
Quote:
Originally Posted by Sweex
Will Airodump be able to receive packets / aircrack crack the wepkey if I (using an B-Standard card) would listen-in on a network that only uses G-standard devices? (AP and clients).
I'm afraid not.
devine is offline  
Old 02-23-2005   #291 (permalink)
devine
Emergence
 
Join Date: Jul 2004
Location: Paris
Posts: 389
Quote:
Originally Posted by jlmcp
SP2 once again the culprit. Figures. Thanks Chris. Looking forward to the .2 release.
Meanwhile, you can make wzcook 2.1 work with SP2 by manually patching the binary:

* at offset 0x145D, change 0x08 to 0x30
* at offset 0x145E, change 0x01 to 0x03
devine is offline  
Old 02-23-2005   #292 (permalink)
1timer
Registered Member
 
Join Date: Aug 2004
Posts: 3
Quote:
Originally Posted by devine
Meanwhile, you can make wzcook 2.1 work with SP2 by manually patching the binary:

* at offset 0x145D, change 0x08 to 0x30
* at offset 0x145E, change 0x01 to 0x03
COOL thanx devine
1timer is offline  
Old 03-03-2005   #293 (permalink)
thainils
Registered Member
 
Join Date: Mar 2005
Posts: 1
thailnils

I want to try Aircrack but there´s no drivers for my Skyracer PCI 154G, What drivers can try instead?
Tnx
thainils is offline  
Old 03-03-2005   #294 (permalink)
streaker69
Psychic Amish Stumbler
 
streaker69's Avatar
 
Join Date: Jul 2004
Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA
Posts: 12,346
Quote:
Originally Posted by thainils
I want to try Aircrack but there´s no drivers for my Skyracer PCI 154G, What drivers can try instead?
Tnx
If you'd try reading the documentation of the Software you want to try, you'd see that it doesnt support your POS card, and there ain't drivers that are gonna make it work.
__________________
Treat your gun like your genitals, only whip it out when it's absolutely necessary.
streaker69 is online now  
Old 03-11-2005   #295 (permalink)
ging69er
Registered Member
 
Join Date: Mar 2005
Posts: 1
binary patch

hi i am a bit of a newbie to all this and was wondering how to go about patching the binary file so that wzcook will work in SP2, as i get an error saying Error: CryptUnprotectData failed

p.s this forum has been very usefull
thanks
ging69er is offline  
Old 03-11-2005   #296 (permalink)
Dutch
Humourless EuroMod.
 
Dutch's Avatar
 
Join Date: Mar 2004
Location: City of Mermaids, Denmark
Posts: 6,819
Quote:
Originally Posted by ging69er
hi i am a bit of a newbie to all this and was wondering how to go about patching the binary file so that wzcook will work in SP2, as i get an error saying Error: CryptUnprotectData failed

p.s this forum has been very usefull
thanks
Open the file in a hexeditor. Change the data at the indicated offsets. Close the hexeditor, and remember to save the file when prompted.

And better start writing correctly, which means using CAPITALIZATION where it is supposed to be used. Otherwise your posts WILL be binned. Final warning.

Dutch
__________________
All your answers are belong to Google. SEARCH DAMMIT!
Warning. Warning.
Low C8H10N4O2 level detected. Operator halted....
Dutch is offline  
Old 03-12-2005   #297 (permalink)
k3nv
Registered Member
 
Join Date: Mar 2005
Posts: 1
airodump appends?

If you use airodump to capture say, 40MB of data to a file called test.cap, stop it, and then start up again, does it append packets it captures to the existing test.cap file? Or does it start all over again?

My current file is about 40MB and has 11,000 IV's. But for some reason, if I start dump to the same file, test.cap, it grows in file size but when I run aircrack, the amount of IV's don't increase eventhough I know every session it captures about 1000 IV's.
k3nv is offline  
Old 03-16-2005   #298 (permalink)
Shaba1
Registered Member
 
Join Date: Feb 2004
Posts: 4
I know this may sound like a stupid question that has been asked a zillion times, but here I go.
Has anyone tried aerodump or aircrack with WinME or 98? I downloaded it. and unzipped it. I finally figured out I needed peek.dll and the other *.sys file.( I am not at my ME laptop right now so I cannot give you exact details but I will edit this tonight wieh I get home) and put them in the same directory as aerodump and airocrack exe's. But I get this message when I run aero dump that it cannot find peek.dll???. I tried downloading airopeek and got a dialog box that said it needed windows XP. Oh well so much for that. I thought I would try the aerodump/aircrack combo. MONTHS ago I tried Airsnort and it ran and displayed its interface but never did anything. I am using and Dell Truemobile 1150 card. Which from reading this forum is supposed to be compatible with the Orinoco Gold. Is this true. If I need to download newer drivers here is a screendump of my client manager settings screen.
Attached Images
File Type: jpg Dell Truemobile1150.jpg (55.1 KB, 345 views)

Last edited by Shaba1 : 03-16-2005 at 07:17 PM.
Shaba1 is offline  
Old 03-28-2005   #299 (permalink)
devine
Emergence
 
Join Date: Jul 2004
Location: Paris
Posts: 389
Quote:
Originally Posted by k3nv
If you use airodump to capture say, 40MB of data to a file called test.cap, stop it, and then start up again, does it append packets it captures to the existing test.cap file? Or does it start all over again?

My current file is about 40MB and has 11,000 IV's. But for some reason, if I start dump to the same file, test.cap, it grows in file size but when I run aircrack, the amount of IV's don't increase eventhough I know every session it captures about 1000 IV's.
Yes, that bug has been reported a couple of times. I'll see if there's a way to fix it, and also the blue screen bug.
devine is offline  
Old 03-31-2005   #300 (permalink)
jlmcp
Registered Member
 
Join Date: Jul 2002
Posts: 17
Airodump reports incorrect ENC ?

Alrght - plonk me if this was already noticed, but when running Airodump 2.1, I note that my WEP network is showing up as WPA, and one of my open networks is showing up as WEP.

Is that just a bug?

-Jake
jlmcp is offline  
Closed Thread


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Google
 
Web NetStumbler.org

All times are GMT -7. The time now is 02:23 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0 ©2007, Crawlability, Inc.


All messages express the views of the author and are for entertainment purposes only. Netstumbler.org cannot be held responsible for the authenticity of the content or the actions of its members. By using this site and its services, you warrant that you will not post any messages that are discriminating, obscene, hateful, threatening, or otherwise violates any laws and you release Netstumbler.org from any future claims of any kind whatsoever including, but not limited to, addiction and loss of productivity. All forum messages, private messages and any other content are properties of Netstumbler.org. Even if publicly available, personal or copyrighted information are not to be posted without the consent of the owner. Distribution of licensed and copyrighted materials in any way not endorsed by the copyright owner is strictly prohibited. You may not use this site and its resources to spam other sites or individuals or perform any action that violates any law. Items sold or bought in the For Sale forum are sold as is and no warranty or insurance of any kind is provided. Netstumbler.org cannot be held responsible for the outcome of any transactions and no warranty of any kind is provided, either express or implied. Vulgar words are not allowed in the subject lines ; they may be used in the message body in any forum. The Administrator, Super Moderators and Moderators of Netstumbler.org have the right to remove, edit, move or close any thread for any reason and to reveal your identity and other known information in the event of a complaint or legal action arising from any message posted by you.