New tool to crack WEP keys under GNU/Linux - Page 8

bigbadbaugh · 09-05-2004

Sounds good m8, keep up the good work...

firefighter99 · 09-06-2004

Quote:

Originally Posted by topolb

As regards the WPA, I also have it on my TODO list together with WPA2 and AES.

As far as I know WPA2==AES==802.11i

topolb · 09-07-2004

Quote:

Originally Posted by firefighter99

As far as I know WPA2==AES==802.11i

Yes. Still possible to launch bruteforce and dictionary attacks.

joswr1ght · 09-07-2004

Quote:

Originally Posted by topolb

Yes. Still possible to launch bruteforce and dictionary attacks.

I just finished a dictionary tool for WPA-PSK networks. I'm planning to release it the first week in November, so check back with me then if anyone is interested.

Note: pbkdf2(4096) makes dictionary attacks against WPA very slow.

-Josh/jwright@hasborg.com

sylvain · 09-07-2004

Quote:

Originally Posted by joswr1ght

I just finished a dictionary tool for WPA-PSK networks. I'm planning to release it the first week in November, so check back with me then if anyone is interested.

Note: pbkdf2(4096) makes dictionary attacks against WPA very slow.

-Josh/jwright@hasborg.com

I'm definitevely interested.

RaiD · 09-07-2004

Same here...any preliminary screenshots?

joswr1ght · 09-07-2004

Quote:

Originally Posted by RaiD

Same here...any preliminary screenshots?

I'm not much for UI design (love those Unix tools though), but here goes. I'm going to release this tool in the first teaching of the SANS Wireless Auditing class in New Orleans in November (I am the author of this material), and will make it publicly available after that.

screen shot

This tool is an implementation of Robert Moskowitz's paper "Weakness in Passphrase Choice in WPA Interface" at http://wifinetnews.com/archives/002452.html. It kind of sucks, since it's pretty slow. I've done everything to optimize it that I believe can be done, but 4096 hmac-sha1 passes take quite a bit of time to derive the PMK from a dictionary word. I'm looking forward to comments after releasing publicly.

Thanks,

-Josh

RaiD · 09-07-2004

Hey that's really cool...you're right, there are a lot of words to try, but 185 seconds isn't bad for an 18 character password. Thanks for sharing that screenshot with us.

topolb · 09-07-2004

Good job josh!
It looks promissing.

Master1977 · 09-08-2004

I am using weplab v0.1.0-beta-w32_01 for windows off course. Is it possible to use it to capture packets ?

If yes, how can I specify the interface and put it in monitor mode ??

weplab -c -i wlan0 --debug 1 --caplen 150 packets.log

Doesn't seems to be lucky enough.

Thanks for the help.

topolb · 09-08-2004

Quote:

Originally Posted by Master1977

I am using weplab v0.1.0-beta-w32_01 for windows off course. Is it possible to use it to capture packets ?

If yes, how can I specify the interface and put it in monitor mode ??

weplab -c -i wlan0 --debug 1 --caplen 150 packets.log

Doesn't seems to be lucky enough.

Thanks for the help.

Sorry, capture is not available for windows.
I suggest you to use another tool to capture packets (like Airopeek), then convert the files into pcap format with ethereal and finally use weplab.

For the moment I do no plan to use any commercial driver to make weplab capture on windows. Unless it appears a fully open source method to make it, (or I change my mind) you will need to use another tool for capture on win.

Master1977 · 09-09-2004

Quote:

Originally Posted by topolb

Sorry, capture is not available for windows.
I suggest you to use another tool to capture packets (like Airopeek), then convert the files into pcap format with ethereal and finally use weplab.

That's cool. Which tool may I use ? Is there a freeware ?
Airopeek is not supported by my wireless card, a belkin 54Mb pci.

Ethreal seems to capture my wireless traffic smoothly, can I just use that ?
Hmm I see the traffic in clear in ethreal is that because I've put my key in the driver, I mean should I capture the traffic without the network key setup on the device that is capturing ?

Given I'll use a certain tool and convert the captured files with pcap is there any settings to specify in weplab to maximize the probability of success or reduce time (I dunno like --fcs)?

Quote:

Originally Posted by topolb

For the moment I do no plan to use any commercial driver to make weplab capture on windows. Unless it appears a fully open source method to make it, (or I change my mind) you will need to use another tool for capture on win.

I see. Well capture it's not a big deal, you can always use third party tools.

By the way, really a great software can't wait to try it out, thanks for working on it and sharing it.

Ps: just to be a nag, are you gonna convert 0.11 for win32 ?

bigbadbaugh · 09-09-2004

You could always try Devines Aircrack that now users Airodump which can caputure packets on Windows.

You just need the Airopeek .DLL and a few other things to get it working.

devine · 09-10-2004

Quote:

Originally Posted by Master1977

Ethreal seems to capture my wireless traffic smoothly, can I just use that ?

You can't capture 802.11 frames with Ethereal on Windows. With it you'll only be able to collect useless ethernet packets. Best advice I can give you is to boot a knoppix and see if your card is supported under Linux.

Master1977 · 09-10-2004

Quote:

Originally Posted by bigbadbaugh

You could always try Devines Aircrack that now users Airodump which can caputure packets on Windows.

You just need the Airopeek .DLL and a few other things to get it working.

Just tried that, the first Dll it needs is peek.dll that after being copied to the right folder from Airopeek it says "PeekOpenAdapter() Failed". Still my card isn't supported.

Thanks for the help !

09-07-2004	#111 (permalink)
RaiD )(WARDRIVER Join Date: Jul 2003 Location: St. Louis.MO Posts: 45	Same here...any preliminary screenshots? __________________ "IRC is just multi-player notepad." GET FIREFOX!

09-07-2004	#113 (permalink)
RaiD )(WARDRIVER Join Date: Jul 2003 Location: St. Louis.MO Posts: 45	Hey that's really cool...you're right, there are a lot of words to try, but 185 seconds isn't bad for an 18 character password. Thanks for sharing that screenshot with us. __________________ "IRC is just multi-player notepad." GET FIREFOX!

09-08-2004	#115 (permalink)
Master1977 Registered Member Join Date: Sep 2004 Posts: 9	Windows I am using weplab v0.1.0-beta-w32_01 for windows off course. Is it possible to use it to capture packets ? If yes, how can I specify the interface and put it in monitor mode ?? weplab -c -i wlan0 --debug 1 --caplen 150 packets.log Doesn't seems to be lucky enough. Thanks for the help.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

09-05-2004	#106 (permalink)
bigbadbaugh Registered Member Join Date: Aug 2004 Posts: 25	Sounds good m8, keep up the good work...

09-07-2004	#114 (permalink)
topolb Registered Member Join Date: Jun 2004 Posts: 67	Good job josh! It looks promissing.

09-09-2004	#118 (permalink)
bigbadbaugh Registered Member Join Date: Aug 2004 Posts: 25	You could always try Devines Aircrack that now users Airodump which can caputure packets on Windows. You just need the Airopeek .DLL and a few other things to get it working.