WEP cracked with 158 interesting packets

warnockm · 04-12-2005

I was playing w/ kismet and airsnort and ran data through my network for about 20 hours at a moderate rate. I was capturing the data w/ kismet from another computer and analyzing it w/ airsnort. After only 158 interesting packets, i had my 128 bit key. How is this possible?! i thought you needed on average 2000 packets and sometimes its as low as 1200 packets.

Has anyone else had this much "luck"?

Barry · 04-12-2005

Happens sometimes. Weak pass phrase? Dictionary word?

TECHY · 04-14-2005

I've been capturing files with airodump and analyzing with airsnort. I have obtained a significant number of weak packets and still been unable to crack WEP.
When u load the pcap file does airsnort jus display the key? What specific command do you use to obtain it? Maybe i'm using the wrong commands or approach. Any suggestions?
Thanks

Barry · 04-14-2005

I just let airsnort capture the packets, it will eventually (maby) display the wep key.

davisfactor · 04-15-2005

According to this article, airsnort isn't that great. The article states that airsnort doesn't use the korek attacks. I don't know, I've never used it.
http://www.securityfocus.com/infocus/1814

TECHY,
This link helped me out a lot when learning to crack WEP keys.
Aireplay Single NIC patch

Maybe you can get some use out of it, too?

TECHY · 04-15-2005

Thanks very much for your assistance. I'm still trying to get the key. Does anyone know of any recent programs which are capable of cracking wep in a very short space of time?
thank u

streaker69 · 04-15-2005

Quote:

Originally Posted by TECHY

Thanks very much for your assistance. I'm still trying to get the key. Does anyone know of any recent programs which are capable of cracking wep in a very short space of time?
thank u

Damn, why did that meter just get pegged?

theprez98 · 04-15-2005

Well at least he used the shift key, sort of.

Barry · 04-15-2005

Quote:

Originally Posted by TECHY

Thanks very much for your assistance. I'm still trying to get the key. Does anyone know of any recent programs which are capable of cracking wep in a very short space of time?
thank u

Ask the owner??

sylvain · 04-16-2005

ok so the article is wrong ... or at the time of the writing of the article it was right but not now. Airsnort uses now korek's attack (code copied from aircrack in fact...) and you crack your key just because you had enough encrypted packets...no link with weak packets...

04-12-2005	#1 (permalink)
warnockm Registered Member Join Date: Sep 2003 Posts: 16	WEP cracked with 158 interesting packets I was playing w/ kismet and airsnort and ran data through my network for about 20 hours at a moderate rate. I was capturing the data w/ kismet from another computer and analyzing it w/ airsnort. After only 158 interesting packets, i had my 128 bit key. How is this possible?! i thought you needed on average 2000 packets and sometimes its as low as 1200 packets. Has anyone else had this much "luck"?

04-12-2005	#2 (permalink)
Barry Managing the iTards. Join Date: Dec 2002 Location: Ohio Posts: 5,383	Happens sometimes. Weak pass phrase? Dictionary word? __________________ Atheism is a non-prophet organization.

04-14-2005	#3 (permalink)
TECHY Registered Member Join Date: Apr 2005 Posts: 3	airsnort I've been capturing files with airodump and analyzing with airsnort. I have obtained a significant number of weak packets and still been unable to crack WEP. When u load the pcap file does airsnort jus display the key? What specific command do you use to obtain it? Maybe i'm using the wrong commands or approach. Any suggestions? Thanks

04-14-2005	#4 (permalink)
Barry Managing the iTards. Join Date: Dec 2002 Location: Ohio Posts: 5,383	I just let airsnort capture the packets, it will eventually (maby) display the wep key. __________________ Atheism is a non-prophet organization.

04-15-2005	#5 (permalink)
davisfactor Registered Member Join Date: Aug 2004 Posts: 24	According to this article, airsnort isn't that great. The article states that airsnort doesn't use the korek attacks. I don't know, I've never used it. http://www.securityfocus.com/infocus/1814 TECHY, This link helped me out a lot when learning to crack WEP keys. Aireplay Single NIC patch Maybe you can get some use out of it, too? __________________ Vs lbh pna ernq guvf, gura lbh'er n trrx

04-15-2005	#6 (permalink)
TECHY Registered Member Join Date: Apr 2005 Posts: 3	thanks Thanks very much for your assistance. I'm still trying to get the key. Does anyone know of any recent programs which are capable of cracking wep in a very short space of time? thank u

04-15-2005	#8 (permalink)
theprez98 SpoonfeederExtraordinaire Join Date: Jan 2005 Location: Maryland Posts: 3,619	Well at least he used the shift key, sort of.

04-16-2005	#10 (permalink)
sylvain Wireless Auditor Join Date: Jun 2004 Location: Paris, France Posts: 175	ok so the article is wrong ... or at the time of the writing of the article it was right but not now. Airsnort uses now korek's attack (code copied from aircrack in fact...) and you crack your key just because you had enough encrypted packets...no link with weak packets...

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode