Aircrack
Merlyn Goedecke
IMPORTANT Information Regarding Windows Version IMPORTANT
The windows version requires you to develop your own DLLs to link aircrack-ng to your wireless card. The required DLLs are not provided in the download nor available anywhere on the Internet. Without these DLLs, the windows version will not function. Do NOT post questions or problems to the forum regarding the windows version. At present, there is no support provided.
In 2004, a hacker using the pseudonym KoreK posted a series of attacks on the NetStumbler.org forum, which were incorporated into the original aircrack 1.2 by Christophe Devine.[34][35] That same month, aircrack began supporting replay attacks against WEP, which use ARP requests to generate more IVs and make key recovery easier.[36]
In April 2007 a team at the Darmstadt University of Technology in Germany presented a new attack, named "PTW" (from the researchers' names, Pyshkin, Tews, Weinmann). It decreased the number of initialization vectors or IVs needed to decrypt a WEP key and has been included in the aircrack-ng suite since the 0.9 release.[42][43]
aircrack-ng supports cracking WEP (FMS, PTW, KoreK and dictionary attacks), WPA/WPA2 and WPA2 keys (using dictionary attacks).[51] While it doesn't support direct attacks on WPA3 (introduced in 2018), it has been used successfully in combination with a downgrade attack.[52]
airbase-ng incorporates techniques for attacking clients, instead of Access Points. Some of its features include an implementation of the Caffe Latte attack (developed by security researcher Vivek Ramachandran)[53] and the Hirte attack (developed by Martin Beck).[54] The WEP Hirte attack is a method of creating an Access Point with the same SSID of the network to be exploited (similar to an evil twin attack).[55] If a client (that was previously connected to the victim's access point) is configured to automatically reconnect, it will try the rogue AP. At this point, ARP packets are sent in the process of obtaining a local IP address, and airbase-ng can collect IVs that can later be used by aircrack-ng to recover the key.[56]
My cheap laptop with an i5 processor is being used to test my network, I successfully grabbed a handshake and tested it against a password file with my pass in it that was 100mb in size. I used aircrack on the text file with my persistence usb stick loaded up with latest kali and the best I can get is 1800-1900 k/s, should I be expecting more speed out of it or am I out of luck unless I build a rig with good video cards and go the hashcat route?
Thanks for the input, my laptop does not really have a gpu outside of the cpu, its a cheap built in the motherboard graphics processor. I guess if I had a higher end unit I would give it a shot. When I run the aircrack it starts winding up the internal fan like a jet taking off, then I notice after some time the speed drops to about 1000 k/s. I am afraid I am gonna kill the cheap ram or cpu with all the heat lol. I wish I could see the ram and cpu temp. That is insane how fast you can process a wordlist against a captured handshake with hashcat and a gpu! If I ever build a desktop unit I will consider buying the video cards that work best with kali/hashcat lol. Too bad you can not use some of the standalone gaming systems with compatible cards to do this! Design the game to crack routers lol, anyhow thanks for the input.
If no GPU compatible on the laptop, try cloud based services(granted just for testing with your own rotuer, make a small wordlist and put your pass at the end and use aircrack to test it works). Kali on AWS with CUDA support is out there, but it's not something everyone is going to be doing unless they have the need and want to spend the money.
I have one more question to throw out here, does aircrack and hashcat kill processors and gpu chips eventually? Obviously the programs will push the chips to the limit to process hashes etc, just wondering if the heat kills them eventually out there, even if they limit the processing a bit by monitoring the heat sensors, thx.
You said laughable security, well I just found out that if the password does contain a letter, it will be the sixth character only and it will be A-F. So that makes it easy for anyone with a cheap laptop to crack via just a cpu with aircrack. The sixth character discovery is just what I have found from 4 different modem/routers of this type from the same internet provider. I would assume they know about this poor security.
I used crunch to make 4 seperate password files, was not sure how to do all that I wanted with just one crunch command for one file. I then run those password files just through aircrack/cpu. Very basic and straight forward, nothing fancy.
aircrack-ng is an 802.11a/b/g WEP/WPA cracking program that can recover a40-bit, 104-bit, 256-bit or 512-bit WEP key once enough encrypted packetshave been gathered. Also it can attack WPA1/2 networks with some advancedmethods or simply by brute force.
For aircrack-ng password cracking, the reason to open a file is not to edit it but to read passwords out of it. Unlike the text editor it does not need the ability to jump to any random point in the file at any time. In fact, it only needs to start at the beginning and read a few passwords at a time until it gets to the end. When it tries a password and it does not work, it does not need to remember that password anymore. This process uses a fairly small amount of memory that does not depend on how large the file is, which is why your system does not run out of memory.
reply to : Thanks! Hopefully this isn't going too off topic, but I have one more question for you: how can I increase the speed of how many keys are being tested by aircrack-ng? Would an increase in RAM help? Or does the speed rely on the processor speed?
aircrack-ng is an 802.11a/b/g WEP/WPA cracking program that can recover a40-bit, 104-bit, 256-bit or 512-bit WEP key once enough encrypted packetshave been gathered. Also it can attack WPA1/2 networks with some advancedmethods or simply by brute force.It implements the standard FMS attack along with some optimizations,thus making the attack much faster compared to other WEP cracking tools.It can also fully use a multiprocessor system to its full power in orderto speed up the cracking process.aircrack-ng is a fork of aircrack, as that project has been stopped bythe upstream maintainer. Tags: Implemented in: C, User Interface: Command Line, interface::text-mode, network::scanner, Role: Program, Scope: Application, scope::utility, security::authentication, Security: Cryptography, Purpose: Scanning
For this tutorial we have a handshake file called WPAHandshake.pcap and a dictionary file called passwords.txt. The password file is 14 MB in size and contains about 990.000 passwords. The last password in the file is intentionally the correct one. This is the syntax we will be using for Aircrack: aircrack-ng.exe [handshake file] -w [dictionary file]
I know how to use aircrack and oclhashcat fairly well, but so far i've found maybe one decent video explaining how to use aircrack, and zero videos explaining how to use oclhashcat, and most tutorials online suck. Would I get in trouble for even making a tutorial video explaining how to use the software?
You can make the videos with no legal problems so long as you are hacking items that you own and/or have permission from the owner to hack. Stay safe and hack your own stuff. I'd love to see more tutorials with aircrack and wifi hacking utilities.
I was using my raspberry pi 3 today trying to launch a deauth attack using aircrack-ng(Don't worry the network is mine). But I'm not here to talk about hacking I actually need help with setting up wlan0 and mon0. When I type in the following command this is what happens:
You must identify the chipset which your current wireless card contains. Even for supported chipsets, some of the functions may not work completely as expected. Once you have determined the chipset in your wireless card then you must determine if the chipset is compatible with the aircrack-ng suite. Then you will know which software drives are compatible with the particular wireless card.
760c119bf3