VIRTUAL BANK,TOOL HACKING,PAYPAL

<h3 class="post-title entry-title">
<a href="http://www.hackyshacky.com/2013/04/wep-cracking-backtrack-5.html">How to Crack WEP Key With Backtrack 5 [wifi hacking]</a>
</h3>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjamNDjWBuf9jTzh190_qqwYir57vPayJ3_Cpj3ouhYJsZm99CnZeFPdQ2WWWmobxmhEOYByGnYVEklua_-HhCOqWQlL6S0MjxWI8W-KFs3bRVIvJBV96txSjJBuF_iNZOQ28MXkLQO-r0/s1600/wep.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjamNDjWBuf9jTzh190_qqwYir57vPayJ3_Cpj3ouhYJsZm99CnZeFPdQ2WWWmobxmhEOYByGnYVEklua_-HhCOqWQlL6S0MjxWI8W-KFs3bRVIvJBV96txSjJBuF_iNZOQ28MXkLQO-r0/s200/wep.png" width="200" /></a></div>
As
 announced before we would be writing related to <a href="http://www.hackyshacky.com/2013/04/How-to-Hack-Wifi.html" rel="nofollow" target="_blank">wifi attacks and security</a>, This post is the second part of our series on wifi attacks and
 Security, In the first part we discussed about 
various terminologies related to wifi attacks and security and discussed
 couple of attacks. This post will also show you how one can easily 
crack <a class="kLink" href="http://www.hackyshacky.com/2013/04/basics-of-wireless-network-security.html" id="KonaLink0" rel="nofollow" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;" target="_blank">WEP keys</a> in no time. 
<a href="http://www.blogger.com/null" name="more"></a> 
 
Security Issues With WEP 
 
 
WEP (Wired Equivalent Privacy) was proved full of flaws back in 2001, 
WEP protocol itself has some weakness which allows the attackers to 
crack them in no time. The biggest flaw probably in a WEP key is that it
 supports only 40bit encryption which means that there are 
16million possibilities only. 
 
For more information on WEP flaws, kindly read the WEP flaws section <a href="http://en.wikipedia.org/wiki/Wired_Equivalent_Privacy">here</a>. 
 
<h4>
Requirements :-</h4>
Here is what you would require to crack a WEP key: 
 
1. Backtrack or any other Linux distro with aircrack-ng installed 
 
2. A Wifi adapter
 capable of injecting packets , For this tutorial I will use Alfa 
AWUS036H which is a very popular card and it performs well with 
Backtrack 
 
You can find compatible wifi card lists <a href="http://www.backtrack-linux.org/wiki/index.php/Wireless_Drivers">here</a>. 
 
<h4>
Procedure :-</h4>
First Login to your Backtrack / Linux 
distro and plug in your Wifi adpter , Open a new konsole and type in the
 following commands 
 
ifconfig wlan0 up 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHJNwzvnEfsCpF83A39LaiMqhD2SEEzvA_xNpV1iivi7ACPLSF9ZheKkBSXOdJ3DazNuoQ1k_8wEIJDtotK00iHRa2aLAE1-hOi7Pqg2rRqvZgsx9Ce85s4KHaf2gCMCdUVu6GoWhfD08/s1600/.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="318" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHJNwzvnEfsCpF83A39LaiMqhD2SEEzvA_xNpV1iivi7ACPLSF9ZheKkBSXOdJ3DazNuoQ1k_8wEIJDtotK00iHRa2aLAE1-hOi7Pqg2rRqvZgsx9Ce85s4KHaf2gCMCdUVu6GoWhfD08/s640/.png" width="577" /></a></div>
 
 
where wlan0 is the name of the wireless card ,it can be different .To see all wireless cards connected to your system simply type in " iwconfig ". 
 
 
Putting your WiFi Adapter on Monitor Mode 
 
To begin, you’ll need to first put your wireless adapter
 into monitor mode , Monitor mode is the mode whereby your card can 
listen to every packet in the air , You can put your card into monitor 
mode by typing in the following commands 
 
airmon-ng start (your interface) 
 
Example :- airmon-ng start wlan0 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixZ9gF1xqnt0eq7Rc-LtbIpiChYwkhxkcDZwr_HH7qgc7IRpRvfbq1jXThW84uWRwdKNIRGfFoysEivODi42vH-TWkVteY-bIRq2pjQtyF03OL6Y9dr9pOf_BaMuU7Dam3iOzv_FaOBxk/s1600/monitor.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixZ9gF1xqnt0eq7Rc-LtbIpiChYwkhxkcDZwr_HH7qgc7IRpRvfbq1jXThW84uWRwdKNIRGfFoysEivODi42vH-TWkVteY-bIRq2pjQtyF03OL6Y9dr9pOf_BaMuU7Dam3iOzv_FaOBxk/s640/monitor.png" width="577" /></a></div>
 
 
Now a new interface mon0 will be created , You can see the new interface is in monitor mode by entering "iwconfig mon0" as shown 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjB2sa_7wo8v0RJl7Le4UUR_CJAX3tJqjxkw__vrgDCKyNoezwe5YJZV849izxX1_f1IJydh_tc2JYbh1Xe7kYFSTMlLBxXsQtX43-Bxzj2LuVME0Ym2LebOLzKGyyT6W5xEpyTNjY2zzg/s1600/monitor+2.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjB2sa_7wo8v0RJl7Le4UUR_CJAX3tJqjxkw__vrgDCKyNoezwe5YJZV849izxX1_f1IJydh_tc2JYbh1Xe7kYFSTMlLBxXsQtX43-Bxzj2LuVME0Ym2LebOLzKGyyT6W5xEpyTNjY2zzg/s640/monitor+2.png" width="577" /></a></div>
 
 
Finding a suitable Target 
 
After putting your card into monitor mode ,we need to find a network 
that is protected by WEP. You can discover the surrounding networks by 
 entering the following command 
 
airodump-ng mon0 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYdlxV5v-5zd4CscrAiTB6j83C-4ZFNCt_ZCJHudmKCZZPJBD7Nu7jCn_RObw5ZNrFXsCCJJDlfdmm2-RMt_ILPUC8yzl8YDQ7udFUwflMrtUjYFeIHWiLSHHHDZUJ-tEuk5LBhGRKJQM/s1600/target.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYdlxV5v-5zd4CscrAiTB6j83C-4ZFNCt_ZCJHudmKCZZPJBD7Nu7jCn_RObw5ZNrFXsCCJJDlfdmm2-RMt_ILPUC8yzl8YDQ7udFUwflMrtUjYFeIHWiLSHHHDZUJ-tEuk5LBhGRKJQM/s640/target.png" width="577" /></a></div>
 
 
Bssid shows the <a href="http://www.hackyshacky.com/2013/04/basics-of-wireless-network-security.html" rel="nofollow" target="_blank">mac address</a> of the AP, CH shows the channel in which AP is broadcasted and Essid shows the name broadcasted by the AP, Cipher shows the <a class="kLink" href="http://www.hackyshacky.com/2013/04/basics-of-wireless-network-security.html" id="KonaLink6" rel="nofollow" style="font-family: inherit !important; font-size: inherit !important; font-weight: inherit !important; position: static; text-decoration: underline !important;" target="_blank">encryption type</a>. 
 
Now look out for a wep protected network In my case i’ll take “linksys “ as my target for rest of the tutorial 
 
<h4>
Attacking The Target</h4>
Now to crack the WEP key you'll have
 to capture the targets data into a file, To do this we use airodump 
tool again, but with some additional switches to target a specific AP 
and channel. Most importantly, you should restrict monitoring to a 
single channel to speed up data collection, otherwise the wireless card 
has to alternate between all channels .You can restrict the capture by 
giving in the following commands 
 
airodump-ng mon0 --bssid -c (channel ) -w (file name to save ) 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNagSOaFJbOrkeU6Ul5ac6SExu0PRWYzxsGOmx2iVx_s-xTEzOMjcwkYuYZYPk1FmG5gxXnPAX3Jc6qsS6SS829fR5-mENmLzfctFVj5sBUuuoj9JF-mg9a80bD1rsEZxGlS-9uekGjK4/s1600/6.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNagSOaFJbOrkeU6Ul5ac6SExu0PRWYzxsGOmx2iVx_s-xTEzOMjcwkYuYZYPk1FmG5gxXnPAX3Jc6qsS6SS829fR5-mENmLzfctFVj5sBUuuoj9JF-mg9a80bD1rsEZxGlS-9uekGjK4/s640/6.png" width="577" /></a></div>
 
 
As my target is broadcasted in channel 6 and has a bssid 
"98:fc:11:c9:14:22" ,I give in the following commands and save the 
captured data as "RHAWEP" 
 
airodump-ng mon0 --bssid 98:fc:11:c9:14:22 -c 6 -w RHAWEP 
 
 
<h4>
Using Aireplay to Speed up the cracking</h4>
Now you’ll have 
to capture at least 20,000 data packets to crack WEP .This can be done 
in two ways, The first one would be a (passive attack ) wait for a 
client to connect to the AP and then start capturing the data packets 
but this method is very slow, it can take days or even weeks to capture 
that many data packets 
 
The second method would be an (active attack )this method is fast and 
only takes minutes to generate and inject that many packets . 
 
In an active attack you'll have do a Fake authentication (connect) with
 the AP ,then you'll have to generate and inject packets. This can be 
done very easily by entering the following commands 
 
aireplay-ng - 1 3 -a (bssid of the target ) (interface) 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXGmc5tfMNYcrPSPo7MDaxuENqTkKytyuqN9tCG7yia2h03sfIPKqrq7bAf2hs1OsRPXJv6-I_28zF_XNIOUwtnOI8QbqPwYBPLtyg-240DZgqSusu39pBTqL7ARfC6UCjAycBLRDDLzQ/s1600/Aiprlay.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="392" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXGmc5tfMNYcrPSPo7MDaxuENqTkKytyuqN9tCG7yia2h03sfIPKqrq7bAf2hs1OsRPXJv6-I_28zF_XNIOUwtnOI8QbqPwYBPLtyg-240DZgqSusu39pBTqL7ARfC6UCjAycBLRDDLzQ/s640/Aiprlay.png" width="577" /></a></div>
 
 
In my case i enter the following commands 
 
aireplay-ng -1 3 -a 98:fc:11:c9:14:22 mon0 
 
 
After doing a fake authentication ,now its time to generate and inject 
Arp packets . To this you'll have to open a new Konsole simultaneously 
and type in the following commands 
 
aireplay-ng 3 -b (bssid of target) -h ( Mac address of mon0) (interface) 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4OMURkNWf_ym0-YUTesAaYbmHIKS8-a8XRHvYANxrIDCdIjA4zm1ZNZvCsWgh568jGaQb2KD_ey3jTwMOwQtnWmn6TZguO2RSeoxRJlKkKE-Zg-cJhR_OjsJJ5bzDFLA48YQUDV0yBDw/s1600/Aiprlay2.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="392" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4OMURkNWf_ym0-YUTesAaYbmHIKS8-a8XRHvYANxrIDCdIjA4zm1ZNZvCsWgh568jGaQb2KD_ey3jTwMOwQtnWmn6TZguO2RSeoxRJlKkKE-Zg-cJhR_OjsJJ5bzDFLA48YQUDV0yBDw/s640/Aiprlay2.png" width="577" /></a></div>
 
 
In my case i enter 
aireplay-ng 3 -b 98:fc:11:c9:14:22 -h 00:c0:ca:50:f8:32 mon0 
 
If this step was successful you'll see Lot of data packets in the airodump capture as shown 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpEoz8AkiLaXpcn83L95Y8RjFwVPI9jdIx_vcFsSL7oIlhYkJtZ8km8CN7yPxarPj9KTiNAxCHENH8F1T3eWverqEsn8EwKjauEgadOWhSGUTLWEFAkN13PaxoX-OAVH7AQoqf1ZFsc4g/s1600/3.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpEoz8AkiLaXpcn83L95Y8RjFwVPI9jdIx_vcFsSL7oIlhYkJtZ8km8CN7yPxarPj9KTiNAxCHENH8F1T3eWverqEsn8EwKjauEgadOWhSGUTLWEFAkN13PaxoX-OAVH7AQoqf1ZFsc4g/s640/3.png" width="577" /></a></div>
 
 
Wait till it reaches 20000 packets , best would be to wait till it 
reaches around 80,000 to 90,000 packets .Its simple more the packets 
less the time to crack .Once you’ve captured enough number of packets, 
close all the process's by clicking the into mark which is there on the 
terminal 
 
 
<h4>
Cracking WEP key using Aircrack</h4>
 
Now its time crack the WEP key from the captured data, Enter the following commands in a new konsole to crack the WEP key 
 
aircrack-ng (name of the file ) 
 
In my case i enter 
aircrack-ng RHAWEP-0.1-cap 
 
With in a few minutes Aircrak will crack the WEP key as shown 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibpW4zhgv_ll8vBJB_jfTHoBgyv3onNRT1GRe7SVLXULV7grlQvZVnd7QeOJHsSFrSweaGJfgNZ32ppolz-FLuMOwqFnKoklEEKr8C-kAznKTxAqFnvpkefeaevd_RWy5s5t1dwXxhnbs/s1600/wep+crack.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="338" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibpW4zhgv_ll8vBJB_jfTHoBgyv3onNRT1GRe7SVLXULV7grlQvZVnd7QeOJHsSFrSweaGJfgNZ32ppolz-FLuMOwqFnKoklEEKr8C-kAznKTxAqFnvpkefeaevd_RWy5s5t1dwXxhnbs/s640/wep+crack.png" width="577" /></a></div>
 
 
Once the crack is successful you will be left with the KEY! Remove the colons from the output and you’ll have your WEP Key. 
 
Hope You Enjoyed this tutorial ,For further Doubts and clarifications please pass your comments

How to Crack WEP Key With Backtrack 5 [wifi hacking] As announced before we would be writing related to wifi attacks and security , Th...

Backtrak Hack Wifi