These handshakes occur whenever a device connects to the network, for instance, when your neighbor returns home from work. You don't have to know anything about what that means, but you do have to capture one of these handshakes in order to crack the network password. WPA/WPA2 uses a 4-way handshake to authenticate devices to the network.

Remember the BSSID MAC address and channel ( CH) number as displayed by airodump-ng, as we will need them both for the next step. WPA2 CCMP PSK Comcast_2EEA-EXTīC:EE:7B:8F:48:28 -85 119 10 0 1 54e WPA2 CCMP PSK rootĮC:1A:59:36:AD:CA -86 210 28 0 1 54e WPA2 CCMP PSK belkin.dcaįor the purposes of this demo, we will choose to crack the password of my network, 'hackme'. Have a wireless card that supports monitor mode (see here for a list of supported devices)īegin by listing wireless interfaces that support monitor mode with:īSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSIDġ4:91:82:F7:52:EB -66 205 26 0 1 54e OPN ġ4:91:82:F7:52:E8 -64 212 56 0 1 54e WPA2 CCMP PSK belkin.2e8ġ4:22:DB:1A:DB:64 -81 44 7 0 1 54 WPA2 CCMP ġ4:22:DB:1A:DB:66 -83 48 0 0 1 54e.Are running a debian-based linux distro, preferably Kali linux (OSX users see the appendix).Have a general comfortability using the command-line.

The author is not responsible for its use. It should not be used for illegal activity. neal1991 and tiiime have also graciously provided translations to this document and the appendix in Chinese if you prefer those versions.ĭISCLAIMER: This software/tutorial is for educational purposes only. For a variety of suggestions and alternative methods, see the appendix. If you are familiar with this process, you can skip the descriptions and jump to a list of the commands used at the bottom. An optional active deauthentication attack can be used to speed up the reconnaissance process and is described at the end of this document.

The attack outlined below is entirely passive (listening only, nothing is broadcast from your computer) and it is impossible to detect provided that you don't actually use the password that you crack. It is not exhaustive, but it should be enough information for you to test your own network's security or break into one nearby. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords. Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/ Hashcat.

Crack wpa2 bruteforce vodafone