Jump to content
Main menu
Main menu
move to sidebar
hide
Navigation
Main page
Recent changes
Random page
Help about MediaWiki
Special pages
YawgNetWiki
Search
Search
Appearance
Log in
Personal tools
Log in
Pages for logged out editors
learn more
Contributions
Talk
Editing
WiFi Hacking
(section)
Page
Discussion
English
Read
Edit
View history
Tools
Tools
move to sidebar
hide
Actions
Read
Edit
View history
General
What links here
Related changes
Page information
Appearance
move to sidebar
hide
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
=Preface= ==Tools/Packages== * Aircrack-ng * Hashcat * Hashcat-utils * Reaver * Macchanger * hcxtools ==Dictionaries== You will likely need a dictionary or two for some attacks. The best ones I've seen have been [https://github.com/danielmiessler/SecLists/blob/master/Passwords/Leaked-Databases/rockyou.txt.tar.gz rockyou] and [https://github.com/danielmiessler/SecLists/blob/master/Passwords/darkc0de.txt darkc0de]. You may consider just grabbing all of SecLists's github as it contains a lot of goodies ==Optional Stuff== You may wish to use macchanger to change your mac address to something easier like 00:11:22:33:44:55 macchanger --mac 00:11:22:33:44:55 wlan1 Do this before running Airmon to start in monitor mode ==Setup== First, start your device in monitor mode airmon-ng start wlan1 This should create a new interface called wlan1mon which we will use for capturing airodump-ng wlan1mon You will see an output of all wireless APs and clients within range of your interface. By default it sorts the strongest signal to the top and weakest on the bottom. You can change the sorting by pressing 's'. Additionally, you may wish to revise your output by adding a few flags: * Change to a specific channel with -c # * Only view specific encryption APs (like wpa2) with --encrypt wpa2 * Only view APs that are active by setting the minimum number of packets before it shows in the list with -n # * Only view a specific AP by BSSID with --bssid xx:xx:xx:xx:xx:xx * Used later, but write the captured packets to a file with -w file Once you have found a target, typically one with some data packets flying around, you can cancel the first airodump process and start a new one targeting that AP airodump-ng -c # --bssid XXXBSSIDXXX -w XXXNAMEXXX wlan1mon And now we wait for the Handshake Captured notice at the top!
Summary:
Please note that all contributions to YawgNetWiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
YawgNetWiki:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Search
Search
Editing
WiFi Hacking
(section)
Add topic