Showing posts with label wi-fi hacking. Show all posts
Showing posts with label wi-fi hacking. Show all posts

Sunday, January 15, 2012

BACKTRACK Tutorial video (Complete hacking tutorial)

Comments

BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking. Regardless if you’re making BackTrack your primary operating system, booting from a LiveDVD, or using your favorite thumbdrive, the pentesting distribution has been customized down to every package, kernel configuration, script and patch solely for the purpose of the penetration tester.


  Back Track is intended for all audiences from the most savvy security professionals to early newcomers to the information security field. Back Track promotes a quick and easy way to find and update the largest database of security tools collection to-date. Our community of users range from skilled penetration testers in the information security field, government entities, information technology, security enthusiasts, and individuals new to the security community.

Whether you’re hacking wireless, exploiting servers, performing a web application assessment, learning, or social-engineering a client, BackTrack is the one-stop-shop for all of your security needs.

Include:

Installing Backtrack 3


  • Episode 1 – Network Hacking – Arp Poisoning 
  • Episode 2 – Wireless Hacking – Cracking WEP 
  • Episode 3 – Wireless Hacking – DeAuth 
  • Episode 5 – Lock Picking – Bump Key 
  • Episode 6 – Phone Phreaking – Beige Box 
  • Episode 7 – Phone Phreaking/Network Hacking – Sniffing VOIP 
  • Episode 8 – Lock Picking – DIY Padlock Shims 
  • Episode 9 – Lock Picking – Mult-Disc Combo Locks 
  • Episode 10 – Hacking Basics – MD5 
  • Episode 11 – Website Hacking – Sql Injection 
  • Episode 12 – Hacking Basics – Backtrack 
  • Episode 13 – Website Hacking – XSS 
  • Episode 14 – Staying Secure – SSH Tunnel 
  • Episode 15 – Modding – Xbox Softmod 
  • Episode 16 – Wireless Hacking – Cracking WPA 
  • Episode 17 – Triple Boot – Windows, Backtrack, & Ubuntu 
  • Episode 18 – Local Password Cracking 
  • Episode 19 – Lock Picking Basics 
  • Episode 20 – Ettercap 
  • Episode 21 – XSS Tunnel 
  • Episode 22 – Playstation 2 Softmod 
  • Episode 23 – Cracking WEP Update 
  • Episode 24 – Bypass Hotspot’s Access Controls 


  • Underground – Install Backtrack 3 on USB 
  • Underground – CSRF(Cross Site Request Forgery) 
  • Underground – Alternate Data Streams 
  • Underground – Local File Inclusion 
  • Underground – Windows Privilege Escalation 
  • Underground – Bluetooth Hacking 
  • Underground – VMWare 
  • Underground – Fix Google Mail Enumerator 
  • Underground – Home Made Lock Picks 
  • Underground – Downfalls of Anti-Virus Software Part 2 
  • Underground – Downfalls of Anti-Virus Software 
  • Underground – Evilgrade 
  • Underground – Trojan Basics 
  • Underground – Manipulating Windows User Accounts 
  • Underground – Combine Files 
  • Underground – Password Phishing 
  • Underground – Windows SMB Relay Exploit 
  • Underground – Application Patching 
  • Underground – Metasploit Autopwn 
  • Underground – Email Spoofing 
  • Underground – Introduction 

  • Extracting Database Information from Information_Schema 
  • FPGA MD5 Cracker 
  • Arduino ARP Cop 
  • Email Injection 
  • Ping of Death 
  • DNS Spoofing with Virtual Hosts 
  • Bypass Cisco Clean Access & Cisco NAC Appliance 
  • Dual Boot – Windows & Backtrack 
  • Sql Injection Challenge How-to 
  • How to use Intel Pro/Wireless 3945ABG in Backtrack 2 
  • Local Privilege Escalation Vulnerability in Cisco VPN Client
Screen Shots :

jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj 
or download it from official site 

Tutorials:
PASSWORD:
Uloader
Premium Links:
part 2 

Archived Links:
thank you bikash
any problem comment here...
 

Friday, January 6, 2012

Hack wifi with Reaver -wsp free

Comments
             This tutorial is for only educational purpose .
Well Every Dude out there want to hack their neighbour's wifi It is an ultimate dream for most of them. In old days it was easy that same old WEP that made is quite easy but then WPA came, the perfect Villane that was uncrackable for a long time but guess what now you can hack it in just 4 hours. Well that seems to be alot but just small time ago it took millions of years to hack it, so better late then never!


Here is an awesome software!


Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases, as described in http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf.


Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations.


On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.


Reaver is a WPA attack tool developed by Tactical Network Solutions that exploits a protocol design flaw in WiFi Protected Setup (WPS). This vulnerability exposes a side-channel attack against Wi-Fi Protected Access (WPA) versions 1 and 2 allowing the extraction of the Pre-Shared Key (PSK) used to secure the network. With a well-chosen PSK, the WPA and WPA2 security protocols are assumed to be secure by a majority of the 802.11 security community.


Usage is simple just specify the target BSSID and the monitor mode interface to use:
# reaver -i mon0 -b 00:01:02:03:04:05


WPS allows users to enter an 8 digit PIN to connect to a secured network without having to enter a passphrase. When a user supplies the correct PIN the access point essentially gives the user the WPA/WPA2 PSK that is needed to connect to the network. Reaver will determine an access point's PIN and then extract the PSK and give it to the attacker.

Hope you enjoy

Bikash

pls do comment and let me know working or not???

Thursday, November 10, 2011

wifi (wep) cracking with backtrack 5

5 comments

Security Issues With WEP


WEP (Wired Equivalent Privacy) was proved full of flaws back in 2001, WEP protocol itself has some weakness which allows the attackers to crack them in no time. The biggest flaw probably in a WEP key is that it supports only 40bit encryption which means that there are 16million possibilities only.

For more information on WEP flaws, kindly read the WEP flaws section here.

Requirements :-

Here is what you would require to crack a WEP key:

1. Backtrack or any other Linux distro with aircrack-ng installed 

2. A Wifi adapter capable of injecting packets , For this tutorial I will use Alfa AWUS036H which is a very popular card and it performs well with Backtrack

You can find compatible wifi card lists here.

Procedure :-

First Login to your Backtrack / Linux distro and plug in your Wifi adpter , Open a new konsole and type in the following commands 

ifconfig wlan0 up



where wlan0 is the name of the wireless card ,it can be different .To see all wireless cards connected to your system simply type in " iwconfig ".


Putting your WiFi Adapter on Monitor Mode

To begin, you’ll need to first put your wireless adapter into monitor mode , Monitor mode is the mode whereby your card can listen to every packet in the air , You can put your card into monitor mode by typing in the following commands 

airmon-ng start (your interface)

Example :- airmon-ng start wlan0



Now a new interface mon0 will be created , You can see the new interface is in monitor mode by entering "iwconfig mon0" as shown



Finding a suitable Target

After putting your card into monitor mode ,we need to find a network that is protected by WEP. You can discover the surrounding networks by entering the following command

airodump-ng mon0



Bssid shows the mac address of the AP, CH shows the channel in which AP is broadcasted and Essid shows the name broadcasted by the AP, Cipher shows the encryption type ,

Now look out for a wep protected network In my case i’ll take “linksys “ as my target for rest of the tutorial

Attacking The Target

Now to crack the WEP key you'll have to capture the targets data into a file, To do this we use airodump tool again, but with some additional switches to target a specific AP and channel. Most importantly, you should restrict monitoring to a single channel to speed up data collection, otherwise the wireless card has to alternate between all channels .You can restrict the capture by giving in the following commands

airodump-ng mon0 --bssid -c (channel ) -w (file name to save )



As my target is broadcasted in channel 6 and has a bssid "98:fc:11:c9:14:22" ,I give in the following commands and save the captured data as "RHAWEP"

airodump-ng mon0 --bssid 98:fc:11:c9:14:22 -c 6 -w RHAWEP


Using Aireplay to Speed up the cracking

Now you’ll have to capture at least 20,000 data packets to crack WEP .This can be done in two ways, The first one would be a (passive attack ) wait for a client to connect to the AP and then start capturing the data packets but this method is very slow, it can take days or even weeks to capture that many data packets

The second method would be an (active attack )this method is fast and only takes minutes to generate and inject that many packets .

In an active attack you'll have do a Fake authentication (connect) with the AP ,then you'll have to generate and inject packets. This can be done very easily by entering the following commands 

aireplay-ng - 1 3 -a (bssid of the target ) (interface) 



In my case i enter the following commands 

aireplay-ng -1 3 -a 98:fc:11:c9:14:22 mon0 


After doing a fake authentication ,now its time to generate and inject Arp packets . To this you'll have to open a new Konsole simultaneously and type in the following commands

aireplay-ng 3 -b (bssid of target) -h ( Mac address of mon0) (interface)



In my case i enter
aireplay-ng 3 -b 98:fc:11:c9:14:22 -h 00:c0:ca:50:f8:32 mon0

If this step was successful you'll see Lot of data packets in the airodump capture as shown



Wait till it reaches 20000 packets , best would be to wait till it reaches around 80,000 to 90,000 packets .Its simple more the packets less the time to crack .Once you’ve captured enough number of packets, close all the process's by clicking the into mark which is there on the terminal


Cracking WEP key using Aircrack


Now its time crack the WEP key from the captured data, Enter the following commands in a new konsole to crack the WEP key

aircrack-ng (name of the file )

In my case i enter 
aircrack-ng RHAWEP-0.1-cap

With in a few minutes Aircrak will crack the WEP key as shown



Once the crack is successful you will be left with the KEY! Remove the colons from the output and you’ll have your WEP Key.

Hope You Enjoyed this tutorial ,
Dare to ask????


Related Posts Plugin for WordPress, Blogger...
Related Posts Plugin for WordPress, Blogger...