Collaborate Disseminate
So I understand that a keystream is generating from a key and is the length of the message you want to send, so that you can properly XOR every bit. But I’m having trouble finding and understanding the algorithm for creating the keystream … Continue reading How to generate the Keystream from IV+Key in RC4
Our team was hired for a red team engagement for a client. A part of the engagement is attempting to crack the WiFi passwords of their office APs. However, we obviously want to stay undetected. What kind of thing should we watch out for? A… Continue reading How can wireless password cracking be detected?
I’m trying to learn and practice ARP Replay attack.
I’ve configured my AP for a WEP encryption.
I’ve associated my wireless adapter in monitor mode to the router using –fakeauth. Command as below:
aireplay-ng –fakeauth 0 -a (target AP… Continue reading AP not responding ARP packet injection (arp-replay attack)
I know that WEP has been replaced by TKIP. TKIP still uses RC4, but in it the Initialization Vector (IV) is longer and it’s used with the MAC of the sender and a hardcoded WEP key to generate the key used in RC4. I also read … Continue reading Algorithm that change keys in TKIP
I recently played a bit with my hardware pocket size IV WEP sniffer.
It’s a 5v tool that i use in my lab when bored:
https://www.youtube.com/watch?v=jJyRaWrnbJg
In my tests i figured out one of my MIFI routers is sending da… Continue reading WEP QOS_DATA vs DATA decryption – difference?
I’ve been reading a lot about WEP cracking on online resources very recently, however there is one question that no website gives answer to I believe.
I would like to first understand the theory very well.
I understand how … Continue reading WEP cracking – Why does many IVs allow to actually get the cipher key
OK, let’s start this one by saying that it’s useful to know how to break security measures in order to understand how to better defend yourself, and that you shouldn’t break into any network you don’t have access to. That being said, if you want to learn about security and …read more
This question already has an answer here:
Is there a way to make a WEP-secured AP uncrackable?
8 answers
WEP is dead and … Continue reading Set up a WEP network as safely as possible [duplicate]
I have been working on decrypting a WEP .cap file using crunch. It has 1268 IVs. I was wondering if any of you guys could tell me:
Can I get a clue from the captured file to speed the process of brute-forcing?
If not, what … Continue reading How to speed up brute forcing of finding a WEP key from a captured file. (Educational use, no malicious intent)
I have read about Wi-Fi password cracking for a while and used different tools my self, such as:
Airodump for monitoring
Aicrack for getting key from cap files for WEP/WPA/WPA2
Reaver for WPS
Bully for WPS
Reaver and bully … Continue reading Has Wi-Fi hacking gotten almost impossible?