A quick guide to cracking WEP

[wimme]

when i do what you say it gives me a deauth packet or something when i start aireplay with -3 attack

so I want to try it differently:
-start airodump ..
-start aireplay -0 100 ..
-when thats finished
-start aireplay -3 -r <the file from airodump> ..
-start aircrack when you got 500k IVs

would this work?

[hobbes]

In recent news, I've gotten my very stubborn Netgear WG511T card working with injection by using the guide TheGreatVirus whipped up (Requires HD install). I suggest you do the same. It is possible (though not tested) that this will also fix any troubles with the WG311T card, but that's really just idle speculation.

[G-Stress]

Excellent guide hobbes it worked with my DWL-G122 the packets only increased at about 30 every few seconds but it will work until I get antenna's for my Senao card

[flame]

a damn nice tutorial :] But for those of you that are too lazy to read it all (apart from being hanged) check out wepcrack.pl @ http://www.flamed.me.uk

seriously seriously poor coding by me, but three people so far have found it useful on irc :S so *shrug* some of you might too.

[hobbes]

Bump.

Also, I have a modified version of flame's script for anybody that cares.

http://www.gnook.org/~hobbes/wepcrack.pl

[XzifT]

nice script overall i don't know if flame's is still up but there's a couple small errors in the one hobbes posted;"Delete the return or comment it out at line 69":
#print "Which attack would you like to perform? ('deauth or 'fake auth')?:"

And the script has one extra "}" at the end. Then the complete newbs like myself should be good to go.

chmod +x wepcrack.pl
./wepcrack.pl

for the totally helpless like myself

[hobbes]

Originally Posted by XzifT

"Delete the return or comment it out at line 69":
#print "Which attack would you like to perform? ('deauth or 'fake auth')?:"

And the script has one extra "}" at the end.

Thus corrected. Thanks for the feedback.

[XzifT]

i've been tinkering around with hobbes script trying to make it a little more effective. I'll release it once i get all the kinks worked out

[granger53]

Im a noob and dont know scripting yet....any way of changing the scripts to use xterm instead of konsole? My box is a pathetic thing and I have to use "lightweight" or no gui progs.

[kaminari]

Total noob question, but up to now I've been using any random MAC (00:01:02:03:04:05) for the client mac, but how do I actually see the MAC address of a client that's connected to the AP so I can try to deauth it?

I've tried using kismet to watch traffic go by and see clients connect, but sometimes I'm not fast enough to catch them in the logs. Is there a way to see in kismet what's actively connect to an AP? Or a different program?

Thanks.