WPA Attack - Revision history

Ivc at 16:22, 16 January 2018

2018-01-16T16:22:05Z

← Older revision		Revision as of 16:22, 16 January 2018
Line 39:		Line 39:

	* [[WEP Cracking]]		* [[WEP Cracking]]
			* [[Pyrit setup]]

	== Background ==		== Background ==
	Most wireless networks operating today use WPA and a Pre-Shared Key (PSK) between parties, i.e. a common password between the Access Point and Client Station, for protection. While the 802.11i standard, of which WPA is implemented on, is still intact the authentication is prone to a offline brute-force attack.		Most wireless networks operating today use WPA and a Pre-Shared Key (PSK) between parties, i.e. a common password between the Access Point and Client Station, for protection. While the 802.11i standard, of which WPA is implemented on, is still intact the authentication is prone to a offline brute-force attack.

Ivc: /* Generating word lists */

2010-04-10T20:29:36Z

Generating word lists

← Older revision		Revision as of 20:29, 10 April 2010
Line 190:		Line 190:

	=== Generating word lists ===		=== Generating word lists ===
	By following simple guidelines a good word-list can be generated. Consider the following:		By following simple guidelines a good word-list can be generated. Consider the following [http://www.smallnetbuilder.com/wireless/wireless-howto/30278-how-to-crack-wpa--wpa2?start=5]:

	* Most people use easy to remember passwords, in this case it has to be 8 characters or over in length		* Most people use easy to remember passwords, in this case it has to be 8 characters or over in length

Ivc: /* List of word lists */

2010-04-10T20:29:11Z

List of word lists

← Older revision		Revision as of 20:29, 10 April 2010
Line 184:		Line 184:
	* '''[http://www.renderlab.net/projects/WPA-tables/ Church of Wifi wordlists]''' - passwords2 (2.1 MB) and 9-final-wordlist (11 MB)		* '''[http://www.renderlab.net/projects/WPA-tables/ Church of Wifi wordlists]''' - passwords2 (2.1 MB) and 9-final-wordlist (11 MB)
	* '''[http://www.outpost9.com/files/WordLists.html Outpost9.com]''' ([http://www.outpost9.com/files/wordlists/dic-0294.zip direct]) - dic-0294 (8.04 MB) ([http://forums.remote-exploit.org/bt4beta-howtos/20095-pyrit-cuda-nvidia-tutorial-nvidia-overclock-instructions.html reference])		* '''[http://www.outpost9.com/files/WordLists.html Outpost9.com]''' ([http://www.outpost9.com/files/wordlists/dic-0294.zip direct]) - dic-0294 (8.04 MB) ([http://forums.remote-exploit.org/bt4beta-howtos/20095-pyrit-cuda-nvidia-tutorial-nvidia-overclock-instructions.html reference])
	* '''[http://www.openwall.com/wordlists/ Openwall wordlists]''' - Multiple languages, small fee		* '''[http://www.openwall.com/wordlists/ Openwall wordlists]''' - Multiple languages, small fee [http://ftp.se.kde.org/pub/security/tools/net/Openwall/wordlists/]
	* '''[http://www.theargon.com/achilles/wordlists/ The Argon various wordlists]''' - There are WPA versions of these lists, see Xploitz below		* '''[http://www.theargon.com/achilles/wordlists/ The Argon various wordlists]''' - There are WPA versions of these lists, see Xploitz below
	* '''[http://forums.remote-exploit.org/general-discussion/11875-xploitz-2-master-password-collections.html Xploitz Master Password Collection]'''		* '''[http://forums.remote-exploit.org/general-discussion/11875-xploitz-2-master-password-collections.html Xploitz Master Password Collection]'''

Ivc: /* SuperMicro Tesla GPU server */

2010-04-09T14:46:20Z

SuperMicro Tesla GPU server

← Older revision		Revision as of 14:46, 9 April 2010
Line 340:		Line 340:

	echo -e "Cleaning .pyrit directory..."		echo -e "Cleaning .pyrit directory..."
	rm -frI $pyrit_prefs		rm -frI $pyrit_prefs/blobspace/

	dos2unix passwords.txt		dos2unix passwords.txt

Ivc: /* SuperMicro Tesla GPU server */

2010-04-09T13:41:32Z

SuperMicro Tesla GPU server

← Older revision		Revision as of 13:41, 9 April 2010
Line 347:		Line 347:
	dos2unix essids.txt		dos2unix essids.txt
	lines=`cat essids.txt\|wc -l`		lines=`cat essids.txt\|wc -l`

	for (( i = 1; i <= $lines; i++ ))		for (( i = 1; i <= $lines; i++ ))
	do		do
	essid=`tail -$i essids.txt\|head -1`		essid=`tail -$i essids.txt\|head -1`

	echo -e "Run #$i - ESSID: $essid - Now processing...\n"		if [ -n "$essid" ]; then
	pyrit -o "$essid.cow" -e "$essid" batch		echo -e "Run #$i - ESSID: $essid - Now processing...\n"
			pyrit -o "$essid.cow" -e "$essid" batch

	echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"		echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"
	rm -fr $pyrit_prefs/blobspace/essid/		rm -fr $pyrit_prefs/blobspace/essid/
			fi
	done		done





	Check the [[Pyrit setup\|Pyrit setup guide]] for a installation reference.		Check the [[Pyrit setup\|Pyrit setup guide]] for a installation reference.

Ivc: /* SuperMicro Tesla GPU server */

2010-04-09T13:39:40Z

SuperMicro Tesla GPU server

← Older revision		Revision as of 13:39, 9 April 2010
Line 336:		Line 336:
	This is the script I used to run the test. To get the execution timing details, use ''time'' before the script, i.e. time ./start.sh. Also, make sure there aren't any DOS/Windows return characters, remove them using the ''dos2unix'' command.		This is the script I used to run the test. To get the execution timing details, use ''time'' before the script, i.e. time ./start.sh. Also, make sure there aren't any DOS/Windows return characters, remove them using the ''dos2unix'' command.

	#!/bin/sh		#!/bin/bash
	pyrit_prefs=/home/ivc/.pyrit		pyrit_prefs="/home/ivc/.pyrit"

	echo -e "Cleaning .pyrit directory..."		echo -e "Cleaning .pyrit directory..."
	rm -frI $pyrit_prefs		rm -frI $pyrit_prefs

	dos2unix passwords.txt		dos2unix passwords.txt
	pyrit -i passwords.txt import_passwords		pyrit -i passwords.txt import_passwords

	dos2unix essids.txt		dos2unix essids.txt
	lines=`cat essids.txt\|wc -l`		lines=`cat essids.txt\|wc -l`
	for (( i = 1; i <= $lines; i++ ))		for (( i = 1; i <= $lines; i++ ))
	do		do
	essid=`tail -$i essids.txt\|head -1`		essid=`tail -$i essids.txt\|head -1`

	echo -e "Run #$i - $essid - Now processing...\n"		echo -e "Run #$i - ESSID: $essid - Now processing...\n"
	pyrit -o "$essid.cow" -e "$essid" batch		pyrit -o "$essid.cow" -e "$essid" batch

	echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"		echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"
	rm -fr $pyrit_prefs/blobspace/essid/		rm -fr $pyrit_prefs/blobspace/essid/
	done		done

Ivc: /* SuperMicro Tesla GPU server */

2010-04-09T13:25:57Z

SuperMicro Tesla GPU server

← Older revision		Revision as of 13:25, 9 April 2010
Line 343:		Line 343:

	dos2unix passwords.txt		dos2unix passwords.txt
	pyrit -f passwords.txt import_passwords		pyrit -i passwords.txt import_passwords

	dos2unix essids.txt		dos2unix essids.txt
Line 352:		Line 352:

	echo -e "Run #$i - $essid - Now processing...\n"		echo -e "Run #$i - $essid - Now processing...\n"
	pyrit -f "$essid.cow" -e "$essid" batch		pyrit -o "$essid.cow" -e "$essid" batch

	echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"		echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"

Ivc: /* SuperMicro Tesla GPU server */

2010-04-09T13:22:18Z

SuperMicro Tesla GPU server

← Older revision		Revision as of 13:22, 9 April 2010
Line 336:		Line 336:
	This is the script I used to run the test. To get the execution timing details, use ''time'' before the script, i.e. time ./start.sh. Also, make sure there aren't any DOS/Windows return characters, remove them using the ''dos2unix'' command.		This is the script I used to run the test. To get the execution timing details, use ''time'' before the script, i.e. time ./start.sh. Also, make sure there aren't any DOS/Windows return characters, remove them using the ''dos2unix'' command.

	#!/bin/sh		#!/bin/sh
	echo -e "Cleaning .pyrit directory..."		pyrit_prefs=/home/ivc/.pyrit
	rm -~~fr /root/.pyrit/~~
			echo -e "Cleaning .pyrit directory..."
	dos2unix passwords.txt		rm -frI $pyrit_prefs
	pyrit -f passwords.txt import_passwords
			dos2unix passwords.txt
	dos2unix ~~essid_list~~.txt		pyrit -f passwords.txt import_passwords
	lines=`cat ~~essid_list~~.txt\|wc -l`
	for (( i = 1; i <= $lines; i++ ))		dos2unix essids.txt
	do		lines=`cat essids.txt\|wc -l`
	essid=`tail -$i ~~essid_list~~.txt\|head -1`		for (( i = 1; i <= $lines; i++ ))
			do
	echo -e "Run #$i - $essid - Now processing...\n"		essid=`tail -$i essids.txt\|head -1`
	pyrit -f "$essid.cow" -e "$essid" batch
			echo -e "Run #$i - $essid - Now processing...\n"
	echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"		pyrit -f "$essid.cow" -e "$essid" batch
	rm -fr ~~/root/.pyrit~~/blobspace/essid/
	done		echo -e "Done - Exported to $essid.cow. Cleaning essid blobspace...\n\n"
			rm -fr $pyrit_prefs/blobspace/essid/
			done





	Check the [[Pyrit setup\|Pyrit setup guide]] for a installation reference.		Check the [[Pyrit setup\|Pyrit setup guide]] for a installation reference.

Ivc: /* SuperMicro Tesla GPU server */

2010-04-09T13:19:02Z

SuperMicro Tesla GPU server

← Older revision		Revision as of 13:19, 9 April 2010
Line 340:		Line 340:
	rm -fr /root/.pyrit/		rm -fr /root/.pyrit/

			dos2unix passwords.txt
	pyrit -f passwords.txt import_passwords		pyrit -f passwords.txt import_passwords

			dos2unix essid_list.txt
	lines=`cat essid_list.txt\|wc -l`		lines=`cat essid_list.txt\|wc -l`
	for (( i = 1; i <= $lines; i++ ))		for (( i = 1; i <= $lines; i++ ))

Ivc: /* Performance measurements */

2010-03-20T11:01:43Z

Performance measurements

← Older revision		Revision as of 11:01, 20 March 2010
Line 353:		Line 353:
	rm -fr /root/.pyrit/blobspace/essid/		rm -fr /root/.pyrit/blobspace/essid/
	done		done

			Check the [[Pyrit setup\|Pyrit setup guide]] for a installation reference.

	* [http://forums.remote-exploit.org/general-discussion/27003-supermicro-gpu-server-results.html Forum thread over at Remote-Exploit]		* [http://forums.remote-exploit.org/general-discussion/27003-supermicro-gpu-server-results.html Forum thread over at Remote-Exploit]