3

DISCLAIMER: This router is mine, and this is purely for educational reasons, so please do not close this question.

I have aircrack-ng installed on my Ubuntu laptop. My wireless card drivers do not support packet injection, and I am trying to crack a WEP key using only monitor mode. However, I can't find a tutorial (I had one, but then I lost the link).

What is the syntax to listen to, save, and crack monitored packets?

cutrightjm
  • 4,424

2 Answers2

1

WindowsEscapist's instructions are correct, except they include the the sections for packet injection.

Basically, general procedure is to:

  1. Initialize your wireless adapter with airmon-ng start . This will sometimes give you a different name to use from now on (e.g. wlan0 turns into mon0.)

  2. Run airodump-ng . Once you've identified the AP, Ctrl+C to end the process.

  3. Run airodump-ng -w file-to-save-to --channel --bssid .

the commands that contains aireplay are used for injection attacks on the router.

GoldenStake
  • 51
  • 1
  • 4
0

Well it looks like there are some guides that have been posted since I last checked. In particular, this one is very helpful.

Basically, general procedure is to:

  1. Initialize your wireless adapter with airmon-ng start <wireless adapter>. This will sometimes give you a different name to use from now on (e.g. wlan0 turns into mon0.)

  2. Run airodump-ng <adapter name>. Once you've identified the AP, Ctrl+C to end the process.

  3. Run airodump-ng -w file-to-save-to --channel <AP's channel> --bssid <bssid or MAC address of target> <interface>.

To actually process this data, run aircrack-ng filename.cap. This will begin one crack attempt at execution, and if it does not succeed will try again at regular intervals. (This can be done at the same time as the other commands are being done in another tab.)