(untitled)

if i try to brute force a WPA2 password, is there anyway for someone to know besides using Wireshark? are there any logs on the router detecting weird activities? if so, what is the name of it or where can I start to read about how to remove traces from places I successfully brute-forced.

Yes there are ways that temporarily lock the router on multiple failed logins and likely keeps a log. Dont recall the name.

>>17757 Ever heard of Kismet?

How are you trying to brute force via the router? Just capture the WPA2 handshake and brute force it offline If you send a deuth it can get picked up, but you can passive listen and capture without detection If you do have to keep trying the router, how does it know to block you? Is it MAC address or does it block all attempts?

>>17757 bruteforcing is for noobx your attempts are logged in the router logs and you can't wipe router logs even if you reset them! there's also a method for any non-skid admin to detect you since your device in managed mode will show up and match the same channel as the admin and they can either just rotate the channel to break your script or triangulate you by and then call the cops (which I would do if you were to bruteforce my network). anyway it's a pretty noobish question, but at least I answered. board owner should make a new questions thread. >>17760 this is the correct method, it probably should take two weeks for a generic password bruteforce anyway do you have any recommendations of which software to use for offline bruteforcing or do you write your own tools?

>>17780 The standard is to use hashcat.

>>17758 You have to be more specific when you're talking about matters of security. When you don't know, think about asking a good question. You're technically right, in certain regards. Let's dissect what you said in order to improve upon it: >temporarily lock the router on multiple failed login attempts Technically, I think you're already wrong. This isn't "technically" just to be a dick, it actually matters here. The router doesn't get locked, even if it can control what it does to an extent. You're actually about 3/4ths right. If you're already on the network, going into the default gateway will in fact lock you out after a few login attemps. Resetting requires browser cache wipe and MAC change. If you're already on the WiFi network! If the actual router locked up each time, it actually allows DOS. I think that's a problem with WPA3. >What does get locked out? This, I know less well. I know modern routers will protect vs. ping of death attacks by blacklisting MACs which are spamming ICMP ping packets. Hping3 would only work if you can randomize the MAC. Again, you have to already be in the WiFi network >>17757 If you sniff the hash while a handshake is happening passively (wait for a client to connect) then no you actually don't have to be detected because that's technically passive scanning. As long as you don't send a deauth packet for the purposes of forcing a remade handshake, you're not easily detectable or legally vulnerable even.

>>17780 >triangulate you by and then call the cops How in the fuarrrk would they do that? Surely they can't just do that from one deauth+hash sniff?!? I have a bunch of questions for you... >Which type of bruteforce are we discussing? Just WPA2 password bruteforce? Like someone with a machine pretending to be many machines by shifting the MAC and attempting to put in the WPA2-PSK that way? Pardon my french, but that's completely retarded. COMPLETELY. Because you don't have to actually be there bruteforcing. >attempts are logged into the router logs If we're talking about administrative access by logging into the default gateway, then sure. What else is logged on this layer? I think a router would be able to find a deauth packet flood, right? But there's no way in hell you'd find me if I used a passive sniff to capture your stupid password hash, at which point I am able to do an offline bruteforce. You'll have nothing to worry about if your password is complex and not on any databases. However, accounts do get hacked so your password will be leaked sooner or later.

>>17780 >which software to use offline Any password generator to create and edit wordlists, but I use a custom grep script. Hashcat is the cracking utility. I may return at some point to name more names.

>>17793 >>17792 >completely retarded. COMPLETELY. Facts! You can do far more with your physical presence than constantly broadcasting to give away your position. You only need a couple of deauth frames at once, which do get logged too, by the router. A 'non-skiddie admin' would probably know how to find a deauthentication attack. But a few frames? Who cares... >>17791 > I think that's a problem with WPA3. I remember that expert dude on YouTube saying that. Are you quoting him? >>17793 Kali and Parrot have it, just virtualize them, hacker