WLAN Cracking in 2022

ITT we post our experiences cracking WLANs in 2022. Despite what the disclaimer says, it's extremely hard not to practice WLAN cracking in the wild. As an amateur stoner greyhat, I view it as OK as long as you don't actually do any damage to any of the systems you touch. Technically, it's illegal as soon as you broadcast 802.11 management frames, or attempts to authenticate to WPS. I'll discuss two methods to hack a WLAN that are reportedly effective in 2022. They both require aircrack-ng to be installed: >reaver When I first heard about Reaver, I didn't take it seriously because I heard that most hardware manufacturers have indeed patched this vuln. Reaver has an option for that. And as it turns out, anons have said Reaver still works. They said WPS cracking works in 2022, at least. Reaver comes with many tools, Kali Linux, and you can install it using a package manager or Github. I just tested Reaver out. I have to say, it's as wonky as you would expect from a tool made about 11 years ago. I remember the GitHub comments saying something about the tool being stuck on association. That's where I got stuck on Reaver. One of the GitHub pages has a special shell script which actually uses aircrack to authenticate. So just like Wifite and Fluxion, this tool uses aircrack. >wifite/fluxion Capturing the WPA2-PSK handshake, and then bruteforcing it or roll-jamming it is your other way to do it. You'll need WiFite and Fluxion with all dependencies installed. Pretty easy. Then again, these are aircrack-ng frontends. !!!DISCLAIMER!!!: >All activity in this thread is discussed in a controlled environment, within the legal confines of the country in which it is performed. Radio jamming is illegal and discouraged. This post cannot be used as evidence in any court, beyond theoretical research examination. Proper consent was always gathered, and nothing + no one was exploited. This post, and all replies to it, are strictly for research purposes. The author's express permission is given to archive this post. We hope it benefits academia.

>>19853 There's a lot more information to share on this topic. >be sure to spoof the MAC of your NIC, and also not use your hardMAC. You can use all sorts of utilities to change your MAC. These include ifconfig, ip, and macchanger. >WPA3-PSK is getting phased in, slowly. The global economic collapse has slowed progress. People are getting new stuff less, so the rollout of WiFi 6 and WPA3-PSK has been delayed. Many sysadmins are not happy about their systems suddenly becoming 'legacy', and refuse to update. Many people may run old hardware. Nevertheless, WPA3-PSK is popping up in the wild. >With WPA3-PSK, everything depends on aircrack suite devs who are staying pretty silent. Even rumours that they are working on WPA3 are unconfirmed. >This is still a pretty powerful attack vector in many situations, due to how easy it is to pull off. Hackers have found weaknesses in WPA3-PSK though. They depend on spoofing your MAC as well. >Getting creative makes this hack more powerful For example, I've seen anons use cell phones to perform wardriving and even deauth. Same thing with Pis. If you use a directional 802.11 antenna, you can discriminate access points. Hell, you can even bounce the signal off the water. >IPV6 is a privacy issue because it can give away your hardMAC

>>19854 I always run this script at startup; I encourage everyone to do the same #!/bin/bash # Disable the network devices systemctl stop NetworkManager.service sleep 5 ip link set dev wlp1s0 down # Spoof the mac addresses macchanger -r wlp1s0 # Set a random hostname old=$(cat /etc/hostname) new=$(tr -dc 'A-Z0-9' < /dev/urandom | head -c7) sed -i "s/$old/DESKTOP-$new/g" /etc/hosts sed -i "s/$old/DESKTOP-$new/g" /etc/hostname hostname "DESKTOP-$new" echo Old hostname: $old echo New hostname: $(hostname) # Re-enable the devices ip link set dev wlp1s0 up systemctl start NetworkManager.service exit 0 The random hostname is based on the default random Windows installation hostname so probably most common