Wifi hacking

Can anyone recommend a guide or website for how to crack a wifi password?

wireshark (iirc) + ages of brute forcing.

>>21980 You seem like a novice. If you are really interested in this, why not learn about network security? But to answer your question, you could start with Aircrack-NG.

>>21981 >wireshark (iirc) kek >>21980 Other poster said it. It's not hard, it does take time, and you can discover weird things about your neighbors from password discovery without breaking any laws. Accessing secure digital infrastructure is illegal, cracking the password is not.

>>21980 All you need to do is use airmon-ng + airodump-ng to grab auth handshakes, deauth them (this is illegal), then aircrack-ng with a big juicy wordlist. Let me spoonfeed harder: >airmon-ng start <DEVICE> Enter monitoring mode. >airodump-ng -c <CHANNEL> --bssid <MAC ADDR OF AP> -w <FILE PREFIX> <DEVICE> Sniff out the auth and save it to a file >aireplay-ng --deauth 0 -a <AP'S MAC ADDR> -c <TARGET MAC ADDR> <DEVICE> Throw deauths at the WiFi of your choice to help speed along getting those auth packets. DO NOT DO THIS WITHOUT PERMISSION, THIS IS THE ILLEGAL PART. >aircrack-ng -w <WORDLIST> -b <MAC ADDR OF AP> <CAPTURE FILE> Crack the password.

>>21990 Saving this, thanks lainon.

>>21990 >deauth them (this is illegal) you can just wait for them to leave their house and come back. They'll have to authenticate when they get in wifi range and you can capture that. deauth is 100% more convenient for the attacker, but waiting for them to come home is still legal. Then to crack the password is just doing math which isn't illegal. once you use that password to gain unauthorized access to their device, that is illegal. if you want to use rainbow tables for cracking, info.org has 8TB of rainbow tables for free. Will be a long download, but they go to some conventions like DEFCON in the US where you can give them a HDD and they will just images the tables to the drive directly over ~20hr. https://infocon.org/rainbow%20tables/

>>21980 though i approve of learning the "proper" way, you could just use airegeddon. it basically just automates the annoying parts like the copy pasting and mistyping/forgetting a command. once you go airegeddon you never go back. >>22688 rainbow tables are obsolete, use hashcat.

>>21990 Love it. Good to have these commands in one place like this. Note for everyone, though: Aircrack-ng itself is pretty slow unless youre using it to reverse WEP RC4 encryptions. You may want to convert the output from airodump and do any cracking in hashcat using rules based on known default password keyspaces.

>>21980 Some info about wifi security.

Has nothing changed in wifi hacking in the past 5 years? This is exactly what I was doing in the late 2010s

>>21980 It can be easy but it really depends on the implementation of the network's security. You sound kind of new so I'll recommend a beginner friendly book. >>22720 Yeah pretty much the only thing that has changed is that wps attacks are obsolete for some reason

>>22718 >hashcat + known default password keyspaces well, sure. but itll still take a stupid amount of time to crack an 8 character alphanumerical password. And i sure hope youre using a gpu. my "strategy" is to target access-points with custom names because theyll almost certainly also have a custom password thats probably soykaf and just wordlist crack it using the legendary "rockyou" wordlist. it worked so often i cant even keep count. and if the password isnt in rockyou its just not worth my time, but i do live in a city with an abundance of nearby targets. rockyou v2021: https://github.com/ohmybahgosh/RockYou2021.txt if it is worth your time to mask-attack you might want to use Amazon™ AWS™ cloud compute instances. its not much harder and a 25$USD/hour EC2 P3 gets you 6519.9 KH/s running hashcat on wpa hashes. my (oldass) gpu gets me like 190KH/s tops.

>>22725 >my (oldass) gpu what gpu? I always thought gpus were like only like 3x faster than cpus so I always used my i5 8400 at 15k instead of my 3060 ti

>>22726 just run hashcat's benchmarking feature and see for yourself which is faster "hashcat -b -m 2500 -D 1" for cpu and then "-D 2 " for gpu... i think

Is wifite2 still state of the art for wpa2 attacks? Also a video I watched on this claims you should have two wifi dongles for this - one to listen for handshakes and the other to send deauth packets. Is this really needed?

>>22828 Maybe there's some advantage to doing that, but it doesn't seem to be strictly necessary. Here's a quick demo of deauthing, capturing EAPOL, and cracking WPA with one (onboard/OEM) wireless adapter https://www.youtube.com/watch?v=CzXBC3AWmkE

I did write a simple Bash script using some default Linux tools. Granted, it will be slower than a dedicated program and less effective at consooming CPU resources. But this will be your program.

>>22727 for me, personally on an old dusty machine (Intel(R) Core(TM) i3-4160 CPU @ 3.60GHz) aircrack-ng is faster than hashcat. ~5500 hps vs ~4600. Maybe i'm reading it wrong, but it's always worked for me. With this kind of hardware if I don't hit with something like one of the smaller xato.net lists ~5-10MB I either try another type of attack or move to another network.

>>22855 or i try to pawn the work off to a friend with a faster machine somewhere or something, I should add. I remember at one time cracking md5's from phpnuke sites I could get those hashcracking sites to work, back when milw0rm and stuff was still around. I've never successfully gotten one of them to give me the plaintext to a wpa2 though.

>>22828 Wifite is ok, airgeddon is better. It just simplifies all the crap with aircrack, airreplay, airomon-ng, and having all that stuff going on at once into an convenient script. I'm sure some will argue you should do it manually though otherwise you're lame. Maybe there are better ways now as well.

>>22855 >for me, personally on an old dusty machine (Intel(R) Core(TM) i3-4160 CPU @ 3.60GHz) aircrack-ng is faster than hashcat. but youre using the cpu... the entire point of hashcat is to do gpu cracking. my old dusty r9 290 graphics card is as old as your cpu and its literally 35x faster just because its a gpu >>22857 +1 for airgeddon

Can anyone recommend software for pure SSID and BSSID scanning? Ideally I'd collect SSID, BSSID, signal strength at a minimum. I mainly want to chart SSIDs in my area along with timestamps of when they were seen. +1 if there is a library I can use in either Python or Go.

>>23377 airodump-ng or kismet

>>23377 Use kismet and wigle wifi for this purpose

>>23377 >I mainly want to chart SSIDs in my area its called wardriving