Backtrack 4 question

iqon66

Hello guys

Im currently using the gerix-wifi programme on backtrack 4 and i would like to test my wpa-psk security of my router,My wpa-psk key has numbers and letters and im not sure where to get a list to do this if anyone could help me id appreciate it alot thanks all,

h57xiucj2z946q

Well the complexity of your key will determine the security of your WPA encrypted network. e.g. common dictionary word vs 50 char length key with random chars. I think you know which is more complex.

If your key is not in a common wordlist/dictionary, then you need to brute force, and this all depends on complexity of the key. Increased complexity increases required computational time. Only basic keys are feasible to brute force. It was determined in another thread that a key 8 chars in length, uppercase only on modern hardware could take around 80 days.

Anyways if you still wanna try this, you could use a tool called crunch to create your wordlists if you know some characteristics about the key. e.g. key length, and range of chars for the key.

For more info, see:
http://www.google.ie/search?q=crunch+aircrack&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

or even:
http://www.boards.ie/vbulletin/showthread.php?t=2056414510

iqon66

This is very complicated stuff, i wonder is there any simpler way to do this.

900913

iqon66 wrote: »

This is very complicated stuff, i wonder is there any simpler way to do this.

It's really straight forward. You can throw a common wordlist/dictionary at it or bruteforce it.

There is good info and wordlist links here:

http://www.darknet.org.uk/2008/02/password-cracking-wordlists-and-tools-for-brute-forcing/

iqon66

900913 wrote: »

iqon66 wrote: »

This is very complicated stuff, i wonder is there any simpler way to do this.

It's really straight forward. You can throw a common wordlist/dictionary at it or bruteforce it.

There is good info and wordlist links here:

http://www.darknet.org.uk/2008/02/password-cracking-wordlists-and-tools-for-brute-forcing/

Thanks dude i will have a go at it later many thanks

infodox

Unless I am mistaken there is a way to do it using Pyrit to generate the wordlist if you have a CUDA capable gfx card, but it has been a while since I bothered cracking WPA. Given enough time and effort, however, any key will fall.

If it is a dictionary word or a permuted dictionary word it would fall fairly easily (is there not a John patch for wpa?)

Also, if you want to learn about how it all works I suggest forgoing the GUI and doing it manually. I found that first doing it by hand then writing my own scripts for it helped me a lot with understanding it all, and also when you do it manually you have more fine grained control.

iqon66

Wep is a piece of cake to crack,its just the wpa and wpa2 keys.im getting the handshake and all just dont have the dictionary power to do it,i think the eircom wpa2-psk key consists of letters lower case and numbers,i have a vodafone im not sure what they are made up of.