How To Hack Wi-Fi - Crack WPA2-PSK Passwords - FOCSoft

• Hello Friends, I'm Here With New Topic (Wifi Hacking),..

When Wi-Fi was first developed in the late 1990s, Wired Equivalent Privacy was created to give wireless communications confidentiality.
WEP, as it became known, proved terribly flawed and easily cracked.

-->

As a replacement, most wireless access points now use Wi-Fi Protected Access II with a pre-shared key for wireless security, known as WPA2-PSK. WPA2 uses a stronger encryption algorithm, AES, that's very difficult to crack—but not impossible.

The weakness in the WPA2-PSK system is that the encrypted password is shared in what is known as the 4-way handshake.
When a client authenticates to the access point (AP), the client and the AP go through a 4-step process to authenticate the user to the AP.
If we can grab the password at that time, we can then attempt to crack it.


Step 1: Put Wi-Fi Adapter in Monitor Mode with Airmon-Ng

Let's start by putting our wireless adapter in monitor mode.
This is similar to putting a wired adapter into promiscuous mode.
It allows us to see all of the wireless traffic that passes by us in the air.
Let's open a terminal and type:

• airmon-ng start wlan0
  

Note that airmon-ng has renamed your wlan0 adapter to mon0.



Step 2: Capture Traffic with Airodump-Ng

Now that our wireless adapter is in monitor mode, we have the capability to see all the wireless traffic that passes by in the air.
We can grab that traffic by simply using the airodump-ng command.

This command grabs all the traffic that your wireless adapter can see and displays critical information about it, including the BSSID (the MAC address of the AP), power, number of beacon frames, number of data frames, channel, speed, encryption (if any), and finally, the ESSID (what most of us refer to as the SSID).
Let's do this by typing:

• airodump-ng mon0
  

Note all of the visible APs are listed in the upper part of the screen and the clients are listed in the lower part of the screen.




Step 3: Focus Airodump-Ng on One AP on One Channel

Our next step is to focus our efforts on one AP, on one channel, and capture critical data from it.
We need the BSSID and channel to do this.
Let's open another terminal and type:

• airodump-ng --bssid 08:86:30:74:22:76 -c 6 --write WPAcrack mon0
  
• 08:86:30:74:22:76 is the BSSID of the AP
• -c 6 is the channel the AP is operating on
• WPAcrack is the file you want to write to
• mon0 is the monitoring wireless adapter*
  

As you can see in the screenshot above, we're now focusing on capturing data from one AP with a ESSID of Belkin276 on channel 6.
The Belkin276 is probably a default SSID, which are prime targets for wireless hacking as the users that leave the default ESSID usually don't spend much effort securing their AP.



Step 4: Aireplay-Ng Deauth

In order to capture the encrypted password, we need to have the client authenticate against the AP.
If they're already authenticated, we can de-authenticate them (kick them off) and their system will automatically re-authenticate, whereby we can grab their encrypted password in the process.
Let's open another terminal and type:

• aireplay-ng --deauth 100 -a 08:86:30:74:22:76 mon0
  
• 100 is the number of de-authenticate frames you want to send
• 08:86:30:74:22:76 is the BSSID of the AP
• mon0 is the monitoring wireless adapter

Step 5: Capture the Handshake

In the previous step, we bounced the user off their own AP, and now when they re-authenticate, airodump-ng will attempt to grab their password in the new 4-way handshake.
Let's go back to our airodump-ng terminal and check to see whether or not we've been successful.

Notice in the top line to the far right, airodump-ng says "WPA handshake."
This is the way it tells us we were successful in grabbing the encrypted password!
That is the first step to success!


Step 6: Let's Aircrack-Ng That Password!

Now that we have the encrypted password in our file WPAcrack, we can run that file against aircrack-ng using a password file of our choice.
Remember that this type of attack is only as good as your password file.
I'll be using the default password list included with aircrack-ng on BackTrack named darkcOde.

We'll now attempt to crack the password by opening another terminal and typing:

• aircrack-ng
• WPAcrack-01.cap
• -w /pentest/passwords/wordlists/darkc0de
  
• WPAcrack-01.cap is the name of the file we wrote to in the airodump-ng command
• /pentest/passwords/wordlist/darkc0de is the absolute path to your password file
  

How Long Will It Take?
This process can be relatively slow and tedious.
Depending upon the length of your password list, you could be waiting a few minutes to a few days.
On my dual core 2.8 gig Intel processor, it's capable of testing a little over 500 passwords per second.
That works out to about 1.8 million passwords per hour. Your results will vary.
When the password is found, it'll appear on your screen. Remember, the password file is critical.

                                   

-->

          If You Need Any Kind Help (Related This Topic) Reply Here

Read More

How To Secure Your WiFi Network (Easy Tutorial) - FOCSoft

Hello guys, In this tutorial we'll be discussing how to secure your WiFi from Intruders, Crackers etc. Here's a list of stuff that we are going to discuss in this tutorial:

- Router Features
- Strong Encryption
- Low WiFi Strength and Proximity
- MAC Filtering
- Strong Password
- Hiding WiFi SSID
- Upgrading Your Firmware

- Router Features

The first most step towards security is to see whether your device has the appropriate features to make itself secure. As for Routers especially the one's with WiFi. Security features are a must to avoid intruders to break in and take pleasure of your shit :P

Always choose a Router which has most of the Security Features, Some of the importatnt one's I'll list below:

1) Firewall - This is totally essential, as you can assign rules that can prevent certain users to find out local computers on your Lan even if the intruder has penetrated your network but will be unable to extract data.

2) MAC Filtering - ?I don't consider this as a useful feature as it can be easily tackled by spoofing your MAC with the one the Original Owner has but still this can come in handy.

3) Strong WiFi Encryption - If you want to make sure your wifi is secure enough, then always have a router that offers the latest Encryption which is the WPA2-PSK (WEP is totally weak and is very easy to crack so watch out)

4) Advance Wireless Options - Advance Wireless options are must, because they too offer some options that can be crucial sometimes if you are trying to secure your network

- Strong Encryption For WiFi Password

The most popular and strong encryption method available on WiFi is the WPA2-PSK, Here's a little intro about WPA2-PSK:

Encryption scrambles messages so that an opponent or attacker cannot intercept them. Most encryption is based on encryption keys, which are merely secret codes used to scramble and unscramble the message. Strong encryption requires strong keys.

WPA2-PSK (Preshared Key) is the strongest and most practical form of WPA for most home users. WPA2 is more secure than WPA because it uses the much stronger AES (Advanced Encryption Standard) protocol for encrypting packets.

Unlike WEP, WPA2-PSK is a hard one to crack due to it's strong encryption. I would recommend never using WEP as it's totally easy to crack using Backtrack or Kali.

- Low WiFi Strength and Proximity

One more way to secure your WiFi is to decrease your signal broadcast, so that it's only available in a small area surrounding your router (E.g Your room). I find this method usually efficient because you can access the network in a certain proximity. This is easy to do and the option to do this is available in the "Advance Wireless" settings in most routers. Here's how I set it up:

Image has been scaled down 13% (605x79). Click this bar to view original image (693x90). Click image to open in new window.

Hence this can be a useful trick to have personal security and to make sure that your WiFi is available to the user at your home only

- MAC Filtering

In MAC Filtering, you can assign certain MAC Address of computers on a network whether they can access the network or not. Using MAC Filtering you can assign your network user's MAC address to the filter so that the MAC listed in the filter is only allowed to access the Network/Internet.

To do this, there must be an option in your new router which states "MAC Filter" go to that section and set it up. Here's how I did it in my Router:

Image has been scaled down 13% (605x259). Click this bar to view original image (695x297). Click image to open in new window.

- Strong Password

Having a strong encryption doesn't mean your password is safe and secure from being cracked or brute forced. Common and weak passwords are easily cracked hence you need to assure that the password you assign to your network is pretty complex and won't get cracked easily.

For Example:

8%jN,M3IJP\BzboScT$\!Ia\SF3fAi-IcigZ%isD,nPxE3ErV6jKO9DrNFLYxKr

This 504 bits password is a badass one, hard to crack

superman123

On the other hand this password is easy to crack because of 1 thing:

The Word Superman is in the dictionary and the attacker can launch a dictionary attack and might get successful

You can generate strong random passwords from this website: Click Here

- Hiding WiFi SSID

SSID is the name of your WiFi like "Dlink" which appears in the list of WiFi Connections available when user searches for one. Here's an option under the same "Advance Wireless" section of my Router:

After doing this, my WiFi network will not be visible to the client and if he/she wants to connect then the SSID and the password have to be entered manually

- Upgrading Your Firmware

Routers have default Firmware installed which don't offer much options and flexibility, Although there are custom firmwares available for Routers that provide thousands of robust and security features. One of those firmware is DD-WRT, It's the most popular of all.

Get the most latest DD-WRT firmware for your router here Click Here

Note: Before installing the firmware, make 100% sure that the current DD-WRT version is supported by your router, by checking out their router database

Here are some of it's features:




Adjust Transmission Power
Dynamic DNS (More Hosts Supported)
Virtual LAN
Wireless Distribution System
RADIUS Auth (More powerful Encryption for WiFi )
VPN Access
SSH Access
USB Support
Virtual Server
Advance Routing
Quality OF Service
Afterburner (Enhanced WiFi Signal for more coverage )

I hope This tutorial help you,

If You Need Any Kind Help (Related This Post), Reply Here

Read More

How To Hack Wifi Or Wireless Password 2014 - FOCSoft

How to Hack Wifi or Wireless Password
Hello Friends, today i will explain you how to crack Wifi or wireless password in just 10 to 15 minutes. In my previous articles i have explained the different wireless scanning tools and scanning wireless networks using NetStumbler. Today i will explain How to Hack or Crack Wifi Password. Today's hack will be based on cracking the WEP encryption password. So guys tighten your belts for new hack and lets start hack wifi. I have also included the video at bottom of the post. So guys read on and watch ....

STEPS TO HACK WIFI OR WIRELESS PASSWORD

1. Get the Backtrack-Linux CD. Backtrack Linux Live CD(best Linux available for hackers with more than 2000 hacking tools inbuilt).
Download Backtrack Linux Live CD from here:

http://http://www.backtrack-linux.org/downloads/


2. SCAN TO GET THE VICTIM

Get the victim to attack that is whose password you want to hack or crack.
Now Enter the Backtrack Linux CD into your CD drive and start it. Once its started click on the black box in the lower left corner to load up a "KONSOLE" . Now you should start your Wifi card. To do it so type

airmon-ng

You will see the name of your wireless card. (mine is named "ath0") From here on out, replace "ath0" with the name of your card. Now type

airmon-ng stop ath0

then type:

ifconfig wifi0 down

then type:

macchanger --mac 00:11:22:33:44:55 wifi0

then type:

airmon-ng start wifi0

The above steps i have explained is to spoof yourself from being traced. In above step we are spoofing our MAC address, this will keep us undiscovered.

Now type:

airodump-ng ath0





Now you will see a list of wireless networks in the Konsole. Some will have a better signal than others and its always a good idea to pick one that has a best signal strength otherwise it will take huge time to crack or hack the password or you may not be able to crack it at all.
Once you see the networks list, now select the network you want to hack. To freeze the airodump screen HOLD the CNTRL key and Press C.
:




3. SELECTING NETWORK FOR HACKING

Now find the network that you want to crack and MAKE SURE that it says the encryption for that network is WEP. If it says WPA or any variation of WPA then move on...you can still crack WPA with backtrack and some other tools but it is a whole other ball game and you need to master WEP first.



Once you've decided on a network, take note of its channel number and bssid. The bssid will look something like this --

00:23:69:bb:2d:of

The Channel number will be under a heading that says "CH".





Now in the same KONSOLE window type:

airodump-ng -c (channel) -w (file name) --bssid (bssid) ath0


The file name can be whatever you want. This file is the place where airodump is going to store the packets of info that you receive to later crack. You don't even put in an extension...just pick a random word that you will remember. I usually make mine "Ben" because I can always remember it. Its simply because i love ben10....hahahahahaha

Note: If you want to crack more than one network in the same session, you must have different file names for each one or it won't work. I usually name them as ben1, ben2 etc.

Once you typed in that last command, the screen of airodump will change and start to show your computer gathering packets. You will also see a heading marked "IV" with a number underneath it. This stands for "Initialization Vector" but in general terms all this means is "packets of info that contain characters of the password." Once you gain a minimum of 5,000 of these IV's, you can try to crack the password. I've cracked some right at 5,000 and others have taken over 60,000. It just depends on how long and difficult they made the password. More difficult is password more packets you will need to crack it.



4. Cracking the WEP password

Now leave this Konsole window up and running and open up a 2nd Konsole window.
In this window type:

aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 ath0

This will send some commands to the router that basically it is to associate your computer even though you are not officially connected with the password. If this command is successful, you should see about 4 lines of text print out with the last one saying something similar to "Association Successful :-)"
If this happens, then good! You are almost there.

Now type:
aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 ath0

This will generate a bunch of text and then you will see a line where your computer is gathering a bunch of packets and waiting on ARP and ACK. Don't worry about what these mean...just know that these are your meal tickets. Now you just sit and wait. Once your computer finally gathers an ARP request, it will send it back to the router and begin to generate hundreds of ARP and ACK per second. Sometimes this starts to happen within seconds...sometimes you have to wait up to a few minutes. Just be patient. When it finally does happen, switch back to your first Konsole window and you should see the number underneath the IV starting to rise rapidly. This is great! It means you are almost finished! When this number reaches AT LEAST 5,000 then you can start your password crack. It will probably take more than this but I always start my password cracking at 5,000 just in case they have a really weak password.

Now you need to open up a 3rd and final Konsole window. This will be where we actually crack the password.
Now type:
aircrack-ng -b (bssid) (filename)-01.cap

Remember the file name you made up earlier? Mine was "Ben". Don't put a space in between it and -01.cap here. Type it as you see it. So for me, I would type wepkey-01.cap
Once you have done this you will see aircrack fire up and begin to crack the password. typically you have to wait for more like 10,000 to 20,000 IV's before it will crack. If this is the case, aircrack will test what you've got so far and then it will say something like "not enough IV's. Retry at 10,000."
DON'T DO ANYTHING! It will stay running...it is just letting you know that it is on pause until more IV's are gathered. Once you pass the 10,000 mark it will automatically fire up again and try to crack it. If this fails it will say "not enough IV's. Retry at 15,000." and so on until it finally gets it.

If you do everything correctly up to this point, before too long you will have the password! now if the password looks goofy, dont worry, it will still work. some passwords are saved in ASCII format, in which case, aircrack will show you exactly what characters they typed in for their password. Sometimes, though, the password is saved in HEX format in which case the computer will show you the HEX encryption of the password. It doesn't matter either way, because you can type in either one and it will connect you to the network.

Take note, though, that the password will always be displayed in aircrack with a colon after every 2 characters. So for instance if the password was "secret", it would be displayed as:
se:cr:et

This would obviously be the ASCII format. If it was a HEX encrypted password that was something like "0FKW9427VF" then it would still display as:
0F:KW:94:27:VF


Just omit the colons from the password, boot back into whatever operating system you use, try to connect to the network and type in the password without the colons and presto! You are in!

It may seem like a lot to deal with if you have never done it, but after a few successful attempts, you will get very quick with it. If I am near a WEP encrypted router with a good signal, I can often crack the password in just a couple of minutes.






I am not responsible for what you do with this information. Any malicious/illegal activity that you do, falls completely on you because...technically...this is just for you to test the security of your own network.
guys hope You'll like it..

Read More

How To Bypass WIFI Access Controls - FOCSoft

Bypass WIFI Access Controls using Session Stealing-Wirless Hacks

First, you must have the Aircrack-ng Suite of tools installed so we can use airmon-ng to scan for active hosts:
**IMPORTANT: Your wireless card does not have to be compatible for packet injection!!! If it will work when you type airmon-ng start then you are good to go! 99% of wireless cards will work for this!


sudo apt-get install aircrack-ng
Next, you must install macchanger, its a tool used to spoof your mac address to match an active client's:
sudo apt-get install macchanger

Session Stealing
First, find your wireless device name, usually "wlan0", and put it in monitor mode with airmon-ng:
sudo airmon-ng start wlan0

**note, your device is probably named "mon0" now, or if it is USB, the name may not have changed.
Now, scan for your target network, by typing:
sudo airodump-ng mon0
1.Look for the list of networks, find the one you are targeting, and copy the BSSID:

2. Now, you are going to filter out other networks and users by monitoring just the network you are targeting:

sudo airodump-ng --bssid mon0
3. Find an active session with a host that we can steal:


4.copy the MAC address of the client whose session we are going to steal.

5.stop monitor mode on your wireless device, if it is usb, just unplug it and plug it back in, if it is a wireless card type:
sudo airmon-ng stop mon0 **note: if your device is not "mon0" just type whatever it was after you started it.

6.Now, you are going to spoof your mac address to match the client we just copied:
1.stop the wireless device: sudo ifconfig wlan0 down **substitute wlan0 for your device name.
2.change the mac address: sudo macchanger -m wlan0
2.start the wireless device sudo ifconfig wlan0 up **substitute wlan0 for your device name

7.Use the connection manager to connect, and you have now stolen a session, and can use the internet your victim paid for!

Source:awardspace

Read More

Cut Some Off Who Is Using Your Wifi - FOCSoft

About The Method:
The Method Is Completely Legal & It's Very Useful If Some Stranger Is Using Your Wifi You Can Easily Cut Him Off Forever Or Allow If You Want To Do It Later On. It's Just About Accessing Your Wireless Adapter:>.Best Regards To (FOCSOft)


The Method:

• Open Your Browser & Enter This : "192.168.0.1" In The Address Bar Of Your WebBrowser With No Inverted Commas, & Hit Enter
  

• 
  
• A Screen Will Appear Demanding User name & Password, Enter "admin" In Password Field As Well As In User name Field.

• Once Your In Your Wireless Settings Click On The Wireless Choose Wireless Statistics From The Options At The Left.
  

• You Will See Many Mac Address Now From Here You Have To Copy The Mac Address Of The Device You Want To Cut Of & Copy It. To Find The Mac Address You Can Either Test It On Every Device For Example Disable One Mac Address Then Check It On Your Current Device For Example Laptop , Then Check It On Your Brothers Computer , Then On Your Mom's And Dad's Phones. Thus If It Is Not Working On Your Brothers That Means It's His Mac Address.

OR!

• If In Cmd Type : arp -a & All Ip Addresses Along With Mac Address Will Appear ! (Inaccurate)

• The Click On Wireless Mac Filtering & Make Sure That It Is Enabled & Click Add New

• Then In The New Screen Enter Mac Address And Description ,Description Is Not Necessary & Press Save. Done The Person Is Cut Off Unless You Want To Allow Him To Use Your Internet.
  

The Method Above Might Not Be Same But It Will Be Similar  

Read More