- WellCome! Wifi 2016 Hackers

6 Answers

8.8k Views

How to Crack WPA2 and WPA WiFi Password – Step by step!

A COMPLETE GUIDE

This tutorial will show you how to crack WPA2 and WPA secured wireless networks. Please note that this is not the Reaver attack.

If you want to crack WPA/WPA2 using ReaverThe process is done by airmon-ng suite. Many steps are same for WEP cracking and WPA/WPA2 as well.

NOTE: This tutorial is for Educational Purposes Only!

What You’ll Need

For this you will require all the basic things like a computer, spare time, etc. But important things are as follows:

BackTrack OS. Backtrack is a bootable Linux distribution with lots of pen-testing tools and is almost needed for all my tutorials.
A compatible wireless network adapter. If you are live booting BackTrack then the internal adapter will work but I recommend an external wireless adapter.

Let’s Get Started

Step 1:Boot into BackTrack

You can use any method to boot into backtrack; like from live cd, VMware, dual boot, etc. So, just boot it first into the GUI mode and open up a new console(command line) which is in the taskbar.

Step 2: Gather Information

Before launching the attack you need to know about your wireless network interface name, make your wireless card is in monitor mode. Then get the BSSID ( it is the series of unique letters and number of a particular router) of the access point. So let us do all these things.

First lets find your wireless card. Inside terminal or console, type:


airmon-ng

Press Enter and there you should see a list of interface names of different devices. There should be a wireless device in that list you you have connected it to BackTrack. Probably it may be wlan0 or wlan1.

hack WPA2 and WPA WiFi password

Enable monitor mode. Supposing your wireless card interface name as wlan0, type this command in that same console.


airmon-ng start wlan0

This code will create a new monitor mode interface mon0 like in the screenshot below which you want to keep note of.

hack WPA2 and WPA WiFi password

Search the BSSID and channel of the Access Point (router) you want to crack.Now let us find the information. For this type the following and press Enter


airodump-ng mon0

hack WPA2 and WPA WiFi password

Then you will see a list of Wireless Networks available around you and please keep note of the BSSID and channel of the ESSID (wireless network) you want to crack. Please note that the less the number is in the PWR column the close you are to the router; example mine is (-42) which means i am quite near to the router. When you find it hit CTrl+C to stop it scanning and enter the following:


airodump-ng --bssid (AP BSSID address) -c (chaneel no) -w (file name you want to save with) (monitor interface

So, in my case it will be


airodump-ng --bssid 54:E6:FC:E0:AC:FC -c 1 -w WPAcrack mon0

Then the screen will look like this:

hack WPA2 and WPA WiFi password

Step 3: Let’s Get Cracking

Now, its time to capture a 4-way handshake so that we can use it to get the plain password of the network. Here is a little tricky part, if there is a client connected to the network then there will a mac address listed in the “station column” like in the screenshot below and if not then you will have to wait for someone to connect it to get 4-way handshake.You will get the handshake if anyone tries to connect to that network.

But, if there is someone is connected on the network then you can deauthenticate him so that he will try to reconnect and you will be able to get the handshake. To deauthenticate him enter the following code in new console. But, before take note of the Mac Address of the station.


aireplay-ng -a (BSSID of the network) -c (MAC address of the client) -0 20 (for deauntheticate "20" for no of packets to send) (monitor interface)

You can send any no of packets but few packets would be enough. In the image I have send 0 packets which is unlimited but it is better you send few packets and only and if you don’t get the handshake you can hit Ctrl+C to stop the process and redo it again.


aireplay-ng -a 54:E6:FC:E0:AC:FC -c 9C:4E:36:4E:F5:F0 -0 20 mon0

hack WPA2 and WPA WiFi password

Now it will send deauthentication packet and if you are close to the network and if everything goes right then he will get disconnected and will try to connect again and we will get the 4-way handshake file in the top right corner of the airodump screen as shown below. But, the client should also be physically close to your wireless adapter network range so that it can deaunthecate them.

hack WPA2 and WPA WiFi password

Step 4: Cracking The Password

Now its time to crack the 4-way handshake which is little difficult to do. There are lots of ways to do it but I will show you the simple one.

First let us see where is our saved .cap(4-way handshake) file so please enter the following :

ls

It will show you the list of files in your Desktop. The screen would look like this.

hack WPA2 and WPA WiFi password

Now, lets bruteforce the .cap file using aircrack-ng. You will need a Dictionary or word list file to get it work. There are few of them already in the BackTrack but you can download more. Aircrack simply tries to match the word from the dictionary to the .cap file and if matched then it will show the password but if the word is not in the dictionary then it will fail. We are using the darkc0de.lst password list which can be found in “/pentest/passwords/worldlists/darkc0de.lst” of BackTrack. Enter the following command


aircrack-ng -w (location of the password list) (cap file *.cap)

In my case,


aircrack-ng -w /pentest/passwords/worldlists/darkc0de.lst" WPA2crack-01.cap

Depending upon the speed of your CPU and the size of the password file it could take a lot of time. The -01 is automatically added by the BackTrack and everything is case sensitive. After executing this command the screen will look like this.

hack WPA2 and WPA WiFi password

If the key is found then it will say, “KEY FOUND!” like in the screenshot below and if not it will say, The pass-phrase is not in the Dictionary or something like this. So, if it is not found then you can try to bruteforce it by trying every combination of word which will take lots of time. I will teach the other methods soon like brute forcing .cap by using Graphics card and so on. So, stay tuned.

Written 14d ago • View Upvotes

Related Questions

More Answers Below

Divesh, Learning about Myself

28.5k Views

Hey, For sure, Many of you have noticed that this above mentioned link on the Fred Diew's answer doesn't work and rather shows Warning in browse while going further ! (As Expected) {30+ Upvotes!! ,Gr8}

Guys, just have a look at this(BELOW) post also and I don't want to say that I am 100% correct even there,but to a certain extent.

JUst think guys, ARe the WIFI ROUTER Manufacturers fool ? That they know that there are some apps somewhere on internet that can Easily crack password of WiFi (router), but despite knowing that, they are still making the same vulnerable Routers that can be easily hacked by any noob who doesn't even know what exactly a Router is!

Things are not that easy. Have a look at my answer also if you have time and FREE INTERNET from a HACKED WIFI using that above app!

Which WiFi hacking software for android really works for an unrooted phone? by DiveshDivesh's answer to How can I hack a Wi-Fi network?

Sorry, I don't meant to meant offend anyone,but I also have gone through this phase where I did a hell lot of search on this shit! (Both in Rooted & Unrooted phase :p ).

PS: Please, Please let me also know such apps if you guys find any.

EDIT: Hope you guys know about Wireshark & packet sniffing, BUT on HTTP ! And most of the sites nowadays have turned to HTTPS, so this will create problem!

Updated 8 Apr • View Upvotes

Anuraag Kushwaha, Software Engineer, loves ethical hacking

51 Views

Well actually there's no solid android app which can hack wifi passwords. All of them uses brute force to find the password which takes a very long time and most of the times is not successful. So android isn't reliable for cracking wifi passwords.

I recommend using kali linux or Ubuntu. They will also use the same process that is brute force. But it will be fast and will 100% work.

Written 5h ago • View Upvotes

Aditya Arora, Android Enthusiast

7.4k Views

You can crack wifi passwords using one of the following methods:

( Method 1 works for both rooted and non-rooted phones but Method 2 is only for rooted phones and Method 3 for rooted phones having Broadcom chipset )

Method 1 : AndroDumpper app for both rooted and non-rooted devices (WPS enabled wifi)

This application has two methods to connect:
- Root Method : Supported all android version but should be rooted.
- No Root Method : supports only Android 5 (Lollipop) and up.

First of all download and install the app.
Open the app. Then it will check for wps enabled wifi networks.
Select the wifi network you want to crack & Click on 'Try Connect'.
If you know the wps pin select "Custom Pin".
Else try with "No Custom Pin" and "Brute Force".
For 'Brute Force' you may need a dictionary containing pins. You can download one from the links given below.

500 Pins:
https://drive.google.com/open?id=0BzKLb-Q5X_sbdVhkSEEyRkU1azQ
1000 Pins:
https://drive.google.com/open?id=0BzKLb-Q5X_sbYnF0dnBYU29oTmM
5000 Pins:
https://drive.google.com/open?id=0BzKLb-Q5X_sbVkd4akN1czFnRzQ

Method 2 : Android App to crack password of WPS enabled router :

Download this free android app WPS WPA TESTER from playstore and simply follow on-screen instructions.

This app requires ROOT permissions. This method supports only some routers that are WPS enabled and permits super user.

So you can just give a try if it works for your wifi router.

Method 3 : If your mobile has Broadcom Chipset :

This only works with mobile phones that have Broadcom Chipset and support monitor mode.

First of check your mobile phone's chipset by google search or you can use any free app like CPU-Z .

And if it is bcm4329/4330 then you can refer to the steps mentioned here.

NOTE : Use these apps/tricks only for educational purposes.

Updated 12 May • View Upvotes

Suman Tripathi, Android Development center in Noida India and Dallas USA.

870 Views

Lets first understand how to hack the password, Android WI-FI hack apps work almost all the same, first do a scan of the mobile networks and locate the one in green and check if you can crack networks. You can hack WI-FI Android a T-Mobile, Vodafone, AT&T, Sprint or any other company in any country like the United States and united kingdom, regardless of whether the network has WPA, WPA2 or WEP. To learn how to hack a WI-FI from Android or an iPhone, you do not need to know anything about network security, Hacker WI-FI for Android although do not usually use these applications.

If you want to know how to hack a more robust wireless network, click here to get more information. Let´s see wifi password hacker apps.

Written 6d ago • View Upvotes