Hacking & Solutions: Cracking WEP and WPA2-PSK

Hacking & Solutions: Cracking WEP and WPA2-PSK

By CWNP On 03/20/2008 - 9 Comments

This article is presented as part of hacking + solution track for Wireless Security Expo 2008.  Before reading the solutions article, make sure you have watched the hacking video.  Videos are available by registering here .

Cracking WEP is old-hat, but the newer WPA/WPA2-Personal can be cracked too.  See how its done and see how to secure against it.

 

Cracking WEP is fast and easy with commonly available Windows- or Linux-based tools.  The length of the WEP key, 40- or 104-bit, is practically irrelevant, and with the software tools currently available, any novice can crack WEP in minutes given enough captured data.  With users being added to the WLAN every day in most enterprises and the amount of data going over the WLAN growing exponentially, capturing enough data to crack WEP is often simple.

The moral of the story with WEP is simply that it should never be used when stronger authentication and encryption mechanisms are available.  

Cracking WPA/WPA2-Personal (which uses a passphrase) is a much more difficult task than cracking WEP, but it still isn't an overwhelming task.  Given the right dictionary file(s) and the latest versions of WPA cracking tools, cracking WPA/WPA2-Personal can happen in a short time if a very strong passphrase isn't used by the network administrator.  The Wi-Fi Alliance suggests at least 20 characters with lower case, upper case, numbers, and special characters and use of WPA2 over WPA whenever possible.

Tools such as Aircrack-ng can be easily used both for cracking WEP and WPA/WPA2-Passphrase.  Since Aircrack-ng is available for Windows, it gives the ability to do sophisticated hacking to a novice.  Use of WPA/WPA2-Personal should be limited to small installations such as SOHO - hence the name "Personal" - or very specific scenarios in SMB installations (like VoWLAN phones).  When WPA/WPA2-Personal is used, it is best for only the network administrator to have the passphrase.  He/she would enter it into every laptop, VoWLAN phone, handheld PC, or other wireless device manually without giving it to the user.  Of course this is not scalable, but it's more secure than having 5-50 users knowing the passphrase.

More secure alternatives to static WPA/WPA2-Personal passphrases have been developed, such as Ruckus Wireless's Dynamic PSK solution.  More information on this solution can be found here:  http://www.ruckuswireless.com/pdf/fs-dynamic-psk.pdf

If you just can't bring yourself to make a strong passphrase, there are tools just for this purpose, such as Juiper's PassAmp utility (a free download) and the website:

https://www.grc.com/passwords.htm

Having tools like these will help you get past the mental block of creating such strong passphrases.


9 Responses to Hacking & Solutions: Cracking WEP and WPA2-PSK

Subscribe by Email
Freya Stewart Says:
06/04/2018 at 07:36am
Don't generally comprehend the inquiry. To hack together a solution, you require a decent comprehension of the essentials. Better believe it, I likely could tackle an issue by simply attempting crap and Essay Help UK until the point when I got a solution yet that isn't hacking that is simply speculating.

Kevinogi jhome Says:
04/18/2018 at 05:46am
Manfred said he didn't know that the Marlins' new owners planned to tear it washington nationals jersers down
In the early moments of atlanta braves jersers the interview, Le Batard asked Manfred whether he knew prior to the recent sale to the group oakland athletics jersers fronted by Bruce Sherman and Jeter whether the new owners planned to slash payroll. After some prodding (and Le Batard's saying that the commissioner was lying), Manfred answered, "We do not get involved in operating-level decisions in the ownership approval process."

"We did not have player-specific plans from the Miami Marlins or any other team that has been in the ownership miami marlins jersers process. Those are decisions that the individual owners make, and they do not have to be cleared by us or approved by us. ... Those are local decisions that really are not part of the approval process. Those are decisions that the individual owners make, and they do not have to be cleared with us or approved by us."

Manfred went on to say that he didn't receive a payroll plan from the Marlins until two days prior to his interview with Le Batard. More: "We don't get into, are you going to trade 'Player X' or 'Player Y' at a particular point in time, nor do we ask them to make a commitment to people before they even got in and made an evaluation of their talent level, their ability to win with the people that st. louis cardinals jersers they have. That's just not how the ownership process works."
wholesale baseball jersers

But some of that may not be true
Here's a key excerpt from a los angeles angels of anaheim jersers must-read Barry Jackson piece in the Miami Herald:

A source directly involved in the Marlins sales chicago white sox jersers process, after hearing the Le Batard cincinnati reds jersers interview, said, via text: "Commissioner said was not aware of [Jeter] plan to slash payroll. Absolutely not true. They request and receive the operating plan from all bidders.

"Project Wolverine [the name for Jeter's plan] called chicago white sox jersers on his group to reduce payroll to $85 million. This was vetted and approved by MLB prior to approval by MLB. Every [Jeter] investor and non investor has the Wolverine financial plan of slashing payroll to $85 million. Widely circulated."

First off, "Project Wolverine" is ludicrously self-important and sinister-sounding, as budget strategies go. That's the name of a secret NSA laboratory deep under the Caballo Mountains in New Mexico, not a financial schematic. Do better, Jeets. Anyhow, there's enough careful phrasing in Manfred's comments ("operating-level decisions," "'Player X' or 'Player Y'") to give him some plausible deniability. However, the idea that he didn't know about plans to engage in yet another demo job by Marlins owners strains credulity.

wiatmppgryar wiatmppgryar Says:
04/18/2018 at 02:59am
Louis Triumph over New york city Reaction to Canter: SO I'M EMPEROR

Dark night conflicts Donnie Jones Jerseys that Knicks. Louis additionally, the Knicks contain a whole lot of grudges, best of all that 50+ multiply multiply enhances with the 1. 0 timeframe, and that scandals completely and even New york city. Preceding this holiday season, Kanter proclaimed Louis "I you should not good care just who one Donnel Pumphrey Jalen Generators Jerseys Jerseys can be. That Jason Kelce Jerseys NFL Jerseys emperor, that princess, and that princess or queen... Harold Carmichael Jerseys You can't bully usa. ” Louis reacted as a result of just saying, “I i am that emperor, my aunt is definitely the princess, a son is definitely the princess or queen, as a result most of us have three or more labels individuals family unit. ” At present, Louis have on A set black colored overshoes, lurking behind that boots, proclaimed "I Isaac Seumalo Jerseys i am, that emperor. inch (SO I'M EMPEROR. )#) Sorry to say, Kanter do not have fun at present.

The reality is, the video game operation fails to Jake Elliott Jerseys demand an excess of to be inside aspects. That potency significant difference concerning the Cavaliers additionally, the Knicks will be pretty sizeable. All through the video game, considering the Cavaliers, that Philadelphia Eagles Jerseys Louis is without a doubt more challenging, the three months went on Philadelphia Eagles even a full some a short time and even casual. Normally reveal high-impact accounts. Nevertheless a good number of remarkable occasion with the adventure is simply not an important excrete though an important dunk. With the moment three months and a second . 5 a short time, Korver won an important back-court thieve and even awarded Louis Louis an important frontcourt. Louis crafted an important hitting with the frontcourt with Beasley. Fletcher Cox Jerseys Louis sped up that softball and even did start to reel in that softball. Besley at once witnessed that softball and even was confident actually. Results in being an important record Herman Edwards Jerseys deck -- Louis ticket Dorial Green-Beckham Jerseys once the softball jumps inside the night, sliding with the ticket, one-handed amazing dunk! At this point, Madison Sabatini gardens simmered with the readership and even turned out to be that best example belonging to the over-all adventure. Once Louis possessed relaxed with the previous min belonging to the carry on three months and even relaxed, the fresh new Yorkers repeatedly shipped adios for now in the seeing team's emperor to help you turn out to be he is in actual fact that "king in New york city. inch Suit, Louis golf shot 7 in 15, twenty six elements, 6 rebounds and even 11 will help, his particular to start with single-season rating 600 + 2000 + 600 + rebounds and even will help.

crothermbeme crothermbeme Says:
04/18/2018 at 02:57am
On Monday,NFL jersesys shop US local time, the New England Patriots began their first voluntary activity in the offseason. Many media have focused their attention on the absence of quarterbackShop NFL Jerseys By Team Tom Brady and near-fielder Rob Gronkowski. However, the return of a key player deserves the same level of attention. He is the wide receiver - JulianBuy Customized NFL Jerseys Edelman. On Monday, Edelman appeared in the Gillette Stadium. This was his first step toward a $500,000 training bonus.Shop NFL Hats
The amount Shop NFL T-Shirtsof this bonus ranks first in the Patriot team. The following is the comparison of Edelman's total training bonus with other players in the team: Edelman:Shop NFL Hoodie $500,000 in Glonnowski: $250,000 Kickback Goalbacker Kodarel Patterson: $250,000 in defense Endpoints Lawrence Guy: $200,000 kicker Stephen Gestkowski: $100,000Pittsburgh Steelers Jerseys security guard Patrick Bell (Clock family): $85,000 In addition to the bonus, Edelman's appearance is also A positive signal was Minnesota Vikings Jerseysreleased: He was recovering systematically from the anterior cruciate ligament tear injury on August 25 last year. With Brandine Cooks Customized Seattle Seahawks Jerseysbeing traded by the team, Danny Amundola joined the Miami Dolphins again through the free agency market. As Brady’s numberCustomized Carolina Panthers Jerseys one goal, Edelman’s return to health in the new season is The Patriots' top priority. As a rule, Brady and Edelman hadIndianapolis Colts Hats practiced many passes during this offseason.
In addition, Edelman’s move Tampa Bay Buccaneersto Gillette Stadium on Monday was also a balance between strength training and Brady’s personal trainer Alex Guerrero. Edelman, who willSeattle Seahawks Hoodie soon turn 32, is a frequent guest of the TB12 Sports Therapy Center founded by Guerrero.
It is reported that Brady may reduceLos Angeles Chargers Hoodie the frequency of participating in the Patriots training during this offseason, and will pay more attention to his training withBaltimore Ravens T-shirts Guerrero. From the current situation, Edelman does not seem to have similar ideas with Brady. (TB12 is Tom Brady's English initialsAtlanta Falcons T-shirts and jersey number.) If you don't remember what Elderman's Patriots lost last season, perhaps the following three facts can remind Denver Broncos T-shirtsyou of Edelman’s Importance: 1. He collected data in 89 postseason games, ranking third in NFL history, second only to Jerry Rice's 151Jacksonville Jaguars Hoodie and Reggie Wayne's 93.
This also means that as long as Edelman completed Los Angeles Rams Hatsfive postseason catches, he will surpass Wayne and rank second in history. 2. He was one of 14 players who completed at least 1000 yardsCustomized New England Patriots Jerseys of NFL postseason advancement and ranked 13th in NFL history with 1024 yards of data. As long as Edelman finished San Francisco 49ers Jerseyscatching the ball in the 39-yard playoffs, he will be ranked in the top ten in history. 3. In his career, a total of four postseasonArizona Cardinals Jerseys games have completed single-field catches and advanced over 100 yards. In this data, he and Dion - Blanche together, ranked first in the history of the Patriots.

neha sharma Says:
04/11/2018 at 08:27am
I really like your wonderful post. I loved to read such kind of article. and the first time I visit our website. and I happy to be here, thanks for sharing this amazing post.
Dwarka Call Girls

Hanson Jones Says:
04/10/2018 at 05:34am
If you do not such as any kind of songs track on Pandora. Pandora Login Mobile phone or various other smart tools application format.

Jeannieer Perryes Says:
03/13/2018 at 02:31am
Here is a knowledge about all of those who are taking interest in hacking and also taking solution. Hope this is the best www.essayvikings.com way in which they can easily get the knowledge. Hope this knowledge is best for you and may be also best for all of the others.

Kr Ashwin Says:
01/11/2018 at 04:57am
You know that there is many of the short cut keys and the command buttons to log off windows 10 desktop?Some times you don't like to shut down but for the privacy matter you needed to lock your system for some times.This how do i log off windows 10 will help you to all access for learn and share.Thank you so much.

Says:
04/06/2008 at 17:25pm
HI do you help me signup new acuont thanh

<< prev - comments page 1 of 1 - next >>

Leave a Reply

Please login or sign-up to add your comment.
Success Stories

I literally just came out of the testing centre having taken the CWDP exam. The certification process opened my mind to different techniques and solutions. This knowledge can only broaden your perspective. Great job, CWNP, you have a great thing going on here.

-Darren
Read More

Working through the CWNP coursework and certifications helped not only to deepen my technical knowledge and understanding, but also it boosted my confidence. The hard work it took to earn my CWNE has been rewarding in so many ways.

-Ben
Read More

I want to commend you and all at CWNP for having a great organization. You really 'raise the bar' on knowing Wi-Fi well. I have learned a ton of information that is helping my job experience and personal career goals, because of my CWAP/CWDP/CWSP studies. Kudos to all at CWNP.

-Glenn
Read More