wifi hacking tools?

J

jacobstone

Well-Known Member
Joined
Sep 23, 2003
Messages
155
Reaction score
0
Location
.
I'd like to test the integrity of my wifi network.

I've got it all locked up tight and I'd like to see if I can get onto it with my laptop (without properly allowing it access).

Anyone know of some good tools? I've only got Netstumbler which gives me some stats of wifi networks in the area.
 
jacobstone said:
I'd like to test the integrity of my wifi network.

I've got it all locked up tight and I'd like to see if I can get onto it with my laptop (without properly allowing it access).

Anyone know of some good tools? I've only got Netstumbler which gives me some stats of wifi networks in the area.
Click to expand...

Ignore the guy above. Google airsnort. Theres about 20 other applications. Look for information on wardriving or warchalking.
 
those apps/tools do exist. Me and 1 of my friends searched for a app and i downloaded a few apps for my friend and he said that it worked and it is possible to hack into a secure wireless network
 
I've used Netstumbler in the past, works pretty well but it is mainly just for detecting wireless networks and getting information about them. You can however see how secure your network is with it.

There's always Linux tools like airsnort and etc.., even the Auditor Live CD is excellent. Has every type of security and networking app. you can imagine.
 
There's a good chance that if you are on a WiFi network it's NEVER going to be 100% secure.
 
Wifi hacking isnt at all difficult. Try seraching for episode 1 of 'the broken'.
It details the basics of how to go about breaking into a wireless network.
 
Over a 15km drive I "discovered" almost 30 unsecured WiFi networks (most of them user with ADSL router and WiFi open!)
 
How long would it take the average joe to crack a wpa-radius secured network?
 
I drove around my area, less than 15km and found over 100, a lot of them unsecured.. ;)

Really depends how you go about it. But WPA is still a lot more secure than WEP, if the network does a lot of transfers then you can obviously crack the WPA code quicker.

I'd say a few days at minimum, but that is just a guess.

Got better things to do with my time :)
 
Azgard said:
if the network does a lot of transfers then you can obviously crack the WPA code quicker.
Click to expand...
Unless you can back that up with credible techniques/apps/etc, that amounts to so much flamebait ..and no, we're not talking about a dictionary attack caused by some dumbass using his pet's name as a password.
 
headstrong said:
How long would it take the average joe to crack a wpa-radius secured network?
Click to expand...

Several bazillion years!

Seriously, there exists no way to crack WPA other than a brute-force attack. If you're an EE/CS wizard then by all means try and write one, but there isn't a tool yet.

Once you have some WPA-encrypted packets, you can brute force them offline (on your own PC). You could try a "dictionary attack", which tries commonly used words, but if the password is strong (using letters, numbers and special characters, eg. "jh8!bh801:ls...etc") you will have to do a brute force attack.

A brute force attack involves trying all possible combinations of letters and numbers of a specific length. A WPA-PSK key can be up to 63 characters long, and each character can be one of 95 options (lowercase, uppercase, numbers, special chars, space). This means there are 95^63 possible keys. 95^63 = almost 4 x 10^124, ie 4 with 124 zeros after it. At a rate of 1000 keys per second, it would take 1.25 x 10^114 YEARS to crack (125 with 112 zeros after it). That's the worst possible case, probability is that it will be cracked in half that time - still a very long time.

This all refers to WPA-PSK, which is the consumer version - enterprise versions are even more secure, but I don't know as much about them.
 
Flippit, you and your bloody maths :)
Yeah, Flippit and I went for a drive the other day, and found loads of people in our area with open wireless networks. Crazy... But I suppose these users probably don't know any better.

Cheers, Nick
 
If I understand Flippit's maths correctly, he described the number of possibilities for a key that is 63 characters long. But what about keys that are shorter? In theory the total number of combinations will then be 95 + 95^2 + ... + 95^63 = a lot. Is this correct?
 
Pravech said:
If I understand Flippit's maths correctly, he described the number of possibilities for a key that is 63 characters long. But what about keys that are shorter? In theory the total number of combinations will then be 95 + 95^2 + ... + 95^63 = a lot. Is this correct?
Click to expand...

Yes, that's correct, I was only accounting for keys of exactly length 63. The minimum for WPA-PSK is length 8, so the total possible keys is in fact 95^8 + 95^9 + ... + 95^63.

Basically, if you use a strong password, your WPA-PSK-secured network is secure until someone breaks the TKIP protocol.

:)
 
Nickste said:
Flippit, you and your bloody maths :)
Yeah, Flippit and I went for a drive the other day, and found loads of people in our area with open wireless networks. Crazy... But I suppose these users probably don't know any better.

Cheers, Nick
Click to expand...

or don't care
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X