If the dictionary finds it it will show as below if not then another dictionary will need to be used. If done right aircrack should start and begin to try to crack the WPA handshake capture with the dictionary. So the command for me to do this would be:Īircrack-ng /root/mywpacatch-05.cap -w /pentest/passwords/wordlists/darkc0de.lst

we will be using the darkc0de.lst dictionary for this example under the as I said above the usual default location of the handshake file is under /root and is what ever you called it. The location of where this two files are and there names will be up to you. Where the file name is the handshake file you captured and the dictionary location is the path to your dictionary. We will be using aircrack to do the cracking and the command to do this is:Īircrack-ng (file name) -w (dictionary location) (Be sure to use the number 0 in darkc0de.lst) The dictionary that we will use is built into backtrack under the /pentest/passwords/wordlists and is called darkc0de.lst. The default storage for a WPA handshake is under /root and will be there under what ever name you called it. You should already have a WPA handshake file and Backtrack 5 running. if needed you can copy and past the code just be sure what files will need to be renamed such as the WPA/WPA2 capture itself. Getting a good dictionary can be hard there are some dictionaries within Backtrack 5 that I will use to explain the Brute Force method but there size is limited making them useless against all but the easiest paraphrase.īelow I will show what I have in a video. Reaver -i mon0 -b BSSID pinxxxxxxxx -vv (xxxxxxxx is the 8 Pin numbers you hacked) Similar to this mechanism, you introduced another method We have just updated a better solution to crack WiFi password (WPA and WPA2) by using Linset. If the password is easy then it will find it quick, if it is a long paraphrase with many different number letter combinations then it will be much harder. Reaver will check the state every 315 seconds (5 minutes and 15 seconds) and. Lots of people are always asking me how to hack a WPA2 wifi network.

The way this works basically is that there is a large dictionary that you use to throw as many combinations of words as possible at the WPA encryption until it cracks. Use my Backtrack 5 wifi hacking tutorial to be able to gain access to wpa2 networks. There are other ways such as Rainbow Tables and the video card attack, but the simplest or easiest way to crack WPA is to use Brute Force.

Unlike WEP, WPA/WPA2 is hard to crack and is usually done with Brute Force. Getting a WPA or WPA2 handshake is great but what do you do once you have finally gotten one? Well it needs to be cracked.

Backtrack 5 wpa2 crack tutorial pdf