As soon as the handshake is done it is just the wordlist game or cracking game. Meanwhile when we used airodump-ng for capturing the packets, we will have to wait until the handshake is done by the user or any of the users in the network environment. In this whole process we saw that it all depends on the wordlist that how much it’s versatile and also on time because if there is a strong password then it will take a longer time to crack depending on the wordlist. You can see above that when we ran the command we got the key as this is the password of the Wi-Fi. In this step, I have used one tool called aircrack-ng which is a great tool to do the brute force of pcap files against the wordlists,Ĭommand used: aircrack-ng –a -w /root/wordlist /root/WPAcrack.cap.Now what we will do is we will brute force the file with the wordlist which I have created, you can get the wordlists from online sources as well but for learning point of view I kept the wordlist on my own. Here, I used airodump-ng and saved the packets into a file name called WPAcrack. Also this capture will be saved in a file because it is used later to crack the password or while brute forcing. Copy the bssid of the network, now we will use again airodump-ng to capture the packets, we will select the channel on which it is running and also I would suggest keeping the adapter on the same channel just to make sure everything runs fine. Using the command airodump-ng wlan0mon, it’s clearly visible that it is able to capture the beacons around.So you can see that adapter has been set up into monitor mode, now it can capture the packets around. Set the adapter in monitor mode so that it can capture the packets.Set the adapter so that it shows that its interface is visible as in my case wlan0 is there.NOTE: This tutorial is for educational purpose, for practicing use your own network environment and router device.

Alfa Wireless adapter (to capture and inject packets).

If we can grab the packets at that time, then we can try to crack it.īefore we start you will have to keep some things with you. When a user authenticates to the Access Point (AP) the user and the Access Point go through the 4-step process to authenticate the user to that Access Point. That is the weakness in WPA/WPA2 is there that password is there in the handshake process.

WPA/WPA2 uses an AES algorithm that is very difficult to crack, so what we will do is we will capture 4way handshake, then we will brute force that. This requires a different attack method and we will use dictionary based brute force attacks to get the key we are looking for. Previously WIFI has used WEP encryption but that had some flaws which gave reason for people to start using WPA/WPA2. In this post we will look at how we can crack easily WPA/WPA2 WI-FI passwords using Kali Linux’s inbuilt tool named aircrack-ng.

Hack wpa2 wifi password easy