WEP cracking under Hardy Heron, using ipwraw driver

[qsr.nrwn]

Where do i get the information for channel and the macaddress (correct me if im wrong but is that through the iwconfig command?)

Yes you can grab the Access Point address and ESSID from iwconfig. The channel is provided when you run

sudo airodump-ng wifi0

please be aware that the channel, ESSID, and BSSID (AP adress) must match
the MACADDRESS is fetched when you run the

sudo macchanger -s wifi0

where the MACADDRESS of your wireless interfaces is showed, since there is the chance that you have set the MACADDRESS through macchanger.

, also as regards to the file name, can this be of my choice? and does the file be saved, if so is there a good directory it can go or does it go in the /ipwraw directory.

the filename and its location can be of your choice, as an example you can locate it at "~/WEP\ Cracking", in fact if you provide just the name it stores the capture file in the current working directory.

[pmq]

Thanks that was very helpful.

Also just to let you know, when running aircrack-ng <file>.cap results seemed to take forever. However, when i used the PTW on the aircrack, this seemed to provide results by simply using -z.
This has really educated me as i have just realised my network wasn't on typical 128bit wep however it was only on a mere 64bit. I doubt it makes much difference since wep is so weak overall.
I am going to set up a WPA encryption, however it is only going to be the original WPA, i cannot initialise WPA2 on my network router, there is no option, i think its because my router is years old. Time to upgrade i feel .

pmq

[doublearon]

So when do you know if it's "cracked"? I did everything in the first post and I couldn't tell what was going on really.

[Noahod]

Awesome, thanks for this guide. It's taken me so long and so many hours to get to this stage. Worked flawlessly.

EDIT:
PS: aircrack-ng these days uses ptw attack, which reduces keys needed to < 50,000. I cracked wep in 1min 44sec using your guide.

[Ryan90]

Hey, as you can see, I'm quite new to ubuntu. I've done a few tutorials and such, and now trying to get this going. I follow you all the way up to "sudo iwconfig wifi0 rate 1M" when i get an error saying I have no such device. What would be causing this?

[qsr.nrwn]

Hey, as you can see, I'm quite new to ubuntu. I've done a few tutorials and such, and now trying to get this going. I follow you all the way up to "sudo iwconfig wifi0 rate 1M" when i get an error saying I have no such device. What would be causing this?

First of all, excuse me if I haven't answered so quickly... I was a little busy (And I will be more busy). The first candidate for your error is that you have not loaded the ipwraw module, that provides the wifi0 interface... I hope this helps you. If not, drop me a line so we can troubleshoot it...

[qsr.nrwn]

So when do you know if it's "cracked"? I did everything in the first post and I couldn't tell what was going on really.

Same as above, I was so busy so I wasn't paying too much attention to this thread... there is a detailed guide at http://aircrack-ng.org/doku.php?id=newbie_guide... It helped me a lot

[LIn_gr_wir]

Thnx for the walkthough, but there is a problem.
It all seems to be working well but i don't get enough packets.
In fact i get 50 packets/min.
But i've done all the steps and aireplay seems to have no prob.
I tried it on my own router, so there were no clients...
Help pls.

[Noahod]

Thnx for the walkthough, but there is a problem.
It all seems to be working well but i don't get enough packets.
In fact i get 50 packets/min.
But i've done all the steps and aireplay seems to have no prob.
I tried it on my own router, so there were no clients...
Help pls.

Did you have any computers on the network to respond to your arp requests? They don't have to be wireless clients but you do need at least one computer to respond.

Failing that it could be either:

Failed association,
Failed injection,

or too far away from AP.

[jetpeach]

could the OP update the link in the wget code for downloading ipraw. it has changed

http://homepages.tu-darmstadt.de/~p_larbig/wlan/ipwraw-ng-2.3.4-04022008.tar.bz2