Cracking my Routers security

[Necorum]

Ah fun fun

So recently I have been messing around with BackTrack 4 beta and Im liking the newer beta better than BT3 since it comes prepackaged with drivers for almost al wireless cards :P Took me 30-60 seconds to crack my routers wep 128bit :P and about 2 hours for wpa :P and Cuda supported


http://www.remote-exploit.org/backtrack_download.html

[Aedan]

How long is your WPA passphrase, and how complex is it (IE upper case, lower case, numeric, symbol)?

[Necorum]

pretty complex but i got through every character is different and variations of upper lower case alt-keys :P also cracked everyones around me :P sent a few emails off to open clients my neighbor freaking had his tax info accessible so i had to go knock on his door and lock his down for him sillyness

edit I have the 33 gig passphrase dictionary :P

churchofwifi.org

[Aedan]

I should also have asked how complex your SSID is, or did you leave it at default? That tends to have a huge impact on how crackable your WPA passphrase is.

[Rondog]

Nice looking tool there. Downloading it now to test my clients wireless networks.

Does having a hidden SSID improve security against something like this?

[Necorum]

Originally Posted by Rondog

Nice looking tool there. Downloading it now to test my clients wireless networks.

Does having a hidden SSID improve security against something like this?

No Kismet a tool scans for hidden ssid's :P


one sec let me get you a quick guide :P

Easiest one to follow :P
SpeedGuide.net :: How To Crack WEP and WPA Wireless Networks

Cracking WEP Using Backtrack: A Beginner’s Guide | ryan underdown

Introduction to Kismet

Here is dictionarys for wpa2 cracking
http://205.127.87.136:6969/

33gig file lol

[Aedan]

Having a non-standard SSID tends to prevent off-the-shelf rainbow attacks, as the WPA key is derived from both the SSID and the passphrase. The rainbow table set that Necorum is using work by taking the 1000 most common SSIDs (from WiGLE's top 1000 SSIDs) and building the tables around those in order to attack TKIP. If your SSID isn't in the list of common SSIDs, then the rainbow tables won't help the attack. If you're not using TKIP, but using AES, then the rainbow tables won't help the attack.

Necorum, perhaps you'd like to test these, by setting your SSID to something non-standard, and also by setting (if you can) your access point to use AES rather than TKIP.