Grabbing wireless keys

Hey all,

we know that cracking wep is piss easy, but wpa is alot harder, well here is an alternative that I have been working on

The theory is we create a fake access point and host a fake windows update page, our victim downloads this "update" and we then steal his wireless key.

this can be done in windows but i find it easier using linux

choice of distro is backtrack4 pre final

This is my latest release, wireless key grabber for backtrack 4 pre final.

Before using you need to download lighttpd install using apt-get install lighttpd


Video is here YouTube YouTube - Wireless Key Grabber
explanation of the script is here http://pastebin.com/f29b60836


and finally the required files
http://www.megaupload.com/?d=Z1TZEFDG

be sure to extract these into /root therefore all your files are in root/WK
if you know what you are doing then you can change this but you would need to follow it through in the script and it's other files


remember this is for educational purposes only

originally posted over at remote exploit forum

You said hacking wep keys is pisseasy? this the case in windows?

-=AD=-

Quote:

---

Originally Posted by AD

You said hacking wep keys is pisseasy? this the case in windows?

-=AD=-

---

Easier using a backtrack bootable CD disc really mate. I posted a yt vid on here regarding a 'how to'

http://www.digital-forums.com/showpo...44&postcount=6

Main thing is to have the right type of wireless device and linux has the capability to put it into monitor mode easier than windows.

fake access points a quite an old thing - but grabbing key is very interesting.

Well I am playing with it now

Tries to convince the victim to download a file as an update.

I am not sure what the exe does yet - but I have not looked at the exe file yet

I am looking at learning about about network security / protection so though would be helpfull too look at the tools used to crack wireless also
Got few routers sky/bt/netgear
Also running windows 7 with a 5300 WLAN

what program / tool do you suggest i start with ?