Results 1 to 8 of 8

Thread: Lack of IV's

  1. #1
    Just burned his ISO
    Join Date
    Feb 2009
    Posts
    2

    Default Lack of IV's

    Hi, i'm a total n00b when it comes to BT3, however through various tutorials i've managed to get to the point where i'm collecting IVs.

    However after 1hr 40mins all i've managed to collect is 8 IV's from my AP.

    Anyone got any idea's what i'm doing wrong or why it's only collected 8 IV's in such a long time.
    I'm using IWL3945 chipset patched with IPWRAW using modprobe commands.

    Thanks in advance.

  2. #2
    Just burned his ISO
    Join Date
    Oct 2008
    Posts
    22

    Default

    List the steps you used to get to this point. If you don't use a specific attack to expedite cracking WEP, then it's possible that it will take that long. We should be able to help you with a little more information.
    never underestimate the power of idiots in a group

  3. #3
    Senior Member secure_it's Avatar
    Join Date
    Feb 2010
    Location
    在這兩者之間 BackTrack是4 FwdTrack4
    Posts
    854

    Default

    Generate some traffic to get more weak IV's

  4. #4
    Member
    Join Date
    Dec 2007
    Location
    The Netherlands
    Posts
    267

    Default

    Quote Originally Posted by secure_it View Post
    Generate some traffic to get more weak IV's
    Perform a fragmentation attack with one of the 8 packets you have, generate an ARP with packetforge-ng, inject the arp with aireplay. Depending on your card, you will get 100-1000 IV's per second

    Check out the various tutorials around here for more info

  5. #5
    Very good friend of the forum killadaninja's Avatar
    Join Date
    Oct 2007
    Location
    London, United Kingdom.
    Posts
    526

    Default

    Quote Originally Posted by Benny87 View Post
    Hi, i'm a total n00b when it comes to BT3, however through various tutorials i've managed to get to the point where i'm collecting IVs.

    However after 1hr 40mins all i've managed to collect is 8 IV's from my AP.

    Anyone got any idea's what i'm doing wrong or why it's only collected 8 IV's in such a long time.
    I'm using IWL3945 chipset patched with IPWRAW using modprobe commands.

    Thanks in advance.
    Whats the pwr rating?
    Is a client connected?
    Sometimes I try to fit a 16-character string into an 8–byte space, on purpose.

  6. #6
    Just burned his ISO
    Join Date
    Feb 2009
    Posts
    2

    Default Lack of IV's

    Quote Originally Posted by zoso10 View Post
    List the steps you used to get to this point. If you don't use a specific attack to expedite cracking WEP, then it's possible that it will take that long. We should be able to help you with a little more information.
    here is the full list of commands i've used in the exact order that i do them:

    airmon-ng
    airmon-ng stop wlan0
    ifconfig wlan0 down
    macchanger --mac 00:11:22:33:44:55 wlan0
    modprobe -r iwl3945
    modprobe ipwraw
    airmon-ng start wlan0
    airodump-ng wifi0
    CTRL+C
    airodump-ng -c (channel) -w (filename) --bssid(bssid)
    New Shell
    aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 -e (essid) wifi0
    aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 wifi0
    New Terminal
    aircrack-ng -n 64 -b (bssid) (filename).cap

    Quote Originally Posted by killadaninja View Post
    Whats the pwr rating?
    Is a client connected?
    the power rating shows zero i would post a picture of what i get but as i'm a new member i can't post links yet
    However the image is hosted on photobucket, if you search BSG1987 you should the images its the one titled BT3 Snapshot.

    Quote Originally Posted by secure_it View Post
    Generate some traffic to get more weak IV's
    At the time i tried the attack i had three laptops running youtube and other various websites, etc. I don't know how to ping traffic others i would have tried that.

    Thanks again for your time and help.

    Benny87

  7. #7
    Member
    Join Date
    Dec 2007
    Location
    The Netherlands
    Posts
    267

    Default

    My bet is that you have not yet caught an ARP packet, which aireplay-ng -3 uses to generate traffic. I assume the output of aireplay-ng is something like "Read 3000 packets"?

  8. #8
    Very good friend of the forum killadaninja's Avatar
    Join Date
    Oct 2007
    Location
    London, United Kingdom.
    Posts
    526

    Default

    Try Spoonwep, you are of coarse using BT3 final?, Airmon-ng wifi0 should load the drivers no problem.
    Sometimes I try to fit a 16-character string into an 8–byte space, on purpose.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •