Both of the tools you mentioned can run tables.
best tool for cracking wpa network
guys, what do you think is a better tool when hacking wpa networks, aircrack-ng or cowpatty or do you suggest any other, the reason I ask is b/c when cracking wpa keys the tool is as good as your dictionary list, but I was wondering if there's some tool that use the same methodology as ophcrack uses when cracking windows passwords which is rainbow tables of precomputed hashes, which it seems to be more efficient than just a plain brute forcing attack... I'd like to hear any opinions or suggestions
thanks
Both of the tools you mentioned can run tables.
Sometimes I try to fit a 16-character string into an 8–byte space, on purpose.
I use aircrack-ng. You can use John the Ripper to create your own dictionary list and pipe it into aircrack too.
are the same rainbow table used by ophcrack can be use for aircrack-ng? or does it have to be a specific rainbow table for aircrack-ng?
Because the SSID is salted into the hash, you need a specific rainbow table that is unique to the SSID of the WPA network you're trying to crack. So if the SSID isn't "common" you'll have to make your own table.Originally Posted by mia_tech
"\x74\x68\x65\x70\x72\x65\x7a\x39\x38";
correct me if I'm wrong, the point to make the table based on the ssid is that we are assuming that the wpa key is some how related or based on the ssid name?
Not the key itself, but the hash of it will be salted with the ESSID of the AP. This is why a dictionary based attack, which will hash each of the tested words automatically before trying them against the handshake, will work with any normal wordlist while a rainbow table that includes pre-hashed character combinations will not work unless it is compiled for that specific ESSID.
-Monkeys are like nature's humans.
ok, now the big question, how could I go about making a rainbow table for a specific ssid?
For example using airolib-ng. Use the search function for more specific instructions as this has been covered multiple times. Also it is good to keep in mind that the combined time it takes to first generate a rainbow table and then run it against the handshake will exceed the time it takes to simply use a dictionary based attack in the first place.
-Monkeys are like nature's humans.
what are you saying, that is not worth the hassle of creating a rainbow table, and just stick to dictionary based attack?
Posting Permissions