online wpa cracker

[purehate]

@pureh@te

"25771214 passphrases tested in 453.64 seconds: 56810.37 passphrases/second"


that's quite impressive !

not much slower than a dictionary attack with precomputed PMK's (got about 71000 passphrases/s here with church of wifi's tables, using aircrack-ng)


if an table with the matching essid exists it still makes sense to perform an dictionary attack before doing an exhaustive search with pyrit, since most people are using "common" passwords

so you are welcome to use my little service at lunix.izfree.com as long it's up, it will be free and open to everyone

Thanks but I dont need to use it because I built my own which works with any essid and has about 200 million more passwords than yours. Thanks though.

[killadaninja]

Although your idea has merit, I have always been opposed to releasing client data (especially passwords, hashes etc.) to outside of the control of my company and pentest team.

Fair point but an essid and a cap file is hardly private data, and trusting the owner of the said website, in this case PureH@te is no different from trusting your server host with plenty of delicate info.

its an interesting idea, but what if the wpa password is not on the wordlist? would you provide a refund?

No thats the point if the test fails then its $10 well spent.

Probably the best way to get around questions of legal use, and who might be a legitimate user, would be to offer this as a subscription service. You could vet the subscribers before issuing user credentials. A big advantage to offering it as a subscription as oppose to a low-cost 'pay per incident' would be that you'll almost guarantee that you would not get script kiddies even considering using the service.

Agreed this is a very good idea, just think how many people you know yourself PureH@te it could be like a refferal only service.

I think this is a great idea with LOTS of potential, if the kinks can be overcome this could be a very helpfull service.

[slacker_]

@mummysboy

thank you for submitting your cap file, there were some things wrong here at my server (stupid error in shellscript and i had to patch and recompile cowpatty to recognize the handshake correctly), i didn't even notice this with my cap's (well, used aircrack before which worked flawlessly)



@everyone:
service should be quite reliable now, unfortunately my free hoster izfree seems to be down at the moment

if i've got the time i will write a little program to rip out the handshake from capture files so you don't have to submit any private data


EDIT:
i can't believe i have to say this, but..
with "<any ssid>" you choose exactly the ssid "<any ssid>",
this will not enable you to magically crack cap files containing ANY ssid (because this is NOT an bruteforce attack)

[Eatme]

what the website ??

[Takedown32]

lunix.izfree.com

[Eatme]

lunix.izfree.com

thanks... !!

[Eatme]

what ESSID do i choose if its not in the list ??????

[floyd]

what ESSID do i choose if its not in the list ??????

you're the biggest troll I've ever seen

[Eatme]

lol thanks..but im serious ;[

the list has like 1-3 ones that say no ssid etc..idk which one to choose

[Gitsnik]

lol thanks..but im serious ;[

the list has like 1-3 ones that say no ssid etc..idk which one to choose

Boot back into windows, it'll show it straight up and you won't have to ask us for the help again.