wireless mac address and dic attack

[rocksteady]

Hi,

Im new to linux and backtrack but have managed to crack my wifi network when set to 64 and 128 bit wep but have a couple of questions im hoping someone can answer.

1:-Mac changer

Is the mac changer used only to spoof a clients mac address or is it changed anyways for security?

2:- arp requests

a couple of times when getting arp requests i get lots each time but usually i only get 1 at a time so my data goes up slowly, is there a way to increase the amount of arps i get?



Another problem i am facing though is dictionary attacks on my psk network.

i use:- aireplay-ng -0 -5 -a (bssid) (wcard)

aircrack-ng -w (dictionary) (cap file)

and the scan seems to be going fine but the end result is it does not find my key even though its in the password list. (is there a way to speed up the scan)



sorry if bits dont seem to make sense, jumping to linux form windows is like starting again =p

Forgot to add im using alfa awuso36h

[iliyapolak]

a couple of times when getting arp requests i get lots each time but usually i only get 1 at a time so my data goes up slowly, is there a way to increase the amount of arps i get?

ping unavailable host

Is the mac changer used only to spoof a clients mac address or is it changed anyways for security?

it is used also to hide your network interface identity

[rocksteady]

sorry for stupid questions but by pinging unavailible host do you mean this?

aireplay-ng -3 -b 00:13:10:30:24:9C -h 00:11:22:33:44:55 -r replay_arp-0219-115508.cap ath0

and

aireplay-ng -2 -r replay_arp-0219-115508.cap ath0

or have i gone of track?

[rocksteady]

ive googled everywhere but cant seem to find how to ping the unavailible host as all i have is a mac address.



the problem i get sometimes is

sent xxxxx packets (got 1 arp request and xxxx acks)

I need to be getting a higher amount of the arps but sometimes i just get 1.

[iliyapolak]

use windows ping command

[rocksteady]

Thanks for help. I found another method that works very well though. Enough that im happy to move on from wep now

[CuteVirus]

Thanks for help. I found another method that works very well though. Enough that im happy to move on from wep now

can u tell me what the other method?thanks

[drakedeon]

you only need one arp which is captured by aireplay-ng and replayed to the network where it is broadcast each time it is sent which generates a new IV with each broadcast. You need to match the MAC adress of the card connected to the AP thus MACCANGER can be used to spoof the MAC or the AP may reject the ARP and thus not generate IV's. a no client attack with fakeauth and packet forge can be quicker and easier even if there are connected clients.

[shadowzero]

aircrack-ng -w (dictionary) (cap file)

and the scan seems to be going fine but the end result is it does not find my key even though its in the password list. (is there a way to speed up the scan)

Yes, create a smaller wordlist with your password in there. Something with a few lines should do it.