-=Xploitz=- TUTORIAL: E-Z Connect To WPA Personal With AES

[-=Xploitz=-]

Upon popular request, (and SEVERAL PM's) by my fans here at remote-exploit.org...heres another super E-Z tutorial on "How to connect to your WPA Personal with AES".

This is very similar to my other tutorials about other WI-FI WPA/WPA2 encryptions. Once again, I'll keep it simple.


In airodump-ng my network shows up as......

BSSID ........................PWR.........RXQ......Beaco ns...#Data,........#/s...CH..MB...ENC...... CIPHER...AUTH..............ESSID
00:18:F8:B5:F2: D6....68.............100.........766...........39. ........0......6....48. WPA....... CCMP......PSK.........Xploitz Network


First off....copy and paste the following, in blue, to your wpa_supplicant.conf located in your /etc directory. The actual wpa_supplicant.conf text will be at the bottom of the /etc directory.

ctrl_interface=/var/run/wpa_supplicant
network={
ssid="Xploitz Network"
key_mgmt=WPA-PSK
proto=WPA
pairwise=CCMP TKIP
group=CCMP TKIP
psk="-=Xploitz=-"
priority=3
}


Now, replace my ssid="Xploitz Network" with the name of your network....and replace my psk="-=Xploitz=-" with your Passphrase. (There is no reason to put -=Xploitz=- in hexadecimal because wpa supplicant parses it for you. So just put your passphrase in ASCII and all will be well.)

Now save this.

And in the same directory there is a folder called dhcpc. Go to it located in /etc/dhcpc folder and DELETE EVERYTHING!


***EDIT***
ALSO PLEASE NOTE THAT WHEN YOU CHANGE ENCRYPTIONS OR CONNECT TO A NEW NETWORK, YOU WILL NEED TO DELETE EVERYTHING INSIDE THE /ETC/DHCPC FOLDER AGAIN TO BE ABLE TO CONNECT TO YOUR NEW NETWORK OR NEW NETWORKS NEW ENCRYPTION ***END EDIT***
Next, open a new shell window and type in....

bt ~ # chmod 755 /etc/wpa_supplicant.conf

Next, type in....

bt ~ # wpa_supplicant -w -Dwext -iath0 -c/etc/wpa_supplicant.conf

(Please note in the above command my device is -iath0, yours may be wlan0, eth0, eth1..etc. Please change it to match your device; (example>>> -ieth0, or -iwlan0) Now you will see something similar to....

bt ~ # wpa_supplicant -w -Dwext -iath0 -c/etc/wpa_supplicant.conf
Trying to associate with 00:18:f8:b5:f2:d6 (SSID='Xploitz Network' freq=2437 MHz)
Associated with 00:18:f8:b5:f2:d6
WPA: Key negotiation completed with 00:18:f8:b5:f2:d6 [PTK=CCMP GTK=CCMP]
CTRL-EVENT-CONNECTED - Connection to 00:18:f8:b5:f2:d6 completed (auth) [id=0 id_str=]


And it will "Hang" here and stay. Why?? Simple. The command above will allow you to see all the "behind the scenes" action of connecting to your network, so you can troubleshoot it if need be. Now, our next command to execute....

Open a new shell and type....

dhcpcd ath0 (or whatever your device is)

Now you should see a "pop-up" somewhere on your screen saying "KDE Network Monitoring...Connection Established!"

Bingo! There ya go.

Also please note that once you get comfortable with my method..you may change....

bt ~ # wpa_supplicant -w -Dwext -iath0 -c/etc/wpa_supplicant.conf

to.....


bt ~ # wpa_supplicant -w -Dwext -iath0 -B -c/etc/wpa_supplicant.conf

This added -B option will run the program in the background for the deamon mode, and you'll IMMEDIATELY get an "return command line" ....

bt ~ #


so that you can put in dhcpcd ath0 (or whatever device you use like eth0, eth1, wlan0, etc...)

I hope this helps out a lot of people, because I have had SEVERAL PMs requesting how to accomplish this.

Please post your success / failures in this thread, and I will help you if you have any problems.

A special "Thanks" to all of my fans here for their support and eagerness to learn. Just my way of giving back to my love on the internet......remote-=Xploitz=-.org

[-=Xploitz=-]

***updated***

[stealthredneck]

I don't seem to have the WPA cnf file in ETC, can it simply be created?

[imported_Deathray]

Great tutorial -=Xploitz=- , I respect
you for all the time and effort you put into helping
others And nice job everyone else. 1200 views, 1 thank you

[imported_spankdidly]

Sploitz knows I love him. Do I need to tell him again? Sploitz I love you. In the backtrack way, not the backdoor way.

[imported_Deathray]

Sploitz knows I love him. Do I need to tell him again? Sploitz I love you. In the backtrack way, not the backdoor way.

Describe this backdoor way ? :P Oh wait.., never mind

[-=Xploitz=-]

I don't seem to have the WPA cnf file in ETC, can it simply be created?

Yes...sorry. I forgot to mention that in the tutorial.

just create new txt and call it

wpa_supplicant

then save.

Sorry again for leaving out that bit of important info!!

Great tutorial -=Xploitz=- , I respect
you for all the time and effort you put into helping
others And nice job everyone else. 1200 views, 1 thank you

Thanks Deathray.

1200 views and 1 thank you?? The views is low because not many people use WPA or attempt to crack WPA for that matter. Its all about da WEP.

Go figure. Anyways. I posted this not for the thanks, but for the info to be "embedded" in this forum for all to see and to use if needed. But thanks for the thanks.

Sploitz knows I love him. Do I need to tell him again? Sploitz I love you. In the backtrack way, not the backdoor way.

<<was that a sexual innuendo??? or you just trying to be funny??>>


UUUmmmmm.....thanks,.... I think <<unsure>>

Describe this backdoor way ? :P Oh wait.., never mind

Lets just say he did.....and he said rootkit and sub7 Trojan was what he meant by that comment . Nothing more...nothing less. Otherwise I would have to give him an infraction for.....

By registering with these forums you agree to be bound by the following rules....


Any religious, political or pornographic references will not be tolerated.


As stated by the forums rules here.....

http://forums.remote-exploit.org/showthread.php?t=8808

So,...what DIDyou mean by that comment spanky??

[stealthredneck]

Alright it works! just a couple of things though...

Make sure your AP isn't cloaking its SSID or you'll get this error:

CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
No network configuration found for the current AP
CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys

^^took me forever to figure that out

Q1: Also my network assistant telling me i'm connected isn't coming up, is there any way to enable/find this?

Q2: I noticed you like the command line connection, will I have to repeat the long line containing -Dwext each time I want to connect or just the dhcpcd ath0 command?

Whooh! I hate learning just as much as I love it, which is a lot, which means I love learning! which means I hate it!

P.S. I noticed several GUI connection apps within BT2, such as the Wireless Assistant....wouldn't this allow you to connect to a WPA network, or is it limited to WEP?

[-=Xploitz=-]

Q1: Also my network assistant telling me i'm connected isn't coming up, is there any way to enable/find this?

Are you using bt2 or bt3??? Cause I havent tested this in bt3. In bt2 though..I got the pop-up saying ath0 connected.

Q2: I noticed you like the command line connection, will I have to repeat the long line containing -Dwext each time I want to connect or just the dhcpcd ath0 command?

Try dhcpcd ath0 and see. If it doesn't work, then you know you have to use the -Dwext line. BTW...hit the up and down arrows to cycle through all your used commands....bash saves all commands used.

P.S. I noticed several GUI connection apps within BT2, such as the Wireless Assistant....wouldn't this allow you to connect to a WPA network, or is it limited to WEP?

I wouldn't know. Ive never used Wireless Asst. I hear it sucks big time and drops connections. Thats why I only use CLI (command line interfaces)

[samsung]

Hi all,

I first off done my handshake, but just to point out that i do not have bt2 installed im working off my hda4 & everything saves there, there was NO files in etc/dhcpc, so I have created my wpa_supplicant.conf file in etc directory
I have then ran the commands as follows

**notice**
I am running this inside the etc directory, as I have tried while in
bt root #
bt hda4 #
& only seems to work when in bt etc #

bt etc # chmod 755 wpa_supplicant.conf
bt etc # wpa_supplicant -w -Dwext -iath0 -c/etc/wpa_supplicant.conf
Failed to read read or parse configuration '/etc/wpa_supplicant.conf'.
bt etc # wpa_supplicant -w -Dwext -iath0 -c/etc wpa_supplicant.conf **WITHOUT THE / BEFORE WPA_SUPPLICANT.CONF AND GET THIS
ioctl[SIOCSIWMODE]: Invalid argument
Could not configure driver to use managed mode
CTRL-EVENT-TERMINATING - signal 2 recieved

This is where I am stuck