WPA / WPA2 Auditing Service

Discussion in 'Community Services' started by Mr. Penguin, 11 Apr 2013.

  1. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    This .cap is invalid / no data here.
     
    • Like Like x 1
  2. jiahuei

    jiahuei Active Member

    Joined:
    2 Jun 2013
    Messages:
    39
    Likes Received:
    19
    kevsamiga can you help me to attack my .cap file?
     
    • Like Like x 1
  3. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    What ?

    On a lowly old Q6700 and stone age 2.4 Teraflop 4870x2 you ask...

    I'm not even reaching 40K WPA2 hashes/sec on this setup with Elcomsoft.
    OpenCL never made it out of beta on 4K series hardware.

    My machine will probably die of heat exhaustion, used a ton of electricity,
    and popped a mosfet around the cpu, long before I ever was ever lucky enough to find your key.
     
    • Like Like x 1
  4. salbataciunee

    salbataciunee Active Member

    Joined:
    19 Jun 2014
    Messages:
    8
    Likes Received:
    7
    kevsamiga, thanks for your help. try this file: https://db.tt/bYl1wx5Z





    A new task:
    --------------------------------------------------
    Model: unknown
    ISP: Moldtelecom
    Password format: lower case alphanumeric (but not sure)
    SSID: OLA_WIFI
    Default ssid: yes
    Tried: Common wordlist at gpuhash.me
    (after entering the code they show positive results of hacking, but i don't have bitcoins to get the password)
    cap file
    ---------------------------------------------------
     

    Attached Files:

    • Like Like x 1
  5. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    I got this one, salbataciunee, here you go: 87654321
    That is the password, yeah I know, I cannot believe it either, but that is it.
     
    • Like Like x 1
  6. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    Demosthenes is just a WPA Magician...

    Are you using remote viewing techniques ? :)

    You would have still had to cover a very large key-space which takes around 80 days on a mask attack here
    to 8 digits. And then you would have had to know it was likely numeric to start with !

    Maybe I should upgrade the GPU.
     
    • Like Like x 1
  7. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    I just got lucky, I ran it through a random dictionary I have and it came up in 2min and 15 seconds. Just used that one on a whim, as I had no idea of the WPA structure.
     
    • Like Like x 1
  8. jiahuei

    jiahuei Active Member

    Joined:
    2 Jun 2013
    Messages:
    39
    Likes Received:
    19
    could you give me a help too?
     

    Attached Files:

    • Like Like x 1
  9. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    Sorry no data found. Recapture the handshake and I will give it a go.
     
    • Like Like x 1
  10. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    I've always found minidwep to capture handshakes properly, but when I use handshaker by coeman75, or wifite there is always "no data"
    in the resulting files.

    I've always noticed too, that when the client connected is just a "phone" to be de-authed, then the client cannot be "booted off" to get a handshake, it has to
    be a real machine for a successful de-auth and capture.
     
    • Like Like x 1
  11. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    I downloaded your first cap file and it is the same SSID, it had a good handshake. I ran it through a 15million word list no luck. I am now running it through 8 digit will report back when finished in about 2 hrs.
     
    • Like Like x 1
  12. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    I tried this Murelly .cap in elcomsoft, but again no data in cap or I would have GPU assisted
    using stolen/leaked password lists as they usually give the best chances of success...
     
    • Like Like x 1
  13. Demosthenes

    Demosthenes Well-Known Member
    VIP

    Joined:
    16 Apr 2014
    Messages:
    83
    Likes Received:
    53
    Interesting, can I get a copy of this stolen/leaked list you speak of please? I will add it to my collection.
    BTW, what version of Elcomsoft are you using? I have 5.0.252 professional.
    --- Double Post Merged, 21 Jun 2014 ---

    No luck here.
     
    #53 Demosthenes, 21 Jun 2014
    Last edited: 21 Jun 2014
    • Like Like x 1
  14. kevsamiga

    kevsamiga Well-Known Member
    VIP

    Joined:
    15 Sep 2013
    Messages:
    409
    Likes Received:
    126
    They can easily be found at skullsecurity...

    On the elcomsoft I have to use v4 something, or the R700's are not used to
    the full potential. AMD's drivers suck.
     
    • Agree Agree x 1
  15. leonard_0506

    leonard_0506 Active Member

    Joined:
    26 Sep 2012
    Messages:
    6
    Likes Received:
    6
    who can crack this for me?
    appreciate for your help
     

    Attached Files:

    • Like Like x 1
  16. leonard_0506

    leonard_0506 Active Member

    Joined:
    26 Sep 2012
    Messages:
    6
    Likes Received:
    6
    S.O.S
     
    • Like Like x 1
  17. meknb

    meknb Mod
    Moderator Dev Team VIP

    Joined:
    2 Jun 2012
    Messages:
    702
    Likes Received:
    203
    Your suppose to post a handshake and your router ssid make and model etc the more info the better.
    We cant guess your password?
     
    • Like Like x 1
  18. leonard_0506

    leonard_0506 Active Member

    Joined:
    26 Sep 2012
    Messages:
    6
    Likes Received:
    6
    th
    thanks for your quick response.
    ssid
    pmulia087@unfibiz
    model-don't know
    --- Double Post Merged, 22 Jun 2014 ---
    this is the wpa file...
     

    Attached Files:

    • Like Like x 1
  19. meknb

    meknb Mod
    Moderator Dev Team VIP

    Joined:
    2 Jun 2012
    Messages:
    702
    Likes Received:
    203
    unifi routers a good place to start is 8 digit numerical as the ssid is default.
    Looks like a dlink.
     
    #59 meknb, 22 Jun 2014
    Last edited: 22 Jun 2014
    • Like Like x 1
  20. leonard_0506

    leonard_0506 Active Member

    Joined:
    26 Sep 2012
    Messages:
    6
    Likes Received:
    6
    can u recommend me what software i should use?
    where i can download the suitable dictionary for crack the password?
     
    • Like Like x 1

Share This Page

Loading...