Mr. Penguin's Guide to Hacking WPA / WPA2 with Xiaopan 0.4.5 + Minidwep + Password List

Remember this is a professional wireless auditing tool and you should only use it on your clients or personal networks to test for security. Do not hack networks that you do not own or affiliated with.​

Ok so many people want to know how to hack WPA / WPA2 with a dictionary wordlist. It is an extremely easy to do but as there are so many combinations of passwords you need to be strategic in creating your own wordlist based on research of the potential format of default passwords the ISP or AP manufacturer may have put in place.

Also when someone changes that password typically they choose a very simple password like xiaopan1234. For that I suggest you use crunch.

Now, before you start this tutorial you should have Xiaopan 0.4.5, a compatible device and it should be installed in virtualisation or as a Live USB or CD (USB is recommended).

I Used
Xiaopan 0.4.5
Installed it using @Fantasma's method using LiLi USB Creator
ALFA AWUS036H

It took me about 3 minutes to hack but I was using my own router so I embedded the password in the wordlist I created. Longest part was capturing the handshake which took about 1 minute.

Step 1
Open Minidwep (4th icon from the right and click OK to the disclaimer) ​

Step 2
Click Scan and make sure WPA/WPA2 is selected in the Encryption drop down box


Step 3
Now select the network you want to hack


Step 4
Now you want to select Launch, this will try to capture the handshake, it can take awhile


Step 5
After you have captured the handshake this box will come up, navigate to the wordlist you created


Step 6
When you found it click OK


Step 7
Now when it finds the password this box will show up


Step 8
Now we can save the handshake, the Key will be saved in the tmp folder

Step 9
Now you can save it your computer. I suggest you mount another USB using the mount tool (8th icon on right) and navigate to your mnt/device

Step 10
Select the file you want to copy.

​

This was a quick tutorial but plan to add more later. If you have any questions please feel free to ask.

 

It needs a handshake epitomize and yes Reaver does take more time for WPS enabled devices. But success rate is better depending on the circumstances.

 

you sure can ijam you can also use various online services to upload your pcap / cap files for cracking as well. Or even use this cap in BackTrack or WiFi Slax. Anything really

Will do a tutorial soon.

 

kazuya_mishima

Please do not cross post you have already posted in here there is no need to post more than once the same information:

https://xiaopan.co/forums/threads/add-dictionary-to-xiaopan.2980/