shockli
Contributor
- Jan 29, 2016
- 243
- 194
- 111
Hello r4p3 members. This post will show you how to crack a captured key. You can learn how to capture the key from my previous post.
Software Required:
Windows & Linux:
oclHashcat for ATI cards OR CUDAHashcat for Nvidia Cards. Both are available for download at http://hashcat.net/hashcat/. You need to have the appropriate drivers installeda.
Hardware Required:
Nvidia GTX650TI or above. The more graphics cards the better. ATI graphics cards work much better (and are cheaper). The machine I have access to is running two 980’s.
Step One: Getting the Handshake
Get the handshake. You can get this by following my previous post.
Step Two: Converting the Captured File
You need to convert the captured file so that hashcat can use it. You can do this either in hashcat or with this nice link: https://hashcat.net/cap2hccap/
Step Three: Choosing the Best Attack Type:
In my opinion a Hybrid attack works the best. A rule-based attack works very well aswell, but you need to know what you are doing. I recommend reading around a bit and choosing one that will work best for your situation (Is the person stupid, will they keep the default password, or will they have a minimum letter random-generated password?)
You will need to get a wordlist, I like the 10 Million Passwords: https://github.com/danielmiessler/SecLists/tree/master/Passwords one a lot. You can also google for a local one, I’ve found one in my local language and have had much more success with it.
Step Four: Putting Your GPU(s) to Work
Once you have chosen your method, you must now run it. I will show you how to use my favorite, the hybrid attack:
(You might need to remove the ./ in Windows)
Step Five: Wait or Give Up:
You will now need to wait for it. It will take from minutes to weeks, depending on your GPU. If it doesn’t crack it in a week you can consider the owner of the WiFi network’s password to be secure (not really many of those), and might as well give up.
Extra Activity: Show off your specs (or cry about them), give us benchmark results!
Software Required:
Windows & Linux:
oclHashcat for ATI cards OR CUDAHashcat for Nvidia Cards. Both are available for download at http://hashcat.net/hashcat/. You need to have the appropriate drivers installeda.
Hardware Required:
Nvidia GTX650TI or above. The more graphics cards the better. ATI graphics cards work much better (and are cheaper). The machine I have access to is running two 980’s.
Step One: Getting the Handshake
Get the handshake. You can get this by following my previous post.
Step Two: Converting the Captured File
You need to convert the captured file so that hashcat can use it. You can do this either in hashcat or with this nice link: https://hashcat.net/cap2hccap/
Step Three: Choosing the Best Attack Type:
In my opinion a Hybrid attack works the best. A rule-based attack works very well aswell, but you need to know what you are doing. I recommend reading around a bit and choosing one that will work best for your situation (Is the person stupid, will they keep the default password, or will they have a minimum letter random-generated password?)
You will need to get a wordlist, I like the 10 Million Passwords: https://github.com/danielmiessler/SecLists/tree/master/Passwords one a lot. You can also google for a local one, I’ve found one in my local language and have had much more success with it.
Step Four: Putting Your GPU(s) to Work
Once you have chosen your method, you must now run it. I will show you how to use my favorite, the hybrid attack:
Code:
./cudahashcat.sh -m 2500 r4p3isAw3s0m3.hccap -a 7 ?d?d?d?d 10millionpasswords.dict ?d?d?d?dStep Five: Wait or Give Up:
You will now need to wait for it. It will take from minutes to weeks, depending on your GPU. If it doesn’t crack it in a week you can consider the owner of the WiFi network’s password to be secure (not really many of those), and might as well give up.
Extra Activity: Show off your specs (or cry about them), give us benchmark results!
Code:
./cudaHashcat -b
