Now next step is to capture a 4-way handshake because WPA/WPA2 uses a 4-way handshake to authenticate devices to the network. So Our BSSID address is C4:F0:81:A1:0C:99 and Channel No is 11.Īs we can see in the screenshot above, airodump-ng displays all of the APs (access points) within range with their BSSID (MAC address), their power, the number of beacon frames, the number of data packets, the channel, the speed, the encryption method, the type of cipher used, the authentication method used, and finally, the ESSID. Remember the BSSID MAC address and channel (CH) number as displayed by, as we will need them both for the further steps. You should see the output similar to above screen.įor the purposes of this practical, we will choose to crack the password of our network, “ Chetan Soni“. Start listening to 802.11 Beacon frames broadcast by nearby wireless routers using your monitor interface by typing “ airodump-ng wlan0mon” in your same terminal. The next tool is airodum-ng which enables us to capture packets of our specifications. Now to start the monitor mode, just type “ airmon-ng start wlan0“, which converts your wlan0 into wlan0mon. Here ng means New Generation, because aircrack-ng replaces older suite called aircrack that is no longer supported. Now second step is to use Aircrack-ng which converts your wireless card into promiscuous monitor mode, it means it can see and receive all network traffic. Here you can see, wlan0 is your wireless interface and it tells that it supports 802.11, ESSID is off and mode is managed etc. Now first step is to recognize your wireless adapter by typing “ iwconfig” in your terminal. If aircrack-ng is not installed in your Linux machine, then you can easily install it via below command:

A USB Wi-Fi Adapter which supports monitor mode.

A Kali Linux machine (2017.1 preferably).

The author is not responsible for its use.

It should not be used for illegal activity. An optional active deauthentication attack can be used to speed up the reconnaissance process and to get the handshake value.ĭISCLAIMER: This method is for educational purposes only. The attack outlined below is entirely passive and it is impossible to detect provided that you don’t actually use the password that you crack.

It is not exhaustive, but it should be enough information for you to test your own network’s security or break into one nearby. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords.

How to use aircrack with wpa