直接搞定WPA和WPA2 无线密码P解工具

512373570

只有顶起了

lovespace

阿斯顿发送到飞

zybzhong

太无语了.要那么多钱..唉.不看了.

mikekooer

想分享的话，就别搞的这么贵嘛。

mikekooer

{:2_31:} {:3_47:} 上当了，全是鸟文！[分享] 直接搞定WPA和WPA2 无线密码P解工具
, y: f7 u5 p* X3 E1 x- H, R$ u2 }% }记录付费主题, 价格:金币 5 元

coWPAtty for Windows MAIN:" c# [' V" W5 W: S0 @- t+ L- A" K 5 K5 N0 [0 U" c0 V8 @$ d+ ~0 m "coWPAtty is designed to audit the pre-shared key (PSK) selection for WPA networks based on the TKIP protocol." - Joshua Wright. ! j4 _$ I9 I$ ~6 {, C, a Project Homepage: http://www.willhackforsushi.com/Cowpatty.html 7 {4 K% j& u, O0 Z/ r+ V% x* X* u& b. U Local Mirror: Cowpatty-4.0-win32.zip  MD5: aa9ead2aacfcc493da3684351425d4c6 9 b3 @4 E& O' [: O7 [ ' u8 t9 G) I5 T  @ coWPAtty Dictionary Attack ; ~7 h4 W' N$ U0 v0 j Precomputing WPA PMK to crack WPA PSK - F% P/ E$ w7 Q$ e7 b- j coWPAtty Precomputed WPA Attack ; i, y# U4 E4 B coWPAtty Recomputed WPA2 Attack $ C( N7 |* e# d. k coWPAtty Tables ; a/ `' N8 @: G+ P! z9 T2 E+ [: [- K- w- b! [$ Y8 ?  n4 CcoWPAtty Usage:" l' Q1 y& _/ ]; a, B. K 5 V! ~) Y/ b2 T- G1 @ 8 g* d6 s' \  R# D coWPAtty Dictionary Attack: 4 K& x/ w; K. i# G9 a, {2 P& p  m( @ Toperform the coWPAtty dictionary attack we need to supply the tool witha capture file that includes the TKIP four-way handshake, a dictionaryfile of passphrases to guess with and the SSID for the network. - P1 w' M/ g3 g! W9 L9 g1 _6 x5 V$ c, m) e: q+ k# @% d In orderto collect the four-way handshake you can either wait until a clientjoins the network or preferably you can force it to rejoin the networkusing tools like void11 or aireplay and capture the handshakes usingsomething like kismet, ethereal or airodump. 0 u' ]8 p( o- ~% F; \1 z; Y$ Q; @& B7 o cowpatty -f dict -r wpapsk-linksys.dump  -s linksys ' e! ?0 H5 D0 @# p ) ?( ^7 p2 r" Q6 T9 m* n! Z3 _& H1 X/ P  N& ^" Z , S: ^' f$ N( z, M6 d. m ; ?( u5 \1 I) i/ _5 |! \, A5 T. h5 ^/ s! d; M- }' H" q! g% M/ v% a% e , Y- t3 \. ?3 J0 D# C8 T  k! r4 k As youcan see this simple dictionary attack took 51 seconds, we can speed upthis process by precomputing the WPA-PMK to crack the WPA-PSK (seebelow). , M+ W6 X7 x2 \7 F* Y( K0 F# p/ S wpapsk-linksys.dump is the capture containing the four-way handshake 1 G4 P# A/ r" Z# c8 y$ j& x; t0 E7 M dict is the password file   B& R( A8 E) j5 \ 1 N3 v4 M. Z9 N" n2 u linksys is the network SSID & b, @' m2 p4 p4 ^1 @6 C; @2 V 8 @7 x- G& A- y% H; {) @2 A; ^3 f: [" z; k3 X6 T3 Z Precomputing WPA PMK to crack WPA PSK:& ?( q1 a- w9 ?+ R, ^4 }& y8 k& Z' [ genpmkis used to precompute the hash files in a similar way to Rainbow tablesis used to pre-hash passwords in Windows LANMan attacks.  There is aslight difference however in WPA in that the SSID of the network isused as well as the WPA-PSK to "salt" the hash.  This means that weneed a different set of hashes for each and every unique SSID i.e. aset for "linksys" a set for "tsunami" etc. 5 j/ J; c% [+ H( w8 i8 z5 ]' V4 E2 p; p1 q8 c! u ! K% Z$ T) {1 O* c5 G So to generate some hash files for a network using the SSID cuckoo we use: 3 ~: Z! Q. |$ b/ u2 [& |! Y ) v. ~, u) a( Y' W  t7 b# H9 u$ n* e0 x' C) z* Z- [ genpmk  -f  dict  -d linksys.hashfile  -s linksys   " e: r5 S, a8 M1 L ; Z; u% [/ x6 S0 G  @" V* ?( E: Q' u1 `( T( K  g( ~0 A ' t- \0 G7 ~* y# s! Y. s+ H8 `, i2 {: ~ dict is the password file $ u! {* J: _; d0 ]   y) P0 o$ Q& Z( Z' m linksys.hashfile is our output file & @. F/ ]( q; d* S, k% F" u( X  V' o+ `9 `; P linksys is the network ESSID & l0 O3 {1 ?5 P- I4 j* @* S' S" v8 X; L7 M: j4 E; n! n9 I4 z# l. N: E5 X, X1 |+ b( P. O( b coWPAtty Precomputed WPA Attack:4 z7 T. n" N& j  p5 E1 G! A3 g Now wehave created our hash file we can use it against any WPA-PSK networkthat is utilising a network SSID of cuckoo.  Remember the capture(wpa-test-01.cap) must contain the four-way handshake to be successful. 8 @  f& i$ s1 l+ \; n * s5 K! i: F) g, w6 ^( Z' W) n7 _  A) X$ P: B 8 i+ ^" r7 d9 h* b cowpatty  -d linksys.hashfile -r wpapsk-linksys.dump  -s linksys   . w8 {, G( v' j# c8 G! n3 L! ? $ }6 G8 b) O& W  e5 U6 K% G$ z3 ]4 e" V5 \8 f2 ^9 d wpa-test-01.cap is the capture containing the four-way handshake 2 t# U& x, C* S: q) h0 T) X8 j# m linksys.hashfile are our precomputed hashes / N( I! Y% d7 e, s linksys is the network ESSID 7 r! r& ?$ D& r: }. A* ~ , d/ K: u. o3 D- S7 K* ]: } Notice that cracking the WPA-PSK took 0.04 seconds with the pre-computed attacked as opposed to 200 secondswith standard dictionary attack mode, albeit you do need to pre-computethe hash files prior to the attack.  However, precomputing large hashfiles for common SSIDS (e.g. linksys, tsunami) would be a sensible movefor most penetration testers. & b, H9 ]1 B3 F8 W& s, p' @& z  Y # `. W7 b$ h- v' ?3 z1 ccoWPAtty Precomputed WPA2 Attack:- d( ^7 X: ~* l+ ]0 B & C4 ^* Q% u2 {) B4 C* x coWPAtty4.0 is also capable of attacking WPA2 captures.  Note: The same hashfile as was used with the WPA capture was also used with the WPA2capture. + a  p+ K) s2 J3 C% X+ ]& j9 d3 ^+ Y3 p: {; P& A cowpatty  -d linksys.hashfile -r wpa2psk-linksys.dump  -s linksys 4 y( \, h/ D2 W0 O( S5 h1 x3 v0 F1 M' Z4 k# ~ 3 y8 E" u  [6 T4 X, N) Q0 | ! \7 L( r4 v' U% b8 N2 Y9 N* U- [" ~# J6 ], c& k7 A+ g wpa2psk-linksys.dump is the capture containing the four-way handshake * g) ?. p, d2 d. o5 R2 F" s4 O- o: ^4 }! m. ~ dict is the password file , }  c, i6 B: p. G  w" ^2 W, h1 {3 V! b% U0 ?+ Y% O linksys is the network SSID   ]/ t  N9 Y( E) _: e  b0 _/ q1 A - A3 k1 B) G# j! M3 [7 s* g . Q. c6 ~, ~# j2 y5 n: v9 t6 @# J' Y. P7 t* G, X6 `/ LcoWPAtty Tables: 8 ?! h5 l% \6 E, G3 `" n9 g1 i( ?- AThe Church of Wifi have produced some lookup tables for 1000 SSID's computed against a 170,000 word password file.  The resultant table are approximately 7 Gigabytes in size and can be downloaded via Torrent: ( ~' v, d2 g1 j! B( w0 `+ d& ~3 Z  p9 A: H8 d8 ?% c- `& w http://torrents.lostboxen.net/co ... atty-4.0_2006-10-19 2 K9 `" L& E+ T$ x, r& g4 S9 Q6 H6 y# _! P3 J% n A 33 Gigabyte set of tables are also available: http://umbra.shmoo.com:6969/$ d5 C" P* g$ p! D, i8 a 3 }: {8 j, z. ]; p) `% S 4 j1 N8 u) d+ W% V' ?2 W% rOr you can buy them via DVD, direct from Renderman (initiator of the project): http://www.renderlab.net/projects/WPA-tables/

音乐之声

就是，太贵了吧

FEIJIAN06

有用吗？？？？？？？？？？？？？？

FEIJIAN06

有用吗？？？？？？？？？？？？？？看看

zgx169

啥东东啊？

cjs007

你穷疯了哦

wpincheng

linwenzhi7

全部鸟语的！！！！ 直接复制！日