Start a Wi-Fi packet encryption tool such as aireplay-ng in ARP request replay mode to inject packets.The attacker captures the IVs generated by using tools such as Cain & Abel and airodump-ng with a BSSID filter to collect unique IVs.The injection will fail due to the lack of association with the AP. The attacker ensures that the source MAC address is already associated, so that the AP accepts the injected packets.Use a tool such as aireplay-ng to do a fake authentication with the AP.The attacker tests whether the wireless interface is within the range of the specified AP and whether it is capable of injecting packets to it.Test the injection capability of the wireless device to the AP.The attacker can select some packets for injection by listening to every packet available in the air. The interface can listen to every packet in the air. In this step, the attacker sets the wireless interface to monitor mode.

Start the wireless interface in monitor mode on the specific AP channel.

To break WEP encryption the attacker follows these steps: Password should appear on screen, between brackets. If it does not work after some minutes, run the same command again. Identify the system you want to hack and note the BBSID and the channel number (CH).įor this example, CH is 00 and BBSID is XX:XX:XX:XXĬreates a file where all data is going to be.Īirodump-ng -c 00 -w -bbsid XX:XX:XX:XX:XX wlanXĬreates a file where all data is going to be dumped. Scan your wireless and identify a WEP access point

MAC address will be reestablish when you reboot your computer.ģ. If you are not able to do so, probably you need to buy an external wireless adapter.Ģ. Try to put your external wireless adapter in monitor mode by typing: Kill all processes that may conflict with the monitor mode by typing:

In this tutorial, I assume card is wlanX (probably you will need to substitute X by a number). You may run iwconfig twice, before and after plugging it, so you can identify easily which is the identifier for your external wireless adapter. If your wireless adapter is external, you need to plug it. In order to identify connected, type the following command: Ensure you have a wireless adapter compatible with monitor mode Ensure aircrack-ng suite is installed in your computerĢ. This tutorial assumes that your operating system is Linux, in any of its variants (Kali Linux, Ubuntu, etc.)

How to use aircrack on kali