aircrack-ng
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| aircrack-ng [2017/03/15 01:50] – Added note about -l overwriting existing file. mister_x | aircrack-ng [2018/07/11 20:30] – [Usage] Updated mister_x | ||
|---|---|---|---|
| Line 91: | Line 91: | ||
| ^Option^Param.^Description^ | ^Option^Param.^Description^ | ||
| |-a|amode|Force attack mode (1 = static WEP, 2 = WPA/ | |-a|amode|Force attack mode (1 = static WEP, 2 = WPA/ | ||
| - | |-b|bssid|Long version - -bssid. Select the target network based on the access point' | ||
| |-e|essid|If set, all IVs from networks with the same ESSID will be used. This option is also required for WPA/ | |-e|essid|If set, all IVs from networks with the same ESSID will be used. This option is also required for WPA/ | ||
| + | |-b|bssid|Long version - -bssid. Select the target network based on the access point' | ||
| |-p|nbcpu|On SMP systems: # of CPU to use. This option is invalid on non-SMP systems.| | |-p|nbcpu|On SMP systems: # of CPU to use. This option is invalid on non-SMP systems.| | ||
| |-q|// | |-q|// | ||
| + | |-C|MACs|Long version - -combine. | ||
| + | |-l|file name|(Lowercase L, ell) logs the key to the file specified. Overwrites the file if it already exists.| | ||
| |-c|// | |-c|// | ||
| |-t|// | |-t|// | ||
| Line 100: | Line 102: | ||
| |-d|start|(WEP cracking) Long version --debug. | |-d|start|(WEP cracking) Long version --debug. | ||
| |-m|maddr|(WEP cracking) MAC address to filter WEP data packets. Alternatively, | |-m|maddr|(WEP cracking) MAC address to filter WEP data packets. Alternatively, | ||
| - | |-M|number|(WEP cracking) Sets the maximum number of ivs to use.| | ||
| |-n|nbits|(WEP cracking) Specify the length of the key: 64 for 40-bit WEP, 128 for 104-bit WEP, etc. The default value is 128.| | |-n|nbits|(WEP cracking) Specify the length of the key: 64 for 40-bit WEP, 128 for 104-bit WEP, etc. The default value is 128.| | ||
| |-i|index|(WEP cracking) Only keep the IVs that have this key index (1 to 4). The default behaviour is to ignore the key index.| | |-i|index|(WEP cracking) Only keep the IVs that have this key index (1 to 4). The default behaviour is to ignore the key index.| | ||
| |-f|fudge|(WEP cracking) By default, this parameter is set to 2 for 104-bit WEP and to 5 for 40-bit WEP. Specify a higher value to increase the bruteforce level: cracking will take more time, but with a higher likelyhood of success.| | |-f|fudge|(WEP cracking) By default, this parameter is set to 2 for 104-bit WEP and to 5 for 40-bit WEP. Specify a higher value to increase the bruteforce level: cracking will take more time, but with a higher likelyhood of success.| | ||
| |-H|// | |-H|// | ||
| - | |-l|file name|(Lowercase L, ell) logs the key to the file specified. Overwrites the file if it already exists.| | ||
| |-K|// | |-K|// | ||
| |-k|korek|(WEP cracking) There are 17 korek statistical attacks. Sometimes one attack creates a huge false positive that prevents the key from being found, even with lots of IVs. Try -k 1, -k 2, ... -k 17 to disable each attack selectively.| | |-k|korek|(WEP cracking) There are 17 korek statistical attacks. Sometimes one attack creates a huge false positive that prevents the key from being found, even with lots of IVs. Try -k 1, -k 2, ... -k 17 to disable each attack selectively.| | ||
| Line 118: | Line 118: | ||
| |-w|words|(WPA cracking) Path to a wordlist or " | |-w|words|(WPA cracking) Path to a wordlist or " | ||
| |-z|// | |-z|// | ||
| - | |-P|//none//|Long version - -ptw-debug. | + | |-P|number|Long version - -ptw-debug. |
| - | |-C|MACs|Long version - -combine. | + | |-K|//none//|Use KoreK attacks instead of PTW.| |
| |-D|// | |-D|// | ||
| |-V|// | |-V|// | ||
| - | |-1|// | + | |-1|// |
| + | |-M|number|(WEP cracking) Specify the maximum number of IVs to use.| | ||
| |-S|// | |-S|// | ||
| + | |-Z|sec|WPA cracking speed test execution length in seconds.| | ||
| |-s|// | |-s|// | ||
| - | |-E|file> | + | |-N|file|Create a new cracking session and save it to the specified file.| |
| - | |-J|file|(WPA cracking) Create Hashcat Capture file| | + | |-R|file|Restore cracking session from the specified file.| |
| + | |-E|file> | ||
| + | |-J|file|(WPA cracking) Create Hashcat Capture file.| | ||
| + | |-j|file|(WPA cracking) Create Hashcat v3.6+ Capture file (HCCAPX).| | ||
| + | |--simd|optimization|Use user-specified SIMD optimization instead of the fastest one.| | ||
| + | |--simd-list|// | ||
| ===== Usage Examples ===== | ===== Usage Examples ===== | ||
| ==== WEP ==== | ==== WEP ==== | ||
| Line 508: | Line 515: | ||
| If you are sure your capture file contains a valid handshake then use Wireshark or an equivalent piece of software and manually pull out the beacon packet plus a set of handshake packets. | If you are sure your capture file contains a valid handshake then use Wireshark or an equivalent piece of software and manually pull out the beacon packet plus a set of handshake packets. | ||
| - | There is an open [[http://trac.aircrack-ng.org/ticket/651|trac ticket]] to correct this incorrect behavior. | + | There is an open [[https://github.com/ |
aircrack-ng.txt · Last modified: 2019/09/18 22:39 by mister_x