Aircrack-ng

User Tools

Site Tools

Trace:
arp_amplification

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
arp_amplification [2009/06/01 18:19]
mister_x updated forum link 		arp_amplification [2018/03/11 20:09]
mister_x Removed link to trac
Line 19: Line 19:
  
 It is recommended that you experiment with your home wireless access point to get familiar with these ideas and techniques. If you do not own a particular access point, please remember to get permission from the owner prior to playing with it. It is recommended that you experiment with your home wireless access point to get familiar with these ideas and techniques. If you do not own a particular access point, please remember to get permission from the owner prior to playing with it.
- 
-I would like to acknowledge and thank the [[http://trac.aircrack-ng.org/wiki/Team|Aircrack-ng team]] for producing such a great robust tool.  
  
 Please send me any constructive feedback, positive or negative. Please send me any constructive feedback, positive or negative.
Line 71: Line 69:
 It also assumes you know the IP address of various devices on the network.   Chopchop is the most effective way to determine IP addresses since it decrypts packets for you.  In turn, looking at the decrypted packet will give you the IP address and network being used.  You can guess the network and typical IPs based on the manufacturer of the Access Point.  The manufacturer can typically be determined via the MAC address.  Same for DHCP pools which have standard defaults in each brand.  The last method is simply what most people pick as network numbers. It also assumes you know the IP address of various devices on the network.   Chopchop is the most effective way to determine IP addresses since it decrypts packets for you.  In turn, looking at the decrypted packet will give you the IP address and network being used.  You can guess the network and typical IPs based on the manufacturer of the Access Point.  The manufacturer can typically be determined via the MAC address.  Same for DHCP pools which have standard defaults in each brand.  The last method is simply what most people pick as network numbers.
    
-More research is being done on using interactive replay with live packets as an alternate method instead building packets from scratch.  Once this techique is refined, the tutorial will be updated and rereleased.+More research is being done on using interactive replay with live packets as an alternate method instead building packets from scratch.  Once this technique is refined, the tutorial will be updated and re-released.
  
 ===Scenario One - One for one ARP packets === ===Scenario One - One for one ARP packets ===
  
-This is typical of what occurs when you use [[http://aircrack-ng.org/doku.php?id=arp-request_reinjection|ARP request reinjection]].  Although it does not provide any extra amplification, we study it for educational purposes and to provide a baseline measurement of the injection speed.  In simple terms, for each ARP request that we inject, you get one new IV by the AP rebroadcasting it.+This is typical of what occurs when you use [[arp-request_reinjection|ARP request reinjection]]. Although it does not provide any extra amplification, we study it for educational purposes and to provide a baseline measurement of the injection speed.  In simple terms, for each ARP request that we inject, you get one new IV by the AP rebroadcasting it.
  
 We generate an ARP request to inject: We generate an ARP request to inject:
arp_amplification.txt · Last modified: 2018/03/11 20:09 by mister_x

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International
CC Attribution-Noncommercial-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki