EvilZone

Hacking and Security => Hacking and Security => : shadow125 September 19, 2015, 12:27:38 AM

: Help cracking packet encryption
: shadow125 September 19, 2015, 12:27:38 AM
Ok so I have this .pcap file with wifi packets that are encrypted, I'm pretty sure they contain an username and password I'm looking for and as far as I know it seems to be encrypted with the old wep standard, but I have no idea what softwares to use. Will aircrack do the job?
I'm reading more about the 802.11 protocol and I have Kali Linux installed, any help is appreciated.
: Re: Help cracking packet encryption
: khofo September 19, 2015, 01:09:41 AM
if it's wep why bothering with a pcap file. It's the most basic wifi hack, there are millions of tutos online to break WEP.
: Re: Help cracking packet encryption
: shadow125 September 19, 2015, 01:36:30 AM
yeah but I'm not interested in the wi-fi key, I want the files that were transfered over the network
all the tutorials i see are about cracking the key, but I don't know how to extract the files
: Re: Help cracking packet encryption
: matt_9908 September 19, 2015, 02:35:23 AM
I am pretty sure that if you used the advantages of any search engine, it wouldn't take you more than twenty seconds to find out it is airdecap-ng what you are searching for.
: Re: Help cracking packet encryption
: khofo September 19, 2015, 07:10:47 AM
Also if the network is wep, it would be much much more convenient to get access to the Network and then sniff/MiTM/DNS Spoof, etc. It makes much more sense than intercepting packets, and keep in mind if the packet is encrypted, what's inside might also be, it's unlikely that creds are put in plain text inside the packet
: Re: Help cracking packet encryption
: proxx September 19, 2015, 10:57:03 AM
yeah but I'm not interested in the wi-fi key, I want the files that were transfered over the network
all the tutorials i see are about cracking the key, but I don't know how to extract the files
You can plug the key into wireshark and decrypt on-the-fly, check out the 802.11 stuff in the menu.
That is what you seek isnt it?
(Wireshark can either do it live with a mon IF or with a PCAP)