wifite

mass wep/wpa cracker for backtrack4

introduction

designed for Backtrack4 RC1 distribution of Ubuntu. Linux only; no windows or osx support.

purpose

to attack multiple WEP and WPA encrypted networks at the same time. this tool is customizable to be automated with only a few arguments. wifite can be trusted to run without supervision.

features

• this project is available in French: all thanks goto Matt² for his excellent translation!
• sorts targets by power (in dB); cracks closest access points first
• automatically deauths clients of hidden networks to decloak SSIDs
• numerous filters to specify exactly what to attack (wep/wpa/both, above certain signal strengths, channels, etc)
• customizable settings (timeouts, packets/sec, channel, change mac address, ignore fake-auth, etc)
• "anonymous" feature; changes MAC to a random address before attacking, then changes back when attacks are complete
• all WPA handshakes are backed up to wifite.py's current directory
• smart WPA deauthentication -- cycles between all clients and broadcast deauths
• stop any attack with Ctrl+C -- options: continue, move onto next target, skip to cracking, or exit
• switching WEP attack methods does not reset IVs
• intel 4965 chipset fake-authentication support; uses wpa_supplicant workaround
• SKA support (untested)
• displays session summary at exit; shows any cracked keys
• all passwords saved to log.txt
• built-in updater: ./wifite.py -upgrade

requirements

• linux operating system (confirmed working on Ubuntu 8.10 (BT4R1), Ubuntu 10.04.1)
• tested working with python 2.4.5 and python 2.5.2; might be compatible with other versions,
• wireless drivers patched for monitor mode and injection: backtrack4 has many pre-patched drivers,
• aircrack-ng (v1.1) suite: available via apt: apt-get install aircrack-ng or by clicking here,
• xterm, python-tk module: required for GUI, available via apt: apt-get install python-tk
• macchanger: also available via apt: apt-get install macchanger
• pyrit: not required, optionally strips wpa handshake from .cap files

execution

download the latest version:

wget -O wifite.py http://wifite.googlecode.com/svn/trunk/wifite.py

change permissions to executable:

chmod +x wifite.py

execute:

python wifite.py

or, to see a list of commands with info:

./wifite.py -help

snapshot

console mode:

gui mode (default):

examples

the program contains lots of interactivity (waits for user input). these command-line options are meant to make the program 100% automated -- no supervision required.

to crack all WEP access points:

./wifite.py -all -nowpa

to crack all WEP access points with signal strength greater than (or equal to) 50dB:

./wifite.py -p 50 -nowpa

to attack all access points, use 'darkc0de.lst' for cracking WPA handshakes:

./wifite.py -all --dict /pentest/passwords/wordlists/darkc0de.lst

to attack all WPA access points, but do not try to crack -- any captured handshakes are saved automatically:

./wifite.py -all -nowpa --dict none

to crack all WEP access points greater than 50dB in strength, giving 15 minutes for each WEP attack method, and send packets at 600 packets/sec:

./wifite.py --power 50 -wepw 15 -pps 600

to attempt to crack WEP-encrypted access point "2WIRE752" endlessly -- program will not stop until key is cracked or user interrrupts with ^C):

http://code.google.com/p/wifite/

Linux Root Password Recovery

"root" is the super user of Linux Operating System and he has full privilege to do anything on it. and if you forgot the root users password then it is very helpless situation for you. in this situation you will not able to do any changes in Linux Operating system, and as a standard user you do not have such privilege who has root user. but do not vary about this problem, Linux operating system has solution for this problem.

Before do this you need some basic concept about "init" process. init is father of all Linux processes and it is first process which is executed at the time of booting after the loading Linux kernel in to the RAM. By default init has 7 run levels and every run level has specific use.

Default runlevel. The runlevels used by Linux are:
# 0 - halt (Do NOT set initdefault to this)
# 1 - Single user mode
# 2 - Multiuser, without NFS (The same as 3, if you do not have networking)
# 3 - Full multiuser mode
# 4 - unused
# 5 - X11
# 6 - reboot (Do NOT set initdefault to this)

This run levels you can change by 3 different ways in Linux Operating System

1. In first method you can change run level from init configuration (/etc/inittab) file it will be permanent,
2. In Second method run levels can change from Linux command prompt,
3. You can also change run level temporary at the booting time.

For recover root password you will use third method change run level while booting. Step by step procedure describe below

Step - 1. Boot you which root Linux and grub boot loader screen will appear press "Enter" key and you will be in following screen, and hear type "e" to go in to edit mode.

Step - 2. In the edit windows select line which start from "kernel" and again press "e" to edit this line.

Step - 3. Now you are in Line editing mode and curser will be at end of the kernel line, at the end of line first press "space bar" and then type "1" and press "Enter" and then press "b" to boot the Linux with the new setting. and boot will start.

Step - 4. Wow see what happed you are in shall prompt without username and password, this is magic of Single user mode in Single user mode Linux never ask for username password to enter in to Linux system.

Step -5. Now at shall prompt type "passwd" command to change root password and for change password system will not ask for previous password, hear type new password and retype same password and you root password is changed reboot you Linux and login as a root with the new password and enjoy it.

Warning - In our world every thing has good side as well as bad side also. Linux Signal user mode also has bad side if anybody has physical accesses on you system so he can use single user mode to change root password, so you need to secure you systems single user mode for this two sequence of methods

1. Protect your system with Bios Password.
2. And use grub password to protect the grub editing mode while booting

http://blog.laksha.net

Uninstall Linux From Dual boot System With Windows

This is very obvious question about dual booting computer, means if you have install Windows and Linux both in deferent partitions, and any reason you want to uninstall Linux from your computer, to do this some users delete the Linux partition but groub is still in MBR and after deleting Linux partition they will face new problem when computer will reboot the system load groub from MBR but groub configuration file also deleted with Linux partitions and now groub prompt will appear and your system will not boot Linux as well as Windows also, to solve this problem you have to remove groub from MBR

With the following step by step procedure you can uninstall or delete Linux completely and safely.

Requirements:

You need a windows xp startup disk or windows installation bootable CD.

Step by step procedure:

1. First Reboot your computer with windows 98 start up disc or Windows CD (with Recovery Console option) and type the following command.

“fixmbr”

2. "fixmbr" command will replace grub loader of Linux and repair yours bootloader and rewrite ntldr on MBR of Hard Disk, now you will see only Windows in the boot menu.

3. Now Boot up with your windows operation system

4. And with use of Disk Manager delete the Linux partition

To run Disk Manager

Go to Start > Control Panel > Administrative Tools > Computer Management

5. Go to Disk Management under “Storage”

6. Select your Hard Disk and then select the Linux partition and delete the Linux partition this will delete Linux and grub from boot partition of Linux.

http://blog.laksha.net

Ubuntu Static IP

setup static IP address under Ubuntu

Ubuntu Linux stores all network configuration option in /etc/network/interfaces configuration file. You need to open this file using a text editor such as vi or gedit.

Open terminal (command line)

Type the following command:
#sudo vi /etc/network/interfaces
OR
sudo gedit /etc/network/interfaces
Make the changes as follows:

auto eth0
iface eth0 inet static
address 192.168.1.100
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.254

Save and close the file. Restart networking:
$ sudo /etc/init.d/networking restart

Configure Manual IP Address In BackTrack

BackTrack is the very famous Live CD Linux Distribution, and it is use for Penetration testing and it has wide range of security tools, to connect BackTrack computer with the network you have to configure IP address on the LAN Interface

To configure IP Address on the eth0 interface

#ifconfig eth0 10.0.12.13

If you want to configure IP Address with Subnetmask use following COmmand

#ifconfig eth0 10.0.12.50 netmask 255.255.248.0

To manually configure default gateway:

#route add default gw 10.0.8.1 eth0

To Configure DNS servers IP Address:

#echo nameserver 4.2.2.1 > /etc/resolv.conf

#echo nameserver 4.2.2.2 >> /etc/resolv.conf

Turn on the LAN Card

#ifconfig eth0 up

To see Full Information about LAN Card

#ifconfig -a

http://blog.laksha.net