Wednesday, December 21, 2016

Installation of modified Reaver with Pixie-dust

Hello Guys
Today i am going to show you "How to install modified Reaver which include Pixie Dust Attack"

About Reaver

Reaver has been designed to be a robust and practical attack against Wi-Fi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. It has been tested against a wide variety of access points and WPS implementations.
The original Reaver implements a online brute force attack against, as described in http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf. reaver-wps-fork-t6x is a community forked version, which has included various bug fixes and additional attack method (the offline Pixie Dust attack).
Depending on the target's Access Point (AP), to recover the plain text WPA/WPA2 passphrase the average amount of time for the transitional online brute force method is between 4-10 hours. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase. When using the offline attack, if the AP is vulnerable, it may take only a matter of seconds to minutes.

 Installation

Step 1: Type on Terminal
"apt-get -y install build-essential libpcap-dev sqlite3 libsqlite3-dev aircrack-ng pixiewps"



Step 2: Go to this link "https://github.com/t6x/reaver-wps-fork-t6x"


 Step 3: Now type on Terminal "git clone https://github.com/t6x/reaver-wps-fork-t6x"

 Step 4: Type on Terminal"cd reaver-wps-fork-t6x/"

Step 5: Type on Terminal "cd src/"

Step 6: Type on Terminal "./configure"

Step 7: Type on Terminal "make"

Step 8: Type on Terminall "make install "






Thats all guys ;-) you are ready to launch reaver, to use pixiewps

Type "reaver -i (interface) -b (Bssid) -c (channel) -vvv K 1"

where  -i : interface of monitermode
           -b : Bssid
           -c : Current channel for Bssid
         -K 1: Launching Pixiewps   




 

Monday, November 28, 2016

You want to be an Ethical Hacker ..So read it carefully

Hello guys
Today i m sharing my feeling about a article which i read today,thats best on "Ethical Hacking". For those people who are newbie in this regularly updating field,you must read this well written article ,i found myself fan of this guy.
My favorite line in that article

"Ethical Hacker closely related to Certified Ethical Hacker(CEH) certification offer by EC-Council which in my opinion is one of the worst courses and certifications on the market. At best an utter waste of time and money if you ask me. This course is a mindless run through of tools that will quickly become obsolete and outdated and you will not be able to hack anything after taking this certification. The only value is that for some reason the HR crowd thinks it’s hardcore."

Please go through the link for nicely written article by Kim Guldberg

https://www.linkedin.com/pulse/20141113184204-8752964-so-you-want-to-be-an-offensive-security-guy