直接搞定WPA和WPA2 无线密码P解工具

xj.kk520

你太强了，请给我发一个，谢谢！jiankang.520@163.com

skyli550

有点坑人的嫌疑！！

灵雾山

没有找到介绍。

colinhd8

估计是假的？

happysky

太貴了，我不想买

longya

ALFAjiushile

25213170

5555555555555555555555

25213170

coWPAtty for Windows MAIN:
' m0 R( K- c( G% ~% ?& [
1 M( v9 c" M! d- V  m7 w! I"coWPAtty is designed to audit the pre-shared key (PSK) selection for WPA networks based on the TKIP protocol." - Joshua Wright. & \4 h; g. W% d3 v6 M
1 m2 V# g/ O' G* E  K" \
  r2 B1 I  z/ \) DProject Homepage: http://www.willhackforsushi.com/Cowpatty.html
# p" \. l5 S1 ^9 K
# O/ h5 L2 R; v* l' x; Y8 C

  g0 K3 C/ q' _0 _Local Mirror: Cowpatty-4.0-win32.zip  MD5: aa9ead2aacfcc493da3684351425d4c6
4 @: T) j# Q; v/ f: a0 q
% u, ~& w1 w4 I5 s0 l
2 Y: q9 f* C% X4 T* Q6 Y9 B! t) |- O$ G. s
coWPAtty Dictionary Attack
0 K1 _$ @9 ~  `7 k
  ?6 I5 H% U1 J  c2 J! d' N! R  R8 l. [  i* r
3 h& ?. ?. r& x: {; M0 nPrecomputing WPA PMK to crack WPA PSK
. ^, C. n, l: Z+ v( N" P1 ^
. {- ~3 s) Z; F) `; y# N6 X" K4 A
coWPAtty Precomputed WPA Attack

1 s" c! d0 f: G4 g
coWPAtty Recomputed WPA2 Attack
8 [9 ]( u* m4 h5 ^
# A* D7 m. U' d* f, Q
( P' u% @0 a0 m8 [' X' TcoWPAtty Tables

* N+ O- V* h2 Y! ?% B0 j  N& l! e0 W, D0 z+ Q7 KcoWPAtty Usage:
& i+ X. W( |( U% U0 k, Z7 N1 `) ]. f% `+ w5 N  e* N$ r  D2 T" b( Y( g
1 K$ r; F" ~" O( L
coWPAtty Dictionary Attack:
( o: Z1 ~4 y% w0 \0 q. _6 e6 f
, A* b( o: j7 N% G  {5 H  @Toperform the coWPAtty dictionary attack we need to supply the tool witha capture file that includes the TKIP four-way handshake, a dictionaryfile of passphrases to guess with and the SSID for the network.
( r/ g( z; e( d/ Z, u4 l+ O, f+ @6 ~( ?5 y- a9 z
% X# K5 _$ n- r: K- \/ g" a8 w. p& G
  F" p1 j/ x8 b$ M# @  @2 x0 p; u$ hIn orderto collect the four-way handshake you can either wait until a clientjoins the network or preferably you can force it to rejoin the networkusing tools like void11 or aireplay and capture the handshakes usingsomething like kismet, ethereal or airodump.
5 h2 R- b- w, d' s% m
, z) g0 n% T: T, W# M6 Y$ M% W
! i5 E6 [, [2 N4 {0 Acowpatty -f dict -r wpapsk-linksys.dump  -s linksys
; K2 @5 m9 S8 L2 I5 b  m
' }' O- S+ u7 n- E$ T) D. t$ I. t2 x( `: {4 D( Z2 B9 M' q& _8 D( W+ ?. |5 r

9 G0 n( B9 @( j8 ]
9 W' q) I* I* k7 R. e+ C& O9 i- f+ {% x7 I8 G  P  d9 @1 ^1 J7 Y; L8 x( T2 R! W0 p4 Z
( h1 Y9 R& n% j
# g, Y/ f; D3 eAs youcan see this simple dictionary attack took 51 seconds, we can speed upthis process by precomputing the WPA-PMK to crack the WPA-PSK (seebelow).
/ Q2 w5 F! ^! p; O& S$ i

wpapsk-linksys.dump is the capture containing the four-way handshake
5 a- o  |3 Q4 I
2 n* p4 N* f, J* v6 ]1 y/ ~
dict is the password file

4 e% G8 H# X! Z& D' D$ f
linksys is the network SSID

( L0 o+ V6 J* b) e' b( g$ S4 M# t
. k& M- ]& X6 L" \; M, B. l8 Z: D( uPrecomputing WPA PMK to crack WPA PSK:, {# Z6 Q  T, s( e) w" c- s" E8 u
/ N/ u0 U, J! m& c( r  X
genpmkis used to precompute the hash files in a similar way to Rainbow tablesis used to pre-hash passwords in Windows LANMan attacks.  There is aslight difference however in WPA in that the SSID of the network isused as well as the WPA-PSK to "salt" the hash.  This means that weneed a different set of hashes for each and every unique SSID i.e. aset for "linksys" a set for "tsunami" etc.
) K$ U/ ]0 p1 y0 L, n5 S. E; a5 Z0 n2 B+ u/ M4 P4 h& l
: U# C, F. V0 P0 ]

So to generate some hash files for a network using the SSID cuckoo we use:
& n; O5 v% G$ y# U. U9 g9 h/ ~- |" B7 p
( B6 R4 ^% a& m9 j; \( v6 J/ _" w3 h3 r, n
4 [6 w* L6 T2 L2 L8 }
genpmk  -f  dict  -d linksys.hashfile  -s linksys  
& Z! F# e" L2 ~# O$ s# }! Z. r' P) k/ \: k+ n
, r" `) w& {: F8 F, ]2 \! k  b" q$ ~

/ q9 f  c: \9 ]" m' H
$ Y! F. m$ k0 d' W  ^7 A0 k% ^$ ]! ~0 X  Z" S
7 Z( @' L; f; G& z+ W: H1 d4 k. F/ Z. V+ s# e6 u1 u

dict is the password file
  Z: L, z/ B3 g, k/ m; T9 r
1 M6 t  y; T9 k& m2 O7 ]3 p
linksys.hashfile is our output file

/ x: k# X, N- E+ C6 D6 s; x' R! q
linksys is the network ESSID

* D# L6 F) T# D) D& ?+ A( j( l; A! T0 K3 t0 K
7 {  M1 V. @$ A4 PcoWPAtty Precomputed WPA Attack r4 n4 v$ |) [- ]* }/ }3 D
3 D: [# A, m6 G" p" O" G% @( q, e
8 }& H( z6 d9 Y/ O8 M4 F2 \Now wehave created our hash file we can use it against any WPA-PSK networkthat is utilising a network SSID of cuckoo.  Remember the capture(wpa-test-01.cap) must contain the four-way handshake to be successful.
5 e  M2 [9 F- U+ {5 t2 S! x

" m( }9 _8 N6 |
. E& k2 p9 x" ?6 R/ r1 Jcowpatty  -d linksys.hashfile -r wpapsk-linksys.dump  -s linksys  

' |1 z8 P3 h- X5 O

4 R, a0 I) R  R6 U# i
" X* L. Q; C  E" c6 x
. w7 L2 z; Z" n4 X0 s- ~; y, y; W" a% b6 F7 d- K$ F
wpa-test-01.cap is the capture containing the four-way handshake
& }, r1 H; M0 a! X8 ]6 G

$ J# S2 t* s3 ~1 H7 qlinksys.hashfile are our precomputed hashes
, G3 E+ T- m7 i* L
& S2 @: ]1 S+ W' b" g: U, @
  \9 N$ T9 M- [linksys is the network ESSID
( n4 k. m; Q! |6 o. T# U& j) [5 G
2 U" ^' H- P2 ?& F; z  D/ D' B: L" ?/ N4 j. P/ @$ g- J8 m& g

0 ]8 D! U9 v* G6 b; cNotice that cracking the WPA-PSK took 0.04 seconds with the pre-computed attacked as opposed to 200 secondswith standard dictionary attack mode, albeit you do need to pre-computethe hash files prior to the attack.  However, precomputing large hashfiles for common SSIDS (e.g. linksys, tsunami) would be a sensible movefor most penetration testers.
7 l& m: q; S% x' O
$ A+ g' \8 Y! p$ D- Y
6 m" ?1 I8 M- kcoWPAtty Precomputed WPA2 Attack:
* @2 e" o$ z! H: T* l9 u! h9 Y) j$ M" u7 ?5 o6 F$ _
coWPAtty4.0 is also capable of attacking WPA2 captures.  Note: The same hashfile as was used with the WPA capture was also used with the WPA2capture.
1 D0 j, P; f0 i! g: f8 u4 |) ?7 O

! t% [6 F2 a9 g; j) N  ecowpatty  -d linksys.hashfile -r wpa2psk-linksys.dump  -s linksys
* a( f8 P/ A' L* u+ X( s1 q& m& `; O3 M& u* x! A' u( `


, o9 _8 d" X0 J7 T5 F) _3 ]- [3 Y: o
- A* u6 M# X5 X1 Q
/ A* p  F: r7 [" \
; Q6 G$ s8 W0 z4 a  \/ ]1 i  l' Dwpa2psk-linksys.dump is the capture containing the four-way handshake
% l0 Y/ ^( q# Y! C: K$ x8 n2 H" m/ I  T
. D# g# s) p) Y# B9 q
9 p# Y! E+ I( v' ndict is the password file
7 a9 P% W& N$ X
* {0 g7 Y/ L. x0 O
5 u; Q/ c0 t& |& d: Slinksys is the network SSID
* c4 ~* q& S1 e+ t2 }" b: F& @0 J1 m) \3 D0 o; P+ h0 t
% |5 u4 Q5 m8 [. b7 {9 {
coWPAtty Tables:
4 _( ~1 [+ H5 [# I$ O5 k' _5 e- E# r' A7 D7 r/ g2 X% z' s$ O5 _. PThe Church of Wifi have produced some lookup tables for 1000 SSID's computed against a 170,000 word password file.  The resultant table are approximately 7 Gigabytes in size and can be downloaded via Torrent:& @) N; `' R2 Y- a

! ^6 G7 T/ P: c6 ~4 {; `8 {# I# n$ lhttp://torrents.lostboxen.net/co ... atty-4.0_2006-10-197 e0 b3 o8 O4 D) j2 ^5 C2 s! Y

' j) n& j( A& @) I) k- l6 K. ^0 z6 e: m# q2 ~A 33 Gigabyte set of tables are also available: http://umbra.shmoo.com:6969/7 ^, e/ H) c1 v7 w: \9 I6 x! q/ F: ?
* g9 W0 ?# z5 u
Or you can buy them via DVD, direct from Renderman (initiator of the project): http://www.renderlab.net/projects/WPA-tables/
# t  H& p* P; \2 _# m本文地址:http://forum.anywlan.com/thread-37302-1-1.html

superboy1

怎么ME看不见阿...5555....

kira8085

想分享的话，就别搞的这么贵嘛

yz_86665886

上当了........

icxoinfo

fffffffffffffffffffffffffffffffffffffff