直接搞定WPA和WPA2 无线密码P解工具

ghc00259

5金币就给你一堆英文的，你看懂了吗

bamboossom

这么贵  不买

bamboossom

这么贵  还是买了

bamboossom

这么贵  还是英文的

bamboossom

这么贵  怎么不翻译下

bamboossom

这么贵  不懂 上当了

bamboossom

coWPAtty for Windows MAIN:; S; m, t( [/ `. e, Z# r! I3 T) S

"coWPAtty is designed to audit the pre-shared key (PSK) selection for WPA networks based on the TKIP protocol." - Joshua Wright.
: c% {6 ^# i# d) g; l+ _$ C! N# C7 }/ h9 R: N0 H

Project Homepage: http://www.willhackforsushi.com/Cowpatty.html

" }9 U  g5 l+ y2 t2 _/ m7 d7 b& }6 g1 R. m0 r  P

! d0 \1 a- @" f$ ]/ V+ i, i# @- u* B% {2 _1 v2 r- t
3 o0 A+ ~* P" y; wLocal Mirror: Cowpatty-4.0-win32.zip  MD5: aa9ead2aacfcc493da3684351425d4c6


( A' I! E( W. S# W
$ U! w( d) a, G4 S7 _* s
coWPAtty Dictionary Attack


8 |5 e& y$ @, E: S$ ~$ T4 `: h& H
& Q$ i. \% Z: Y+ c5 [$ A* @Precomputing WPA PMK to crack WPA PSK
3 G: m- Y+ X$ G1 m
* n" K2 z' _5 I# a. q4 l  C8 R: t+ f7 `' ^& R

coWPAtty Precomputed WPA Attack

: `0 @% ^) t8 G5 k1 Q* W
& `, s6 Y. O" E, R( ~. v( |( q+ }& i, [0 H5 g: ~
" s& D& U0 C. g+ |% M0 D( wcoWPAtty Recomputed WPA2 Attack

( ~7 K/ u5 U# ]7 x3 u+ q" i
; |% G8 N+ M% ~* I# z9 [/ K  K
coWPAtty Tables

) v, ~$ _3 N3 R: X/ ]3 g! I7 U
coWPAtty Usage:7 b, W( \( k$ \! _
1 m+ V: T7 v5 p$ Z6 ?
0 m6 |" u- @) P% B
% D% I8 m5 g( P6 W- [( _( acoWPAtty Dictionary Attack:
  ~# `3 Q' @7 y9 X8 T- `) u) I5 n& `4 y* l" A
; F8 o, q. l2 p7 ~7 cToperform the coWPAtty dictionary attack we need to supply the tool witha capture file that includes the TKIP four-way handshake, a dictionaryfile of passphrases to guess with and the SSID for the network.
  X# m( H. O( ]: @. D9 E
7 }" F6 I% c9 w) l
" H: }8 q- L  B/ _" Z1 c, v& H
" a6 @" ?* ]  C' }8 ~6 S* W  g! D7 iIn orderto collect the four-way handshake you can either wait until a clientjoins the network or preferably you can force it to rejoin the networkusing tools like void11 or aireplay and capture the handshakes usingsomething like kismet, ethereal or airodump.
. g3 I! r2 \) _" J6 E2 R& c

, Y0 ~" g5 o  p. I+ T6 ]& l& }+ Y
4 o: T* s) n: h( c+ }1 |cowpatty -f dict -r wpapsk-linksys.dump  -s linksys
" M( E0 w5 O- k+ R) x( L* q6 ^  \2 c* ?

( G: b2 v8 z) w( S/ B+ Z; s! t7 r7 z2 ]! a: T4 q
! m, ^0 l1 @$ i/ [- g5 c7 X; R: ], M  W' K
4 P- \! q  v- O" s, I
, \8 r8 x; G9 ^" ^
0 z7 c. N& h. Q* v3 D: f
  A- ~6 |6 I2 v* n# J0 o0 {- J4 RAs youcan see this simple dictionary attack took 51 seconds, we can speed upthis process by precomputing the WPA-PMK to crack the WPA-PSK (seebelow).
6 d% D3 l( e9 l+ j' x
3 Q" M/ _% r& |# Q9 A, |. _, i
1 Q8 I1 [+ N. A7 v6 G; P( J: j. a% W, @
! n2 b1 M- f; P% M& P* J$ r; d6 H" iwpapsk-linksys.dump is the capture containing the four-way handshake
- D) O/ Y% Z: y: E( x
5 k7 P% [7 V0 ^4 o+ P1 }6 ^
% J, S* _  F9 \# y7 H
dict is the password file


* _  ~/ U) c2 z9 S( ?3 m3 `# m* \* z0 V
& N/ v$ \% o1 @( V9 t% ulinksys is the network SSID
  G9 U3 j, c, s  O& O  E

4 d4 G) s5 t& G* H7 r! N, T$ Y+ ?9 i& l
Precomputing WPA PMK to crack WPA PSK:
, r% ]) d2 d! f3 \2 i9 q7 u" }+ G; X0 N7 E8 v6 M" O' }" Y
2 T8 |; I* |; A% v, Wgenpmkis used to precompute the hash files in a similar way to Rainbow tablesis used to pre-hash passwords in Windows LANMan attacks.  There is aslight difference however in WPA in that the SSID of the network isused as well as the WPA-PSK to "salt" the hash.  This means that weneed a different set of hashes for each and every unique SSID i.e. aset for "linksys" a set for "tsunami" etc.
3 E7 R4 K1 b& w% m" e4 R, _
: V7 d* x! q1 ]  Q+ I; S' H
# `( N$ j$ x/ C$ ^5 K2 T. z0 Q3 a% ?% z  F0 A( K; g+ `+ P& e! U5 F. a! {* B2 U: |

$ n6 h: d4 U8 J, x3 l' P8 gSo to generate some hash files for a network using the SSID cuckoo we use:
* B' N' a6 n( \# O: V& e; T/ }2 r7 k& e
* Q4 U6 q5 f6 y
, ^5 B( g( F" K6 h. m- d$ c! X& t$ @3 T3 @. i7 t/ r# i4 K3 L, |+ p& s/ D% g
  {, Q1 v  U2 w
8 x/ b+ a" b4 i1 k' h) j- ]genpmk  -f  dict  -d linksys.hashfile  -s linksys  

3 r( c% ?) b6 C# R0 X
0 _' _* `; ^% _4 z) N, S/ N* t
+ A- @! _; J6 J* S
9 @& h! _+ e+ e  Q  }7 R' _


& J  S3 V. I$ U3 {9 m% r6 Q9 R/ n. X4 \  N+ l, ?8 P
. ^6 H: m% V0 E0 v9 c  O
dict is the password file
% E. s! W" T0 _, `
3 Q$ \5 ^) U; T6 A: G
9 s9 T& F" C9 X! z. V% l
linksys.hashfile is our output file
" R3 m0 Q. y1 T& |$ _& F; [& M4 F2 D
8 f' Z- E( N, K" K7 Y
2 U6 w8 H, h$ t) S0 p: o
linksys is the network ESSID

# E# k+ t' ^9 C
/ O% Y& o7 |5 y5 B6 g
. w+ W  i9 p! x+ O5 P; Q7 f; w- b- m+ Y& Z9 J' a7 HcoWPAtty Precomputed WPA Attack:
4 x& ]* l) ]) i- W" Q8 [/ o# h- o% ^4 R
Now wehave created our hash file we can use it against any WPA-PSK networkthat is utilising a network SSID of cuckoo.  Remember the capture(wpa-test-01.cap) must contain the four-way handshake to be successful.


- t4 o. Q& _' |' L" j& m. B( c8 W, U8 h' j; e) R# Q8 ?- t
- o: q- X2 Y- ?9 u3 c. o
5 F' |4 Z4 C" v5 fcowpatty  -d linksys.hashfile -r wpapsk-linksys.dump  -s linksys  
( U9 y  x' M, p6 o  ]
" d) D: f) A3 s- H7 i
. z# t. _8 k1 Y- B% t2 b7 y7 \+ Y$ [6 d0 G" c, ^6 P" c

- a$ O' W! k2 l1 Q3 Z4 k; {

0 U! Q! M7 ^& @8 l% j8 C9 \2 D! P3 Q. m2 n0 X1 P
' }0 _2 o7 O$ ?+ P, _$ l
wpa-test-01.cap is the capture containing the four-way handshake


, ?6 D0 }/ I+ k9 q$ _; a
$ M4 S6 T: J7 Flinksys.hashfile are our precomputed hashes


) O  W, e- W) L! A6 {" C! c
/ A& C/ ?% l& zlinksys is the network ESSID

8 i% Q" E' U! L1 K' c" g1 I2 z3 D' ~% Q9 e& m; I6 d
) A+ X* J, L2 A3 Z& V4 k+ K, h( a0 X( u) O* ?% ~( Y( `) I
4 ?4 N8 H3 U3 n* ?! O' E5 _
Notice that cracking the WPA-PSK took 0.04 seconds with the pre-computed attacked as opposed to 200 secondswith standard dictionary attack mode, albeit you do need to pre-computethe hash files prior to the attack.  However, precomputing large hashfiles for common SSIDS (e.g. linksys, tsunami) would be a sensible movefor most penetration testers.
6 d/ e3 n/ v0 u% Q* ~; ?

( F! H4 x2 Z. h/ v9 I' b! |- p& A/ I; X3 C) \& ~) [
coWPAtty Precomputed WPA2 Attack:
$ j! Y0 v; T0 e. m' |$ [# x! P- V$ E' z* M# \" I
coWPAtty4.0 is also capable of attacking WPA2 captures.  Note: The same hashfile as was used with the WPA capture was also used with the WPA2capture.


- S) |% ]' y# }1 b6 ~9 [. Y: b  U* F  q2 a! I% d
cowpatty  -d linksys.hashfile -r wpa2psk-linksys.dump  -s linksys

" ^+ _- b6 t5 x( @# x7 }




/ j! o# B* A4 N5 X; D
# t  E% a. v# }( e) x6 a  c" K) o0 `) i3 Z
wpa2psk-linksys.dump is the capture containing the four-way handshake

' J) C* s! Z* E+ X) y* c; J% ~  N
  c& g% k, A( r4 h# e0 A2 l3 p8 j. X( _8 v3 U, B+ i" p
dict is the password file
+ N& @- U  E; ]! S
. v( p0 P- s& ?. R3 V1 k! [# B0 b

linksys is the network SSID

! w5 k3 Z$ K- V1 ~! g& _
9 m- n5 K9 K! o/ j3 o; x8 a
' H: ]5 L/ v- h( F. x5 [coWPAtty Tables: ) ^4 o  }: \& d" u& k
The Church of Wifi have produced some lookup tables for 1000 SSID's computed against a 170,000 word password file.  The resultant table are approximately 7 Gigabytes in size and can be downloaded via Torrent:
" C' `- u6 g# T& I* k6 q  v% Q9 o0 G* m
http://torrents.lostboxen.net/co ... atty-4.0_2006-10-19$ x- v6 z* \, R2 Z

4 x$ }! D' o0 l7 P3 J. ~2 w/ A6 ~- o# }$ g/ V1 g( @2 _  H% I, BA 33 Gigabyte set of tables are also available: http://umbra.shmoo.com:6969/5 J  G# p0 f8 p4 `$ g8 L1 H
" _0 N1 V- `. K9 Z
( r) |, O. w  o' v4 l6 z% R! @; `) {5 [Or you can buy them via DVD, direct from Renderman (initiator of the project): http://www.renderlab.net/projects/WPA-tables/
6 S/ x, G5 d- Y/ N' Y# b1 P# k$ B

yelow

楼主这是在抢钱啊

zhuguo75

hahoahaoahoahao

secowu

机器要跑好几个光年

simplezhe

有这东西???????????????????????????????????????

zonly

骗人的，好像，还是不买了。楼主不厚道