Crack a Wep Protected Wi Fi With Airoway and Wifislax

Want to ensure that your home network is secure from intruders? You can hack your own network with free tools to test the strength of your encryption. Using these tools to hack into a network that does not belong to you is illegal. Follow this guide to check the security of your network.

Steps

Starting WiFiSlax

  1. Obtain and burn WiFiSlax. WiFiSlax is an operating system that you will be loading from a CD. It contains the tools necessary to crack WEP encryption on wireless networks. This only works with WEP encryption, not WPA/WPA2. WiFiSlax is available for free from the developer’s website.
    • Burn the .iso file that you downloaded to a blank CD. You can use any freeware image burning software to do this. Open the burning software, and select Burn Image. Browse for the .iso file that you downloaded.
  2. Check your computer’s hardware. In order to run this crack, you will need the IPW3945 chipset. To find out if your computer possesses the chipset, open the command line by clicking Start and then entering CMD into the Search or Run box. Once you have access to the command line, type "ipconfig /all". Look for "Intel PRO/Wireless 3945ABG Network Connection". This is a common chipset on many laptops.
    • In other operating systems like Linux-based ones, you can download programs like hardinfo to obtain a complete list of the hardware of your computer
  3. Set your computer to boot from CD. In order to use WiFiSlax, you will need to make sure that your computer can boot from the CD drive. TO do this, reboot the computer and open the BIOS menu. You can access the BIOS menu when you see the computer manufacturer’s logo. The key you need to press will be displayed on the screen. It is typically F2, F10, F12 or Del.
    • In the BIOS screen, navigate to the Boot menu. Set the first boot device as the CD/DVD drive. This is sometimes labeled as an optical drive. Setting it first will make the computer try to boot from the CD before it loads the operating system from the hard drive like it normally would.
  4. Run WiFiSlax. After adjusting your BIOS settings and rebooting your computer, press a key when prompted to boot from the CD. When presented with the first menu, select No PCMCIA and then press Enter.
    • Log in with the credentials:
      • User: root
      • Password: toor
    • Enter the command "startx" to start WiFiSlax with a graphic interface.

Cracking the WEP

  1. Start the scanning process. Click the Start menu, and navigate to WiFiSlax > Asistencia chipset > Asistencia Intel pro wireless > Cargar ipw3945 inyección - ipwray-ng. This will put your network card into wifi0 mode, which is the monitor mode.
  2. Enter the command "airodump-ng wifi0". This will display all of the WiFi data that your card collected while in monitor mode.
    • You will need to make note of the BSSID with the most beacons. The BSSID is the name of the network, and the number of beacons indicates signal strength. The more beacons you have, the easier it will be to crack. Make note of the channel (CH) that the network occupies.
  3. Open Airoway. Click Start, and then navigate to WiFiSlax > Herramientas Wireless > Airoway. This will open multiple windows with command lines.
  4. Select the channel. In the Airoway Command window, select the channel of the BSSID that you want to crack. Press Enter to begin the cracking process. Select the access point that you want to crack by pressing the associated number.
    • Once you’ve selected the access point, a new menu will open. Select option 2 to associate a MAC address and then option 3 to replay live ARPs (this will speed the crack process up).
  5. Wait for packets to accumulate. Once the process has begun, you will need to wait a few moments as the program collects packets. The more packets you have, the greater chance you have at cracking the WEP.
    • When the Data category in the Scan window reaches between 20,000-30,000 press 8 on the keyboard to crack the key.
  6. Copy the key. If the attack was successful, the key will be displayed in the bottom-right window. It will be listed next to the words KEY FOUND. Make sure that the Decrypted Correctly value is at 100%, or else the key will not work.
    • The key will be displayed both in hexadecimal and ASCII format. The ASCII key is the one typically entered in when connecting to the network.

Tips

  • When you introduce the keys on Windows you should introduce ASCII key (the second one). You can introduce the HEX key (the first one) but without the ":".
  • It can be difficult or impossible to crack a network with a poor signal.
  • WiFiSlax could be incompatible with some computers or need configuring to work on graphics mode.
  • Sometimes the #Data needed exceeds 30,000 for a successful crack. In some cases 1,000,000 or more packets may be necessary to crack the key.
  • Pay special attention to the encryption type of the network, it must be WEP not WPA.
  • Sometimes the catch of Data can take an hour or more to start. You could try later, reboot the computer, or change the location of your computer.
  • The liveCD of WiFiSlax sometimes crashes or doesn't recognize the injection interfaces. The solution to this is rebooting the operating system.

Warnings

  • Cracking a network without permission is completely illegal in all countries I know. This tutorial was made in order to check the security of WEP keys.

Things You'll Need

  • A computer with the IPW3945 chipset.
  • WiFiSlax burned to a CD.

Related Articles