Cracking WEP with Gerix Wifi Cracker :

Cracking WEP with Gerix Wifi Cracker :

Two things before we go ahead:
1. I am using the Alfa AWUS036H external wireless adaptor which is preconfigured with both Kali and BT. Please note that this adapter only caters to B&G bands and not A&N. If you are using A/N bands, please use the AWUS036NHR. The process remains the same

2. All words in [ ] are either tabs or buttons we will use in gerix.

First off go to applications> exploitation tools> wireless exploitation> WLAN exploitation> gerix-wifi-cracker-ng.

Once gerix opens, go to the [configuration] tab.

Click on your wlan0 interface.

Click on [enable/disable monitor mode]
-gerix will now start a new interface- mon0

At the backend you are only using the command #airmon-ng start wlan0

Click [set random MAC address]

Now go down towards the bottom of that same window and find the -channel- drop down menu.
-Find -all channels- and click that

This is equivalent to using the #airodump-ng mon0 command

Next to that is the -seconds- drop down menu.
-Choose somewhere between 5 and 15

Click [rescan networks]

Gerix will display all the visible wifi networks

Look in the ENC column and make sure the network you wish to crack is WEP WEP now click on that network

Go to the [WEP] tab
-After that click [start sniffing and logging]
-gerix will open a black window labeled (sniff-dump...blah blah blah)

Now make sure the AUTH column in the sniff-dump window says OPN
-this is to make sure that this network will allow a fake authentication connection
-if it does say OPN then you can continue if not you must choose a network that does in order to crack
-leave the sniff-dump window open. You will need it.

Go to WEB attacks (no-client)

Under "fragmentation attack" options click [associate AP using fake auth]

Then click on [fragmentation attack]
-a new window will open
-whenever it says "use this packet" type "Y" and then "enter"
-continue this until it say something like "saving key stream in fragment......"
- then close that window

Now go back to gerix and click [create the ARP packet.....]

Next click [inject the created packet on victim access point]
-this will again open a new window labeled something like "output_FORGED2 mon0"
-again type "Y" and "enter"
-it should start injecting

Look at the sniff-dump window and watch until the #data column reaches between 10000-20000.
-the higher the number the more success the crack will be
-once it reaches your target number, stop injecting and sniffing but closing the "output" and "sniff-dump" windows

Lastly go to the [cracking] tab
-click [aircrack-ng decrypt WEP password]
-the last window will pop up, labeled "aircrack-log.txt"
-it is now decrypting the password
-once it is done it will display "KEY FOUND" and give you the key in a "XX:XX:XX:XX:XX" format
- this is your cracked password, just don't use the colons when trying to connect to the network

This is a quick run-through of gerix-wifi-cracker

If you have any questions or problems please feel free to comment.

Hope you have a wonderful time using this tutorial ethically!

Njoi,
WTHack