Comments on: How To Crack A Wi-Fi Network’s WEP Password

By: mohsen

mohsen — Mon, 03 Aug 2009 23:38:28 +0000

this program is for find wifi password and work with this is very easy
wifipasswordfunder.exe
http://www.ziddu.com/download/5895690/wifipasswordfunder.exe.html

By: Tesse

Tesse — Mon, 13 Jul 2009 11:51:02 +0000

@Luke – Since the communication is unencrypted, his mac-address will be rather simple to intercept. And thus by spoofing his address, anyone can easily use his connection. (To connect to the web, as well to his computer…)

By: Luke

Luke — Mon, 13 Jul 2009 07:04:02 +0000

Hey, very interesting read, a friend of mine leaves his wi-fi unsecured and instead locks it down to mac addresses, how secure is this compared to the WEP/WPA security?

By: Matt

Matt — Thu, 02 Jul 2009 01:18:07 +0000

Yes, all the WPA variants are much much more secure than WEP. Following the steps given in the article with a good connection to the AP will yield the WEP key in a few minutes.

Some of the weaker WPA variants (ie. TKIP/RC4) are vulnerable to an attack where short packets (none that contain sensitive information) can be decrypted and injected a few times. The stronger variants (CCMP/AES) are really only vulnerable to guessing the key.

I think the TKIP/RC4 variant is marketed as “WPA” and the CCMP/AES variant is marketed as “WPA2″, but I could be off on those. AFAIK, there is no such thing as “WEP2″.

By: Matt Trimmer

Matt Trimmer — Thu, 02 Jul 2009 00:44:44 +0000

WEP is flawed because of the way it handles its IV’s (Initialisation Vectors)

WPA1 and WPA2 also include what is called the MIC(Message Integrity Check) which prevents packet replay (the reason so many packets can be actively injected..)

WPA2 (with AES) has no published flaws as of yet..

WPA1 however has a really small replay flaw that takes advantage of the WMM Services..

Otherwise, the brief: You are fine, for now, but nothing is 100%.

By: Nathan

Nathan — Thu, 02 Jul 2009 00:19:45 +0000

I’d never realised these things could be cracked with that kind of $$ outlay! I think I’ve got WEP 2 (or maybe WPA 2, I’m not confident), anyone know if this would this offer much more protection?

By: Matt Trimmer

Matt Trimmer — Thu, 02 Jul 2009 00:00:06 +0000

If readers here don’t already know, There is a better utility called Wesside-ng (currently included in the Backtrack Suite). This utility automates the entire process from injection to cracking. Having performed multiple Penetration Tests using this software I would recommend to any other Security Professionals!

http://www.aircrack-ng.org/doku.php?id=wesside-ng

–Matt