{"id":6,"date":"2009-05-27T21:40:10","date_gmt":"2009-05-28T03:40:10","guid":{"rendered":"http:\/\/blog.escarra.org\/?p=6"},"modified":"2016-07-20T08:23:07","modified_gmt":"2016-07-20T14:23:07","slug":"messing-with-wep-part-i","status":"publish","type":"post","link":"https:\/\/blog.escarra.org\/?p=6","title":{"rendered":"Messing with WEP &#8211; Part I"},"content":{"rendered":"<p>It&#8217;s been long known that WEP is a very insecure wireless encryption protocol, and this is due to weak Initialization Vectors (IV) being used within. See, the engineers that designed the WEP protocol attempted to create a stronger encryption by adding a 24 bit IV to the cypher key that changes constantly, thus &#8220;eliminates&#8221; the repeated encryption of data with the same key over an over. The problem is, these IV&#8217;s are too short, and are periodically reused&#8230; which means that if we can sniff enough data over the air, and get the AP to reuse IV&#8217;s eventually, we can figure out the key.<\/p>\n<p>In this tutorial I plan to do exactly that, grabbing the WEP key of my own &#8220;public&#8221; wireless network, which I made &#8220;1234512345&#8221;. Simple.<\/p>\n<p>First, we&#8217;ll start by grabbing a copy of BackTrack. BackTrack is a live Linux distro that has a (pretty big) collection of little tools that aid security professionals in penetration testing. Of course, put in the wrong hands, this distro can do some serious damage. Fortunately, we won&#8217;t be doing any of that here.<\/p>\n<p>You can grab the distribution by going to <a href=\"http:\/\/www.remote-exploit.org\/backtrack_download.html\">http:\/\/www.remote-exploit.org\/backtrack_download.html<\/a> and downloading the ISO. I&#8217;ve been using the BackTrack 4 Beta lately, so i&#8217;ll be showing that one around.<\/p>\n<p>Once you got the ISO cooked and ready to go, reboot your PC and watch that kernel uncompress&#8230; sweet&#8230; after a while you&#8217;ll be presented with this:<\/p>\n<p><img data-attachment-id=\"7\" data-permalink=\"https:\/\/blog.escarra.org\/?attachment_id=7\" data-orig-file=\"https:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-1.png\" data-orig-size=\"1022,767\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;}\" data-image-title=\"Login\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-1.png\" data-large-file=\"https:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-1.png\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full wp-image-7\" title=\"Login\" src=\"http:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-1.png\" alt=\"Login\" width=\"511\" height=\"383\" \/><\/p>\n<p>We&#8217;re going to login as <strong>root<\/strong> with password <strong>toor<\/strong>. After we&#8217;re in, we&#8217;ll type in <strong>startx<\/strong> to start X and KDE so we can get some GUI and multitask on command windows easily. After the GUI is loaded, you&#8217;ll see KDE which looks like this:<\/p>\n<p><img data-attachment-id=\"8\" data-permalink=\"https:\/\/blog.escarra.org\/?attachment_id=8\" data-orig-file=\"https:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-2.png\" data-orig-size=\"1023,766\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;}\" data-image-title=\"KDE\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-2.png\" data-large-file=\"https:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-2.png\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full wp-image-8\" style=\"border: black 1px solid;\" title=\"KDE\" src=\"http:\/\/blog.escarra.org\/wp-content\/uploads\/2009\/05\/picture-2.png\" alt=\"KDE\" width=\"511\" height=\"383\" \/><\/p>\n<p>And that&#8217;ll be all for today. I&#8217;ll continue the guide later so we can put your wireless card to better use.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s been long known that WEP is a very insecure wireless encryption protocol, and this is due to weak Initialization Vectors (IV) being used within. See, the engineers that designed the WEP protocol attempted to create a stronger encryption by adding a 24 bit IV to the cypher key that changes constantly, thus &#8220;eliminates&#8221; the [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false,"jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[11],"tags":[5,6,7],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.escarra.org\/index.php?rest_route=\/wp\/v2\/posts\/6"}],"collection":[{"href":"https:\/\/blog.escarra.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.escarra.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.escarra.org\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.escarra.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6"}],"version-history":[{"count":8,"href":"https:\/\/blog.escarra.org\/index.php?rest_route=\/wp\/v2\/posts\/6\/revisions"}],"predecessor-version":[{"id":661,"href":"https:\/\/blog.escarra.org\/index.php?rest_route=\/wp\/v2\/posts\/6\/revisions\/661"}],"wp:attachment":[{"href":"https:\/\/blog.escarra.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.escarra.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.escarra.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}