arpforge:
Project Homepage:
http://www.cr0.net:8040/code/network/
(OFFLINE)
Project Homepage:
Local Mirror of
Homepage
aircrack-2.41.tgz MD5:
05A37C8A165EFB11EA226829C809DEB3
NOTE: The next generation of Aircrack, Aircrack-ng has far
superseded the functionality of the original; Aircrack-ng's project homepage can
be found here: http://www.aircrack-ng.org/doku.php
Arpforge is used in conjunction
with aireplay (only available on Linux) to decrypt a WEP data packet without
knowing the key. At least one data packet has to be decrypted (utilising
aireplay -4).
Once the packet is decrypted the
source MAC (of an associated station) and destination IP (of a station that
replies to ARP requests) are noted.
This MAC and IP address are then
used with arpforge to forge an ARP request in order to speed up the data packets
being passed across the network for WEP cracking purposes. The ARP request is
then replayed with aireplay.
example arpforge packet
generation:
arpforge-ng
replay_dec-0627-022301.xor 1 00:13:10:30:24:9C 00:09:5B:EB:C5:2B
192.168.1.100 192.168.1.2 arp.cap
See
http://tinyshell.be/aircrackng/wiki/index.php?title=KoreK_chopchop for a
full break down of each step.
|
Linux
