Aircrack-ng

Best card (or best laptop/netbook) for Aircrack-ng

2012-01-28T13:40:00.000-07:00

After a long time and no updates on the blog, I'm back. I hope to keep it active like before.

One of the question I see asked very often is "what card should I use for Aircrack-ng?" or "what laptop should I use?".

As far as card goes, I can tell you that even though the wiki looks outdated (it isn't updated because the information is still accurate), the Alfa AWUS036H (Realtek 8187) is still a very good card. Another very good one is the Rockland N3 (Ralink chipset).
If you would like to capture and inject on 802.11n networks, you can use a card compatible with carl9170 (I use a Netgear WNDA3100 v1).
Correct me if I'm wrong but I haven't been successful with new Ralink cards even though they support 802.11n, something is missing in the driver to be able to have that capability in monitor mode.
There might be other compatible chipsets for 802.11n (maybe recent Intel cards) but I haven't tested them so I can't confirm.

So, now about laptops and netbooks. One of the best chipset for internal cards is still Atheros.
You can try getting a laptop with Atheros cards but it is not easy to find since vendors don't often advertise what card they use and in most cases it is because they use a Broadcom (which are far from being the best cards). When they do, it is usually an Intel.
So what I recommend about laptops and netbooks: Get one that you like and you're comfortable with, don't worry about the wireless card that comes with it and use one of the cards mentioned above.
If you really want an internal card, you can replace the internal card with an Ubiquiti but keep in mind that some laptops have a BIOS lock that prevents using another card than the (overpriced) one they sell. HP/Compaq is known to do it. I've heard Dell does it on some laptops too. I don't know for others.

Another thing I've often seen is people who wants to get cards from local stores. In my experience, local store 1. don't have a lot of choices 2. don't know what chipset their cards have and 3. don't really care about it. That's why I always shop online for wireless cards. There is a good chance you can find a compatible card on Amazon or eBay.

I'll cover phones and Access points in another post.

Monthly news - September 2010

2010-09-24T15:05:00.008-06:00

Aircrack-ng now has support to export WPA handshake information to Elcomsoft Wireless Security Auditor v3 project file since svn r1781 with '-E' thanks to beini's author.

As said in previous monthly news, migration mode attack (WPA Migration Mode: WEP is back to haunt you...) has been added to aireplay-ng and a few improvement were added to aircrack-ng. More details in r1769 commit.

Forum:

Adding accurate chipset detection to airmon-ng. More details can be found here.
Who has the longest airodump-ng session?
Poor man's Aircrack-ng distributor - A tool to distribute aircrack-ng, developped in Python
minidwep-gtk, a gui of aircrack-ng in shell script, has been updated for BT4 final and BT4R1.

Other:

A few tools for generating passphrases lists.
Live CD

WEAKERTHAN2, another pentetration testing linux live cd was released a few weeks ago.
Beini, a small Live CD base on TinyCore Linux, is one year old (chinese).

Scripts

Wi-fEye 0.5.1 was released. His author created 2 videos: video 1 and video 2.
Wifite, another GUI written in Python for Aircrack-ng.

Monthly news - August 2010

2010-08-15T14:45:00.005-06:00

NeoPwn changed their plan and prefer to release it when the final version is ready. It will finally be called NeoPwn v2.

They plan to do two betas:

Private beta containing the control panel, the injection driver and installer but the number of requests is limited
Public beta without the control panel, injection driver and installer once the project has reached beta stage.

The final version will be free to download when it is completed and a safe installation process has been developped.

Their website contains more details about the release plan.

I tested the driver and so far it is working really well as you can see:

Last month, the video was showing the injection test on the N900. If you watch carefully, you can note that one of the BSSID is 00:00:00:00:00:00. I first thought it was a bug in aircrack-ng but it's not. I was told it's a unconfigured AP. It only sends beacons and jumps on different channels. If you're as curious as me, here is a capture file with just a beacon.

Forum:

WiFiCake-NG 1.7 is a Perl/TK interface for manipulating the CSV of airodump-ng. You can find more details in the forum thread here. Their website contains a youtube video as well as a PDF manual for the application.

Other:

Hack4Fun made an interview with Christophe Devine.
BlackHat and Defcon presentation slides of Hole 196: WPA Too.
Blackhat presentation: WPA Migration Mode: WEP is back to haunt you... (Contains paper, presentation slides, videos and patches for Aircrack-ng and Kismet). It is an attack against Cisco WPA Migration mode that allows WEP and WPA clients to associate to an AP with the same ESSID. It will be integrated to Aircrack-ng.

Monthly news (July 2010)

2010-07-13T16:09:00.001-06:00

This month I have some really interesting news. A lot of people would like to have Aircrack-ng on their phone (including me) but unfortunatly most phones can't work due to their drivers. Do you remember when I talked about NeoPwn v2 which is BackTrack Mobile?

A beta will be released before BlackHat/Defcon and will include Aircrack-ng. What's really great is that injection works with the internal card of the N900 (the original video can be downloaded here):

They also released 2 additional videos on Youtube:

Forum:

There's a new section in the forum for BackTrack Mobile.
Beini 1.2.1 was released. It can be downloaded from its website.
Jano updated wesside-ng replacement, one-command WEP crack to save the key into a file.
criser released WepCrackGui 0.8.1, a GUI for Aircrack-ng in C# (Mono). It can be downloaded on Sourceforge.

Other:

BlackHat conferences will happen the 28th and 29th. Schedule can be found here.
Besides BlackHat, there will also be BSides Las Vegas. There aren't as much talks as in BlackHat but they look really interesting.
Defcon 18 (29 July - 1 August) posted the final schedule a week ago.
Starting from 2011, the Wifi Alliance will not allow WEP and TKIP in certified Wifi devices. You can read more about it on WiFiNetNews.
I missed the update (v2.1.7) of the patch for FreeRadius-WPE (Wireless Pwnage Edition) released in May.

Monthly news (June 2010)

2010-06-07T13:36:00.005-06:00

Here is the 5th edition of our monthly news.

Project:

We had some downtime on the server hosting trac and forum between the 16th and the 20th (hardware issues) and fortunatly nothing was lost. You can read more in these 2 posts: Trac and forum down and Trac and forum up again.
The forum will be moved to the new server in a bit more than 2 weeks. The change will be transparent for you. And that means only trac and buildbot are left on the old server. They should be done before Defcon.

Forum:

Airoscript not dead. It got some updates and is now renamed to Airoscript-ng. To get it, type svn co http://trac.aircrack-ng.org/svn/branch/airoscript-ng in a console.
Beini 1.2.1 was released a few days ago. It can be downloaded it from its website.
minidwep-gtk, a GUI of aircrack-ng in shell script, has been updated to work with Aircrack-ng 1.1.
criser, the author of WepCrackGui, is developping a QT frontend for WepCrackGUI that should be included in the next release, v0.9. You can find instructions to get the sources and test it in this post. He also posted some screenshots. You can follow him on twitter: @wepcrackgui.

Other:

I'll give a talk at Sharkfest about wireless security next week.
digininja released a Karma patch for hostapd. It now works with ath5k and ath9k. It should work with prism54 and various other cards but that's untested.
Backtrack 4 r1 was released. Changes: new kernel (2.6.34-rc6), packages updates, and new drivers. Note that it is an unofficial build meant for assesing hardware incompatibilities with the new kernel.
The WiFi Alliances and WiGig announced alliance on multi-Gigabit wireless networks in the 60Ghz band. It will allow up to 7 Gigabit/s. You can read more here. The official press release can be found on WiGig website.
Here is another GUI in Java for Aircrack-ng: GRIM WEPA.

Trac and forum up again

2010-05-20T12:26:00.004-06:00

You probably noticed earlier today that the trac and forum were working again. They finally fixed the issue (which was according to them probably a bad RAM module or the CPU fan) by replacing completely the server (but keeping the hard drive).

I think that it's the CPU fan that failed, not the RAM module. But whatever, it works again and that was what we all wanted.

Trac and forum down

2010-05-19T15:29:00.016-06:00

All started Sunday, around 6AM GMT, our 4-year old dedicated server wasn't responding anymore and even a hardware reboot didn't bring it up. So, I opened a ticket and the technicians noticed the power supply died and quickly replaced it.

Everything worked fine until Monday morning, 9AM GMT, the server started to be unstable. I first thought it was Apache because during my tests, the process used several times 100% CPU when it crashed.
Then I tried stopping Apache and MySQL, the 2 most consuming processes (the CPU usage was on average at 6% without these 2 processes) and even with that, it was crashing after 15 minutes.

I thought that our kernel might be corrupted due to the crash of the server, so I tried using one of their netboot kernel (as well as the hardware testing mode) and it kept crashing.

So, I just opened another ticket for this issue. I really wonder what's going on.

Also, the migration of the forum and trac to the new server was planned at the end of this month but it might happen sooner than expected (I'll try to do it this week-end).

I'll keep you updated.

Monthly news (May 2010)

2010-05-04T15:08:00.000-06:00

Project:
- Aircrack-ng 1.1 was released a bit more than a week ago. A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.
The following screenshot shows some of the possibilities of the interaction (more details in the wiki and in the manpage). In this case, when you color an AP, its clients are automatically colored the same:

Forum:
- criser released v0.8 of his C# (Mono) GUI, wepcrack. He uses git for his source control and if you want to use the latest source and don't know much git, read the following. He is looking for someone who can design an icon for his software.
- Zermolo released permutator beta 1.3. It generates incremental wordlists/dictionaries based on your needs. The package by Jano contains the source code and an Ubuntu package.

Other:
- ShamanVirtuel released a GUI to capture WPA handshakes called Autohs-GUI. His project is hosted on Google Code along with a few other programs.

Aircrack-ng 1.1

2010-04-24T18:29:00.004-06:00

Aircrack-ng 1.1 is released ;)

A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.

Here is the changelog:
- airdrop-ng: New tool by TheX1le.
- airodump-ng, aircrack-ng, airdecap-ng, airbase-ng: Fixed buffer overflow in airodump-ng due to forged eapol frame.
- aircrack-ng: Fixed multicast detection (WPA handshake detection).
- airodump-ng: Added interaction (see wiki for the commands).
- airodump-ng: Fixed client time in netxml file.
- airtun-ng: Add WDS and bridge support.
- airbase-ng: automatically set privacy bit to 1 if WPA or WPA2 is used (-Z or -z option).
- airmon-ng: Updated iw URL for v0.9.19.
- airdriver-ng: Fixed link for madwifi-ng.
- aireplay-ng: Chopchop enhancement to not stop but wait on deauth packets.
- tkiptun-ng: Fixed segfault.
- wesside-ng: Fixed compilation bug with recent version of gcc.
- cygwin: Compiling sqlite isn't necessary anymore, libsqlite3-devel package can be used.
- osdep: Strict aliasing and x86_64 fix.
- osdep: Add tap support for Darwin/OS X. Still require tuntaposx from sourceforge to work.
- All: Fixed compilation on cygwin 1.7.
- All: Fixed compilation on recent version of OSX.
- manpages: Fixed aireplay-ng manpage for attack 0: not disassociation packets, deauth packets.
- manpages: Added the keys for interaction in airodump-ng.
- patches: Added regulatory domains override patches for atheros drivers (ath5k, ath9k and ar9170).
- patches: Added 2.6.32 patch for r8187 driver (ieee80211).
- Makefiles: Fixed make uninstall.

Download: aircrack-ng-1.1.tar.gz

Monthly news (April 2010)

2010-04-05T16:12:00.008-06:00

Project news:
- ebfe, who created airolib-ng, released an exploit for airodump-ng, aircrack-ng, airdecap-ng. You can find more information in his blog (Post 1, Post 2) but it just makes the tools crash, no real exploit released. It will be fixed in the next few days before the release (v1.1).
- Nearly everything has been moved to the new server, only forum, trac and buildbot needs to be moved :).
- Do you remember I wrote that trac didn't display svn commits for some unknown reason? That's now fixed, I just had to comment out a line in trac.ini.
- For those who can't open the website due to URL filtering, use whydoyoublock.me. It's not a mirror, it points to the exact same content as www.aircrack-ng.org.

Forum news:
- Patches to override the regulatory domain for ath5k, ath9k and ar9170.
- The work on the C# GUI for aircrack-ng, WepCrackGUI, continues. And here is a blog post in italian about it.
- Beini now has its own website. Here is the forum thread.
- Wordlist generation:
    * Here and there
    * Here is a script by Zermolo to generate wordlist with only numbers, called permutate and another post in the same thread about the same subject with JTR.
    * Creating custom rules for John.
    * Word field is an incremental word list generator.

Other news:
- I'll speak at Sharkfest. It will take place in the main campus of the Standford University, June 14-17.
- Ever heard about NeoPwn? Version 2 will be based on the Nokia N900 and will be Backtrack Mobile.
- Remember spoonwep and spoonwep 2? Shamanvirtuel is working on spoonwep 3. Public beta release is planned between 15th-30th April.
- If you're using SliTaz, you might be interested to know that they released v3.0 a week ago.

Backcrack-ng v1.1

2010-04-01T14:02:00.005-06:00

EDIT: This is an April Fool

The BackTrack team is happy to announce the acquisition of the Aircrack-NG project, as well as a new, long awaited update to v 1.1. The acquisition will mark a turning point to the Aircrack-NG project in more than once sense, and we are looking forward to see the project grow.

The new version of Aircrack-ng (to be renamed "backcrack-ng") is available in the SVN repositories for your testing:

Mailing list and monthly newsletter

2010-03-20T17:10:00.003-06:00

The poll in the forum convinced me to create the mailing list for the newsletter.

If you want to receive the newsletter, just send an empty email (no subject or body needed) to newsletter-subscribe@aircrack-ng.org.

I also took the time to create a public mailing list for Aircrack-ng. To be able to post messages, you need to subscribe to the mailing-list by sending en empty email to mailing-list-subscribe@aircrack-ng.org.
This is not moderated to avoid delay in moderation and thus the same rules as IRC apply here too. In order to avoid spam as much as possible, only subscribers can send posts to the mailing-list and registrations needs to be approved.

All posts should be sent to mailing-list@aircrack-ng.org

If you have any question or remark about them, do not hesitate :)

Monthly news (March 2010)

2010-03-02T13:35:00.004-07:00

Forum news:
- Beini 1.0 final was released: Forum post.
- I'm happily surprised that the C# (Mono) script developement for aircrack-ng is still active :). By the way, here is the project on sourceforge: wepcrackgui. The current version is 0.6.3
- A new version of minidwep-gtk, developped in shell script, gtk-server, zenity, kdialog, was released. Here is a video of this script in action. It is included in Beini 1.0.

Trac news:
- Various small fixes (makefile, manpage, ...)
- A patch for the r8187 (ieee80211) driver on kernel 2.6.32 (and lower). Installation instructions are updated.
- Compilation is fixed when compiling unstable stuff (wesside-ng/easside-ng and tkiptun-ng) with a recent gcc version (v4.4)

General news:
- Aircrack-ng now has 4 years old. I checked when the first news was posted and it was the 25th February 2006. Surprisingly, the 2 following news happened the 25th February this year :)
- A new paper about TKIP attacks was released by hirte: Enhanced TKIP Micheal Attacks.
- Airdrop-ng from TheX1le is now available in our subversion repository. Here is the video of the talk at Shmoocon 2010.

If you haven't seen it yet, Shmoocon 2010 videos (and sometimes the slides too) are available.

Last but not least, here is a very funny video of a woman calling Leo Laporte's Tech Guy Show claiming her WI-FI access has "disappeared".

Monthly news

2010-02-03T15:05:00.001-07:00

A few things happened last month:
- The google phone, Nexus One was rooted and it has a bcm4329 chipset and it looks promising.
- Airodump-ng (in svn trunk) now has interactive mode: you can control it with keys. You can find the documentation in the wiki.
- A really small (only 10MB) distribution based on MicroCore Linux, console only.
- I'm sure you saw it, Backtrack 4 was released a few weeks ago.
- OSX Compiling (Ticket 687) should be fixed now (svn trunk revision 1657).
- New version of Beini: 1.0 RC5.2
- The developement of the GUI in C# (Mono) is quite active.

Last but not least, aircrack-ng will be 4 years old by the end of february :)

Wiki and Trac search engine

2010-01-20T11:25:00.000-07:00

The wiki and trac implement OpenSearch and when the browser notice there's an OpenSearch on the website, it add a small notification on which your can click to add the search engine:

Firefox shows it with a light blue shadow on the icon of the search textbox like that:

IE shows changes the color of the search engine selection to orange:

Just click on it, and you can add wiki and trac search engines to your favorite browser:

Trac, bugs, forum and t-shirts

2010-01-09T13:35:00.005-07:00

Actually, trac is not completely working. It's better than before, we can commit but now we can't see them in the timeline and also the source browser is not working anymore.
I tried to debug a few days ago but I haven't found why it doesn't work. The path to the svn repository is correct, permissions of trac and on the filesystem are correct so I'm a bit out of ideas.

About the commits, I updated to 1.0 and tagged it and also committed a few patches to fix bugs:
- Client first seen and last seen in kismet netxml file
- Compilation on cygwin 1.7
- OSX patch: Ticket 653: Tap support for Darwin/OS X
- Other small things

The next bugs I'll take care of are:
- Ticket 704: Fix broadcast and multicast detection in aircrack-ng: it still require some work.
- Ticket 498: Aircrack-ng does not support dictionaries over 2Gb
- I'd like to fix another compilation bug on OSX (Ticket 687) but I don't have access to any Mac so if anyone could give me an access to a mac with Darwin and another with Leopard, that's great :). If anybody is getting rid of a Mac with darwin/leopard, we are really interested.
- Ticket 713: Invalid channel parsed from packets with mac80211 drivers

I haven't chosen the other bugs yet, but I still have in mind that WPA handshake detection has to be fixed/enhanced and I remember a bug with airbase-ng not giving the Information Elements in the right order.

There are a few interesting programs and scripts in the forum, and I'd like to give them more visibility (and even small scripts). What are your ideas/opinion about it?

I haven't forgotten the t-shirts. They will be there soon. I might do a few with the new logo for Shmoocon.

Edit (16 Jan 2010): Added one more bug to the list

Happy new year, news, etc ...

2010-01-03T14:25:00.003-07:00

Hello everybody,

First of all, we wish you a happy new year.

There was no news here and no commit on trac since some time but we never stoppped working. Although svn commit wasn't working for us (see previous blog entry for more details), we used the tickets to store all patches that have to be committed.

But I now have some good news, trac is working again. Don't ask me why, I have absolutely no idea, and I didn't change anything (except doing the usual updates).
So that means I'll commit everything to sync svn with 1.0 final and then start committing all patches that were added to tickets since August (that's when svn commit stopped working) and others that were planned for 1.1. That will take a few days :)

I'll also try to update this blog at least once a month to tell you what happened during the last month in our forum, trac and on IRC.

Here are a few things that happened recently:
- Online WPA cracking services: with cloud computing that was launched begin december then now with GPU.
- Injection and packet capture with aircrack-ng seems to work with the Nokia N900. I also read that it will have USB host soon.
- Beini 1.0-RC5.1: A wireless network security testing system,it is based on Tiny Core Linux.
- GUI for aircrack-ng in C# using Mono.
- minidwep-gtk a GUI for aircrack-ng in shell script.
- Slitaz Aircrack-ng: the base Slitaz cooking version plus the latest Aircrack-ng SVN version, wireless drivers patched for injection and other related tools.

I am also currently installing a new server (Core i5 2.66Ghz, 8Gb Ram, 2x 80Gb SSD) for aircrack-ng. That will allow us to organize better the different parts and give a better service to our ever growing community ;).

Our webhoster offers ESXi and I first wanted to use it to virtualize our stuff but it takes too much time to stabilize it (and IP management is a bit tricky/expensive) and since I didn't wanted to wait any longer, I switched to vmware server for the different parts:
- trac and buildbot.
- forum.
- downloads: videos, patches, storage, archive, nightly builds, ... (we currently have around 20Gb of stuff).
- photos and videos of the conventions (btw, I'll soon post the pictures I took during 26C3 and of other conventions).
- a few other virtual machines for testing.
The main website and wiki will not be moved.

Last but not least, I would also like to thank again everybody who help us, not only the donations (although important to pay the servers and domains), but everybody who contributes to the project: in the forum, irc, in the wiki (documentation and translations), bug reports and bug fixes, improvements, ...

More to come in the following days :)

Aircrack-ng 1.0

2009-09-07T16:31:00.012-06:00

Yes, 1.0 final, finally :)

There are not much changes compared to the 1.0rc4, just a few fixes. Here is the changelog:

- airserv-ng: Now works fine between 32 and 64bit OSes.
- wesside-ng: Fixed some endianness bugs
- airodump-ng-oui-update: Make sure the user is root when updating the file.
- airmon-ng: Updated iw download link (0.9.17).
- All: Fixed compilation with some gcc.
- patches: Added missing patches from patches.aircrack-ng.org: mac80211_2.6.28-rc4-wl_frag+ack_v3.patch
- manpage: Updated aireplay-ng manpage.
- INSTALLING: Removed (now) useless requirement for OSX installation.
- GUI (windows): Fixed 2nd selection of a capture file.

For those who use subversion, the sources are not in sync with the trunk. The reason is that svn commit is currently broken.

It broke during a Debian update and we're still trying to figure out how to fix it (It should be fixed by the end of September in one way or another). We've pinpointed the issue and found that the reason is because of the authentication but since we did not change anything to the configuration, I have no idea why it suddenly broke. If anybody knows how to fix it, that would be great.

Last but not least, we're also launching the new website (and logo) as explained in a previous post: New Stuff. Feedback is welcome.

Contests @ Brucon Wireless workshops

2009-09-04T19:13:00.002-06:00

UPDATE (Brucon): Please don't crack networks where you were not given permission to crack, thank you.

Brucon is getting closer :)

As I said, I'll give a workshop friday (17h00) and saturday (09h00, I know, it's early) and there will be 2 contests (one each day). The winner will receive an ALFA AWUS036E with a 5dbi antenna:

They will be run during the workshop and for both of them you need a laptop and a wireless card. You can use the tools of your choice.
- The first one, friday, you'll have to find an access point outside the convention area.
- And saturday, you'll have to crack the key of an access point (I haven't decided yet if it will be WEP or WPA).

More details will be given during the workshops.

New stuff

2009-08-07T08:55:00.013-06:00

Hello everybody,

sorry for not posting anything since some time now, but we have been really busy these days and we got new stuff for you:
- 1.0 rc4 last week
- 1.0 final release date
- Planned features in 1.1
- New logo
- New website

I guess you saw there was a release, 1.0rc4 a bit more than a week ago.
This fixes a lot of stuff (and add some new). It fixes compilation not only on linux but also on BSD plateforms (OpenBSD compilation is fixed) and others ...
The changelog speaks by itself ;)

Here are some planned features for 1.1:
- Be able to use directly cowpatty tables in aircrack-ng (without having to convert them to airolib-ng).
- OSX capture (and maybe injection) with some adapters (Ticket #653).
- Improved WPA handshake detection.
- Bug fixes (of course)
- ...

We also have been working on a new website. Here is a preview: http://www.aircrack-ng.org/new_index.html.
The goal of this new design is to be able to reduce the traffic on the website, currently around 1Tb each month and also to be give a quick access to important information.
As explained in an earlier post, it will not replace the wiki, it will just be the home page and be next to the wiki (you can keep all your bookmarks).
If you (still) have any remark (or improvements) about the new design, you can still post them in the forum (you don't need to register to post).

The logo contest is over and we have a new logo. Here is a preview (winner: segini75). We will also sell t-shirts soon (I know a good website for europe but I still have to find one for the US).

Last but not least, the new website (and new logo) will be launched at the same time as the 1.0 final release in a week or two if no big bugs are found in rc4 :)

Finding the author of the DoS

2009-04-25T16:11:00.009-06:00

As I said, I know the IP address of the author of the DoS on our website and since he's located in Europe (Spain), it shouldn't be really hard to solve the case with the Computer Crime Unit.

However, I would like to try to solve it with him first. I just want him to contact me (tdotreppe@aircrack-ng.org) within 2 weeks to reimburse the bandwidth he generated and explain why he did it and I promise there will be no consequence, no complaint registered.

Thanks a lot

2009-04-25T12:06:00.009-06:00

Good news, the website is now up thanks to all donations.

Even if I really like to work on aircrack-ng, it is really great to see a lot of people helping us, and I really want thank them a lot ;)

The other good news is that we now have enough to pay hosting until July (if this kind of DoS doesn't happen again) but please continue, that would be wonderful if donations could cover hosting costs every month.

Last but not least, I promise that I'll try to make that guy pay the traffic he generated.

Paying the bill

2009-04-23T14:38:00.006-06:00

I finally found who is the responsible or at least the IP address of the author of this DoS (if generating 1.5Tb of traffic in 2 days and making the monthly traffic exceed thus making the website down is not a DoS, then what is it?) and you can be sure that this guy will have to pay the traffic, sooner or later.

Administrative stuff is taking too long so I think it will be easier to pay the bill now to have the website back up.

Aircrack-ng cost me around 60 euro per month (+ domain names that have to be renewed each year, wireless cards, traffic, ...) and although we have around 30K unique visitors each day, unfortunatly donations are quite low (the total for last year was around 80 euro). The reason why I'm writing this post is to ask for donations to pay that bill (around 130 euro).

So, any donation to tdotreppe@aircrack-ng.org (paypal) is really welcome.

Website down

2009-04-18T15:07:00.006-06:00

Unfortunatly, the website is down due to an error in traffic calculation.

We usually use 30-40Gbytes per day and we have 1200Gbytes of traffic per month, so enough for each month.
But the 14 and 15 April, their system say we use 688 and 884Gb (= more than 10Mbytes/sec for 24 hours) of traffic (so 20-30 times what we usually use) thus exceeding the allowed traffic per month.

I'm contacting them to try to fix it as soon as possible.

Edit:
Here is an update: http://aircrack-ng.blogspot.com/2009/04/paying-bill.html

Workshop at Brucon 2009

2009-04-09T11:47:00.008-06:00

I'll be giving a workshop at Brucon 2009 (18-19 September 2009).

Abstract:

During this workshop, I'll tackle different scenarios that could happen during an audit of WiFi networks (Open, WEP and WPA), including the use of CUDA and FPGA to accelerate cracking.

Aircrack-ng is not only meant for auditing wireless networks, it can also be used for site surveys and different tools based on it will be presented:
- Airgraph-ng, graphing wireless networks and its integration in Maltego.
- GISKismet, representing wireless networks in Google earth.
- And more...

There will also be a contest. More details will follow.

Airodump-ng with native wireless driver on Windows

2009-04-01T11:11:00.025-06:00

EDIT: This was an April Fool :)

Altought this is not a final version (a work in progress), here is a version of airodump-ng that works on windows with the native drivers of your wireless card.

Here is a screenshot of the application:

Download link: airodump-ng-win-native-drivers.zip

Nearly all drivers in windows XP are NDIS. So, to allow/enable monitor mode in the drivers, you have to install a special "driver". Because MS may not like it, I prefer to distribute is via bittorrent: native_rfmon_winxp.torrent

Note: It was tested on Windows XP and with an Intel Pro/Set Wireless 2200. And it requires .NET 2.0.
Note 2: If your wireless card isn't listed, it means the adapter is disabled and you'll have to enable it and restart the application (Right click on "My Network Place" then select "Properties". In the list, right click on your wireless adapter and click on "Enable"). In the final version, it will be fixed and will only list wireless interfaces.

Edit: Here is the video (sorry for the quality, it's not easy to record the screen with a camera).

Aircrack-ng 1.0rc3 released

2009-03-26T16:34:00.005-06:00

It is finally released :)

Download links:

Sources
Windows binaries - You have to read the important information regarding windows

Here is a summary of the changes:

tkiptun-ng, easside-ng (and buddy-ng) and wesside-ng are not compiled by default, you have to append 'unstable=true' when compiling and installing
CSV file extension has changed and has now .CSV as extension
Kismet CSV file extension is now .kismet.csv
Airodump-ng can generate kismet newcore NetXML files (.kismet.netxml) and thus should be compatible with GISkismet (however using GPSd currently cause corruption pcap corruption; that will be fixed in the next release).
Fixed compiling on 64 bit.
There's a patch for OSX (intel). You must apply it or aircrack-ng will not work correctly (instructions can be found in INSTALLING file).
Added Active scanning simulation in airodump-ng.
Various fixes.

Here is the complete changelog:

airodump-ng: Added Active Scanning Simulation.
airodump-ng: Added support for kismet-newcore netxml files (DTD v3.1.0)
airodump-ng: Changed file extensions for CSV (.csv instead of .txt) and for kismet CSV (.kismet.csv instead of .csv).
airodump-ng: Fixed WPA tag parsing and added QoS detection based on direction.
airodump-ng: Added option to only disable capture file; all other files (CSV, kismet CSV, kismet netxml, GPS) will be created.
aircrack-ng: Fixed -w with WEP.
aircrack-ng: Fixed useless memory allocation.
aircrack-ng: Fixed compilation with gcc 2.95.
aircrack-ng: Fixed compilation on 64 bit (SHA-SSE2).
aircrack-ng: Fixed errors when compiling on OS X 10.5.6 PPC.
aircrack-ng: Added an option to write the key to a file.
airolib-ng: Fixed a bug where database is created even if parameters are not correct.
airmon-ng: Added wifibox to the list of network managers.
airmon-ng: Updated iw download link (0.9.11).
airmon-ng and airdriver-ng: Move them in script/ directory.
airmon-ng: Bypass interface checks when ps command returns an error. Needed for BusyBox limited ps command.
airdriver-ng: Update legacy RT73 driver to use rt73-k2wrlz v3.0.2
tkiptun-ng: Allow padded arp packets to the client.
airserv-ng & osdep: Fixed compilation on FreeBSD 7.1
easside-ng & wesside-ng: Fixing again "Error Wrote 39 out of 30" error message.
manpages: Fixed manpages titles.
Makefile: Only compile and install wesside-ng, easside-ng, buddy-ng and tkiptun-ng with "make unstable=true".
patches: Updated sqlite (v3.6.11) patch for cygwin.
patches: Added patch for aircrack-ng on MacOSX
scripts: Added a script to automatically patch and install SQLite in cygwin.

Forum up

2009-03-25T13:52:00.006-06:00

The forum is finally up and everything is working fine:

DNS updated
Redirection works fine: all your bookmarks (and links in the forum) with the old address should redirect to the new one automatically (I was surprised to see new posts announced on IRC that still has the old RSS feed address). Technically, the old URL rewrite the URL to point to the new location with the parameters and uses a 301 to do that.
Links (URLs, RSS) are updated on the wiki.
No more glitches on the server. However if it happens, don't hesitate to send a mail to tdotreppe@aircrack-ng.org to tell me (with details).

Last but not least, the 1.0rc3 release should be done tomorrow if everything goes well (I told Murphy to leave me alone at least for a few days) :)

Forum down

2009-03-23T17:43:00.006-06:00

As you saw, the forum has been down since a few hours, around 6pm GMT+1.

The reason is that the database size is really close to the allowed disk space and the hoster stopped it automatically. I moved it to another place (where we have much more space) and there are just a few things to do before it's back up:
- DNS needs to be updated
- a few glitches on the server have to be fixed
- A script has to be written to redirect all requests from forum.tinyshell.be to the new URL (so that any link to it will still work).

The good news is that nothing was lost and it should be faster than before.

Ah yeah, ... It should be back up tomorrow evening and the release of 1.0rc3 will be done the next day :).

New release really soon: 1.0rc3

2009-03-22T13:06:00.008-06:00

There will be a new release in a day or 2. It will fix a lot of bugs (including the compiling issue of rc2 on 64 bit) and add one new feature: creation of kismet newcore netxml files (so that it can work with GISkismet). Some programs (wesside-ng, easside-ng, tkiptun-ng) were marked as unstable and you need to append the flag 'unstable=true' when running make and make install

Here is the current changelog:

airodump-ng: Added Active Scanning Simulation.
airodump-ng: Added support for kismet-newcore netxml files (DTD v3.1.0)
airodump-ng: Changed file extensions for CSV (.csv instead of .txt) and for kismet CSV (.kismet.csv instead of .csv).
airodump-ng: Fixed WPA tag parsing and added QoS detection based on direction.
airodump-ng: Added option to only disable capture file; all other files (CSV, kismet CSV, kismet netxml, GPS) will be created.
aircrack-ng: Fixed -w with WEP.
aircrack-ng: Fixed useless memory allocation.
aircrack-ng: Fixed compilation with gcc 2.95.
aircrack-ng: Fixed compilation on 64 bit (SHA-SSE2).
aircrack-ng: Fixed errors when compiling on OS X 10.5.6 PPC.
aircrack-ng: Added an option to write the key to a file.
airolib-ng: Fixed a bug where database is created even if parameters are not correct.
airmon-ng: Added wifibox to the list of network manager.
airmon-ng: Updated iw download link (0.9.9).
airmon-ng and airdriver-ng: Move them in script/ directory.
airmon-ng: Bypass interface checks when ps command returns an error. Needed for BusyBox limited ps command.
airdriver-ng: Update legacy RT73 driver to use rt73-k2wrlz v3.0.2
tkiptun-ng: Allow padded arp packets to the client.
airserv-ng & osdep: Fixed compilation on FreeBSD 7.1
easside-ng & wesside-ng: Fixing again "Error Wrote 39 out of 30" error message.
manpages: Fixed manpages titles.
Makefile: Only compile and install wesside-ng, easside-ng, buddy-ng and tkiptun-ng with "make unstable=true".
patches: Updated sqlite (v3.6.11) patch for cygwin.
patches: Added patch for aircrack-ng on MacOSX

Aircrack-ng.org new main page design

2009-03-17T16:30:00.008-06:00

We are currently working on a new website, and more precisely on the entry of www.aircrack-ng.org.

This is not meant to replace the wiki but it is meant to give a quicker access to the most used things on the main page of the wiki and a better overview of the important things.

It will be installed next to the wiki and thus nothing will change for you (you won't have to change your bookmarks).

What do you think about the new main page?

ASCII WEP key

2009-03-14T09:45:00.002-06:00

I often see people who cracked a WEP key and who wanted to convert it to ASCII.

My question is why do you want to convert it?
Maybe because it is easier to remember? Mmmh ... not always, especially if it's 13 random characters like this: $5@r6m2be_rEX
Maybe for network managers (command line/graphical, Linux/Windows)? No, they don't care if it's ASCII or hex. And an incomplete conversion would be unusable.

And, btw, if it was convertible, aircrack-ng would have given you the ASCII version :)