Hands-On Penetration Testing with Kali NetHunter

Exercise – cracking WEP and WPA

The first step in cracking WEP and WPA is to capture sufficient data from our target wireless network. I would recommend you capture at least 15,000 data frames using airodump-ng. We can use the following command to capture and store the data offline:

airodump-ng --bssid <target access point> -c <channel> wlan0mon –w <output file>

Using the –w parameter will allow airodump-ng to write its data to the specified file. We will capture enough frames until we acquire the WPA handshake:

As you can see, we were able to capture the WPA handshake. To increase the likelihood of a client having to re-authenticate, you ...