How to Hack WPA/WPA2-Enterprise Part 2 « Null Byte :: WonderHowTo

In the second part of this tutorial, we are going to crack the hashes that we've captured previously. I'm going to explain how to do it with the powerful John the Ripper. It comes with Kali by default, so no need to install!Using John the RipperIf you don't know nothing about this tool, you can check thisWikipedia article.First, we have to put the password hashes in a friendly format for John. To do so, we will use a simple script that puts our freeradius-credsXXXXX.txt file in John format, you can download ithere.Visit the previous link, copy the script text to your clipboard and open a terminal.Type:nano radiustojohn.pyPaste the text from your clipboard and hit Control + O to save the changes, then Control + X to exit. Change the permissions to the file by typing:chmod +x radiustojohn.pyAt this point execute the script with the freeradius-credsXXXXXXX.txt file as parameter:./radiustojohn.py <path to the freeradius-creds file>Now we've generated a freeradius.john file that John can understand. Type:john --format=netntlm freeradius.johnAt any time you can hit any key to see the status. As you can see, in about 3 seconds we've guessed 12 passwords. The weaker the password, the faster we crack it. Stronger passwords can take years to be cracked, of course you can use a custom wordlist:john --format=netntlm --wordlist=<path to your dictionary file> freeradius.johnIf you know something about the password, for example the length, you can modify the John's configuration file in order to try only passwords of that length. The configuration file is located in /etc/john/john.conf, let's make a backup of that file:cd /etc/john/cp john.conf john.conf.oldNow that we've made a backup of the original file, let's change it.leafpad john.confAt this point of the file, change the MinLen and the MaxLen for the length of the password. Imagine that you know the password's length is exactly 8, then you must put 8 in MinLen and 8 in MaxLen. Save the changes and run John:john --format=netntlm --incremental=All freeradius.johnJohn also supports OpenCL to work with your GPU, which can crack so much faster.That's all, I hope you've enjoyed! Ask any question!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Brute-Force WPA/WPA2 via GPUHow to Hack Wi-Fi:Getting Started with Terms & TechnologiesHow To:Crack WPA & WPA2 Wi-Fi Passwords with PyritHow To:Hack WPA WiFi Passwords by Cracking the WPS PINHow To:Hack WPA wireless networks for beginners on Windows and LinuxHow to Hack Wi-Fi:Cracking WPA2 Passwords Using the New PMKID Hashcat AttackHow To:Hack WPA/WPA2-Enterprise Part 1How to Hack Wi-Fi:Cracking WPA2-PSK Passwords Using Aircrack-NgHow to Hack Wi-Fi:Getting Started with the Aircrack-Ng Suite of Wi-Fi Hacking ToolsHow To:Hack a weak WPA wireless networkHow To:Hack Wi-Fi & Networks More Easily with Lazy ScriptHow To:How Hackers Steal Your Internet & How to Defend Against ItNews:Secure Your Wireless Network from Pillage and Plunder in 8 Easy StepsHow To:See Who's Stealing Your Wi-Fi (And Give Them the Boot)News:Backtrack 5 Security EssentialsNews:pfSense Enterprise Open Source Firwall & RouterNews:Advanced Cracking Techniques, Part 1: Custom Dictionaries