Original subtitles

1

Know so far we learn how to use aircraft ngi to run a wordless attack and crack the password for WPA

2

and WPA to networks.

3

We did this by doing aircraft ngi followed by the file name that contains the handshake

4

and followed by the name of the wordlist which in my case is WPA a wordlist.

5

Now run this command will start to crack in.

6

And as you can see now it's going through the whole world destroying every single possible password

7

in there.

8

So I'm going to control see this.

9

And as you can see I have quite big dictionary in here.

10

So it would take two hours and 13 minutes to go through this whole dictionary to try all the possible

11

passwords in there.

12

Now there are much bigger dictionaries than the one I'm using right here.

13

So the cracking process can take several hours or even days.

14

Now this is not bad for crack NWP I wouldn't mind waiting a day or two to get my password.

15

The only problem is you're going to have to that aircraft and you run for this amount of time because

16

if you quit aircraft ngi and run the command again as you can see we're going to start from zero percent

17

again and we're going to start from the start of the files so aircraft engine doesn't save where it

18

reached in the previous cracking session.

19

So what I want to show you today is how to save the cracking session so that if you quit aircraft ngi

20

and come back to it in a day or two or even if you come back to it after a week you'll still have your

21

session and you'll start from where you left the last time.

22

So to do this we're going to first of all use a tool called John Draper.

23

Now John the Ripper is a very famous cracking tool that can be used to do many things.

24

And this lecture we're going to use it to do something very simple which is literally just display our

25

wordlist on the screen.

26

And I'll tell you why we'll do that.

27

So first of all let me show you the command.

28

It's going to be John followed by the name of the wordless.

29

We're going to say wordlist and give it the name of my wordlist which is WPA wordlist

30

and then I'm going to tell her that I want you to display this on the standard output which is basically

31

this current terminal screen.

32

So the command is very simple we're just doing John which is the name of the program we're giving it

33

our wordlist which is stored in the root directory so is the current working directory.

34

That's why all I have to do is just give its name and then I'm saying that I want you to display this

35

to me on the standard output on the terminal screen.

36

Now I'm going to hit enter and as you can see this command is literally just list all the passwords

37

stored in the wordlist.

38

Now we're hit control-C to stop because it's a very big file and it'll take a while to list everything.

39

But you get the idea.

40

The command will literally just display all the passwords on screen.

41

Now the question is Why am I doing this.

42

Well in Linux we can redirect the output to anywhere we want to really.

43

So we're going to use a very useful feature where we can redirect the output of this current command

44

and use it as an input to another command.

45

Now we've seen before that when we use aircraft N-G we give it our wordlist as the input.

46

Today we're going to use the output generated by the command that we just seen which is basically our

47

wordlist and we're going to use it as an input to aircraft energy and we were going to use that used

48

in the pipe character which is the vertical bar.

49

And then we're going to use our aircraft engine command in here so it's going to be aircraft Kenji followed

50

by the miners w option where we usually give our wordlist.

51

But we're not going to give awards this time if we wanted to use the output generated by the previous

52

command and to do that we're just going to put a dash instead of the wordlist and then we're going to

53

fill the command as we usually do.

54

So we're going to do mine asked be to specify the MAC address for my target network.

55

Now I've already copy this.

56

I'm just going to paste it and then we're going to specify the name of the file that contains the handshake.

57

And in my case it's called handshakes minus 0 1 cup.

58

So I'm going to go over this command again just to explain it to you.

59

So first of all we're using the first command here that I showed you before and this command is literally

60

just going to display the output of the wordlist on screen.

61

Then we use the bar character to pipe the output of the screen which is basically my wordlist to aircraft

62

energy.

63

So we use aircraft and as we usually do.

64

And the only difference in here instead of given a wordlist name we put a dash to tell aircraft that

65

get your wordlist from the result of the previous command from the result of the pipe know all of this

66

is good.

67

But what we did so far basically we're literally just doing something that is very similar to the normal

68

aircraft engine command because this command right here displays the wordlist and this command right

69

here reads it.

70

So we still have installed our session.

71

And here is why we use John the Ripper.

72

So the only reason we use the repair is not to display the output on screen.

73

This is this is useless we can do it using other programs but we use it because it can store and resume

74

sessions.

75

So we're going to add one more argument to John Draper and that is the most important argument which

76

is called recession.

77

So we're going to do session

78

and we're going to name it anything so we're just going to name it you PC because the name of my network

79

is UPC.

80

So now when John the Ripper will run it's going to read all the passwords.

81

It's going to pipe them to aircraft and the aircraft engine is going to read this password and start

82

cracking.

83

And then when we quit John the Ripper will start the session and a file called UPC.

84

So I'm going to hit enter and you'll see that aircraft ngi will just start as usual trying to crack

85

my password and I'm just going to let this run for a little bit of time.

86

So some progress is made and then we'll see if we're actually reassuming from where we left OK.

87

Now I'm going to press on the q button to quit.

88

And as you can see we finished 0.4.

89

You can think 0.39 of the whole file so our progress is 0.39 percent so our session name now is called

90

UPC because we specified that in the session argument.

91

So I'm going to clear all of this

92

and we're going to use John again to assume the section so we're going to tell it to restore

93

and then we're going to give it the session name and my session name is UPC then I'm going to pipe all

94

of this again to aircraft ngi.

95

I'm going to give it my notes there but you my word list and I'm going to send that to dush because

96

again I wanted to get the word list from the result of the previous command which is the per command.

97

Then I'm going to give it my VSS idea.

98

Followed by the name of the file that contains the handshake which is handshake 0 1 cup.

99

Now notice this time we didn't specify a word list because basically what we're doing is we're telling

100

John the Ripper to start from where it left last time we gave the word list in the previous command.

101

And now all we have to do is literally just tell John to start from where you left and John can do that

102

because it supports that functionality.

103

And then we're pipe in whatever John is going to read to aircraft.

104

N-G again with aircraft entry we're not given a word list because it's get in it's from John then we're

105

given a dubious I.D. and the handshake file.

106

Now if I hit Enter you'll see the cracking will start again but I'm going to stop it quickly this time

107

just to show you that we are already at 50 percent.

108

So as you can see there is no way we could have done that in this very short period of time which means

109

we basically started from where we left the last time.

110

So like I said this method is very very simple because it allows you to basically stop the attack and

111

then come back whenever you want.

112

Also piping is a very handy skill to know because you can actually use it in so many scenarios to do

113

different types of things.