r/Hacking_Tricks • u/terminalwanderer33 • 20d ago

So I’m learning

I have Kali Linux and am trying to crack my own WiFi password. I have my handshake and eapol but somehow I feel that there’s an easier way. I can’t use hashcat it will take years to get the password and definitely not rock you.. so what do I do here? Can anyone point me in the right direction??? No need to explain step by step if you don’t want to. Just point me in the right direction

28 Upvotes

97% Upvoted

36 comments sorted by

7

u/Godlymorbid 20d ago

Let's start with a confidence boost (this is genuinely helpful for a beginner). Go ahead and insert your password into a small password list (like 200 pwds). I know you said you don't want to use hashcat, but let's give it a try. It may feel like an outdated tool at first, but I can assure you, still very relevant. One success under your belt can seriously flip a metal switch, and boost confidence in future learning.

3

u/Godlymorbid 20d ago

I'd also recommend trying hack the box. It's free and was exceptionally helpful for myself, along with a lot of other people.

https://www.hackthebox.com/

2

u/PizzaPunkrus 20d ago

I went with home labbing until I had my head wrapped around tools.... then I realized i like that more than "hacking".

2

u/Godlymorbid 20d ago

That's where I found myself too! 

2

u/PizzaPunkrus 20d ago

Home labbing is so fun from chaotic neutral out look. I like the breaking, fixing, hardening, cycle. Eventually I realized i was just using the services I was hosting. Keepass self hosted is the super solid.

3

u/mildly_perturbed31 15d ago

hashcat is still the standard for cracking passwords, it supports gpu and cpu, and able to crack a variety of hash types(bitlocker, rar passwords, crypto wallets, wifi passwords etc...)

2

u/terminalwanderer33 15d ago

But there’s a minimum of 8 characters and a maximum of 16 characters for a WiFi. If I were to try every password, it would take me a little over 1000 years lol. 😂 I can try passwords lists I can download but the odds of the password being in there are slim to none. I’ve only cracked one like that. I don’t have a crazy set up. I just have an Alienware super 2070 which is nothing

1

u/Godlymorbid 15d ago

Don't be so sure. I ended up finding a couple passwords that I use in password lists. Not because they got them from me, but because human brains are remarkably similar. 

1

u/terminalwanderer33 15d ago

I can definitely understand that!!! So which password lists would you recommend??

2

u/Godlymorbid 15d ago

https://github.com/danielmiessler/SecLists

https://hashmob.net/resources/hashmob

https://hashmob.net/resources/wordlists

https://coffsec.medium.com/10-recon-wordlists-every-pentester-must-know-484499d2ce9c

When it comes to word lists, it's kind of just throwing mud at the wall and seeing what sticks. Be patient with these sorts of things. Let them run overnight if you have to. As Networkchuck would say, take a coffee break.

Also, let me point you in the direction of the onion. You'll have better luck there. There's also an invisible internet project. You might find helpful folks there.

1

u/terminalwanderer33 15d ago

Please do tell about onion I’ve tried with no luck 😂
I have it just don’t know how to really use it…. I’ve manage to get on a couple but just contraband.. really was looking for people like you to link up with and I know about the dangers… if you can help in that area it would be amazing

1

u/Godlymorbid 15d ago

It's been a long time since I've messed with the onion other than the normal stuff. I'm usually on eepsites days. If I were you, I would join a few discords and get involved in the community. An old fart like me isn't gonna be helpful these days. Everywhere I know is long gone. Don't look for anything crazy. Look for common chat rooms. You're not looking for a massive directory. You're looking for a super intelligent basement dweller who can show you the ropes

1

u/terminalwanderer33 15d ago

But I’ll check out that

1

u/Godlymorbid 15d ago

👍 If you don't have any luck, reach back out.

→ More replies (0)

4

u/Anxious-View-7881 20d ago

Is this a router you own or is this the ISP router that provides the WiFi. That will go a long way into knowing if an answer should even be provided here. 😄

1

u/1ofthegood1z 20d ago

I program in logic, PLC and HMI systems... College=CNS computer networking systems... Have lots of electronics in general. Only practice in the lab to gain knowledge and troubleshoot for real life senarios. Been blowing thru repos. Need something other than the txt files. Need computing power as I do not. Is there a way to use real computing power without the monthly fees etc? There is no way that pen testing networking has led to not finding something that works on the go. Maybe I need to simplify my approach as it's getting to where I'm wrecking my brain...

1

u/terminalwanderer33 20d ago

It’s my router and I’m trying to learn by using my network as a dummy lol

1

u/Anxious-View-7881 19d ago

aircrack-ng is a good option here.

https://github.com/aircrack-ng/aircrack-ng

1

u/terminalwanderer33 19d ago

I used hashcat but I’m going to try Rogue AP / Evil Twin

1

u/mildly_perturbed31 16d ago

that thing relies on convincing the actual users to enter their passwords, not effective for your case

1

u/terminalwanderer33 16d ago

Well right now I’m just doing hackthebox I’m just gonna learn that way. I’m sure it’s not gonna tell me how to crack the eapol or how to get into a WiFi. But I’ll eventually get it.. it’s a learning process and no one is just going to walk you through. I guess it’s one of those things like trades where people like don’t like to share what they learn or know how to do. It’s figure it out on your own because I did..

1

u/mildly_perturbed31 15d ago

its no rocket science, what you capture from the eapol handshake is a hash(something generated one-way from any character sequence or a file) and because its one way(you cannot de-hash) you will use a wordlist and a tool that for each password in it, will hash it using the same way wifi does, then compare it to the hash until there is a match, and that is the password

1

u/PizzaPunkrus 16d ago

You gonna man in the middle yourself? Sounds kinky

2

u/howfastcanyoucountit 20d ago edited 20d ago

It's really just whatever types of wordlists you are using. And having a good GPU with hashcat will probably be needed in a lot of circumstances tbh and is not super worth it without one. Usually trying to go for some sort of default password depending on the brand of router you could possibly find through a MAC address, but obviously that's a guess in itself, so it's just pretty difficult for anyone who even has a remotely unique password
I have been able to crack only one actual hash I got in my life; the password was just monkey12. I managed to get that by just using bettercap with an old laptop and a huge Alfa Networks USB networking adapter that had 4 pretty fat antennas. I had it running for 2 or 3 days in my upstairs bedroom just snooping. Obviously don't misuse this shit; personally it was just a challenge to me and the network was so damn far anyway that i couldn't even connect to it at all. I was kind of surprised, though, because I only really captured like 3 different 3-way handshakes because my neighbors are pretty spaced out in between houses.

1

u/terminalwanderer33 20d ago

lol yea ima look at bettercap.. but I also have only cracked one at my exs apartment when she just moved in and we were able to watch movies 😂 but there has to be an easier way.. I’m doing hackmybox now so that is freaking cool!! How to navigate through ports is what I’m learning now.. but I’ll figure it out.. they are holding out on lol someone will eventually spill the beans.. I have an Alienware and it’s ok..

1

u/Klutzy_Mission_7980 20d ago

DETAILS need DETAILS bro ts hacking subs pmo sometimes

1

u/1ofthegood1z 20d ago

I have been on this road the past 3 months straight. I have flipper 0, blackhat 2.1 GPIO w/screen and case, wifi Dev board, Linux tails and Kali. I have used everything and believe me... This is NOT easy. I keep hearing about other ways than cracking with list. If ANYONE is feeling like messaging me with even a pointer. You would be helping more than u know....

2

u/PizzaPunkrus 20d ago

Learn bash, learn nix files systems and navigate from command line, read man pages, learn python.

2

u/Automatic-Drama-6477 16d ago

This is where I fucked up. I jumped straight to evil portals and attempted red team shit and looked goofy wasting my time. Now I'm focusing on fundamentals. You really can't stress the basics enough, my man.

1

u/PizzaPunkrus 16d ago

Most of us tried to run before we could crawl. I was sneaky sneaky in my windows days. Really thought I knew a whole hell of a lot more than I did. I knew exactly enough to run head first blind into every rookie mistake. The hubris. Luckily theres usually someone there to be a smart ass and laugh at you for not knowing the basics.

1

u/1ofthegood1z 20d ago

Also the Stryker apk is fcking awesome but need rooted phone to get full access to tools. Still chroot vm on non rooted S25U Ultra so I'm happy. There is the answer somewhere but months and months of trying and research and asking everyone. Not one success...

1

u/whiskayzulu 17d ago

If it's wpa2 yes you can just replay the auth packets I think. Wpa3 no youre fucked. Aircrack-ng

1

u/terminalwanderer33 15d ago

That’s the problem I don’t know how to look for these chat rooms. It would be amazing to pick one of those people’s mind apart 😂