google-code-export / wepbuster

Automatically exported from code.google.com/p/wepbuster
2 stars 4 forks source link

WEPbuster injects, then stops. #36

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Maybe WEPbuster is getting false positives from the networks it is
injecting into, but it'll go through about 8 networks in 5 minutes and then
the program will stop. I try and run aircrack on the files that WEPbuster
outputs, but it captures no IVs let alone stores the information in the
.cap file. 

Here's an example of the terminal session:

root@bt:~$ ./wepbuster

Detecting wireless interfaces...

------------------------------------------------

Found wlan0...
Getting monitor interface...
monitor interface --> mon0

------------------------------------------------

Found wlan1...
Getting monitor interface...
monitor interface --> mon1

Found 2 useable wireless card(s)

Select which one to use [1] (You HAVE 3 seconds)

1) wlan0/mon0
2) wlan1/mon1

===============================================

2
No valid channel entered. Using the default ( US = 1 6 11 )

MODE: crack          (using: wlan1/mon1 == 00:91:23:45:AC:6B)
.
Scanning channel 6 for WEP-enabled Access Points
.....
Found 3 AP(s) on channel 6

    BSSID          IV   CHANNEL     SSID      ASSOCIATED CLIENTS
00:12:34:56:78:90  0       6        Network 1
00:09:87:65:43:21  1       6        Network 2
00:19:28:37:46:55  0       6        Network 3

Scanning channel 1 for WEP-enabled Access Points
.....
Found 0 AP(s) on channel 1

Scanning channel 11 for WEP-enabled Access Points
.....
Found 0 AP(s) on channel 11

Total AP found: 3

Now starting to crack...

#############################################

Pwning "Network 1" (00:12:34:56:78:90)   Wed, Dec 9 00:00:00 2009
Checking for mac filtering...  NONE!! =)
Trying to associate...  SUCCESS!!!!
Starting to inject...
Sending Death...
Counting IVs...(hit ENTER to skip this AP)
Stopping all forks...

#############################################

Pwning "Network 2" (00:09:87:65:43:21)   Wed, Dec 9 00:00:00 2009
Checking for mac filtering...  NONE!! =)
Trying to associate...  SUCCESS!!!!
Starting to inject...
Sending Death...
Counting IVs...(hit ENTER to skip this AP)
Stopping all forks...

#############################################

Pwning "Network 3" (00:19:28:37:46:55)   Wed, Dec 9 00:00:00 2009
Checking for mac filtering...  NONE!! =)
Trying to associate...  SUCCESS!!!!
Starting to inject...
Sending Death...
Counting IVs...(hit ENTER to skip this AP)
Stopping all forks...

#############################################
root@bt:~$

Note: I used fake MAC addresses and AP names otherwise everything was as
the terminal displayed it. 

If injection and authentication are successful, there is no reason I
shouldn't be able to capture IVs and crack the networks. 

Original issue reported on code.google.com by dragonof...@gmail.com on 9 Dec 2009 at 7:22

GoogleCodeExporter commented 9 years ago
probably the wireless card... 

Original comment by markjays...@gmail.com on 7 Apr 2010 at 3:04

GoogleCodeExporter commented 9 years ago
I´ve got the same Problem!
Its working finde with my Alpha in a backtrack 4 VM.
It´s exactly like discribed above on my eee pc with my alpha!
Same Software! Same Wireless Card.

Original comment by malte.em...@gmail.com on 27 May 2010 at 6:39

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
Ubuntu Lucid 10.04, Alpha036H, r8187 patched drivers
Using the Aircrack-ng 1:10-1, from the repositories (older version, I 
understand).

Running WEPBuster beta 0.7.  Successfully discovers several AP's on various 
channels, and starts the crack process.

Then, same as reported by dragonofred, above, except... it successfully 
collects IV's and cracks only a select few AP's, while skipping most, with 
output as dragonofred shows...
........
Counting IVs...(hit ENTER to skip this AP)
Stopping all forks...

Any clues as to what to look for would be appreciated.

Original comment by okswa...@gmail.com on 4 Aug 2010 at 12:49

GoogleCodeExporter commented 9 years ago
Sorry folks... been busy lately.. there's a debugging option as far as i can 
remember.. see if you can learn anything when it's turned on.

Original comment by markjays...@gmail.com on 23 Aug 2010 at 3:34