manual.html

About WepDecrypt: Wepdecrypt is a Wireless LAN Tool written in c which guesses WEP Keys based o

<span style="font-family: monospace;"> server mode and port it's the
number port where the server is</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> listening</span><br
 style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> -n network</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> Network is a number and
specifies the maximum number of keys to</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> decrypt by default wepdecrypt
will try to decrypt all packets</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> with diferent keys found<br>
<br>
-d mode<br>
Mode&nbsp; can be all, alpha, alphanumeric, numeric, random or print-<br>
able this option is used to set the mode for the new key genera-<br>
tor.&nbsp; For&nbsp; example "-m 64 -d numeric" will try keys from
"00000"<br>
to "99999"<br style="font-family: monospace;">
</span><br style="font-family: monospace;">
<span style="font-family: monospace;"> -g Used with client mode to get
the file to decrypt from the server</span><br
 style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> -l num_blocks</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> Used with client mode to set the
number blocks to decrypt if</span><br style="font-family: monospace;">
<span style="font-family: monospace;"> num_blocks is 0 the client will
decrypt blocks while server has</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> blocks to assign</span><br
 style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> -v Shows current version</span><br
 style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> -?|-h Shows help menu</span><br
 style="font-family: monospace;">
</div>
<br style="font-family: monospace;">
<span style="font-family: monospace;"> As a first approach I suggest
you to use wepdecrypt_inc script or a </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> dicctionary to try common used
keys.</span><br style="font-family: monospace;">
<div style="margin-left: 40px; font-style: italic;"><span
 style="font-family: monospace;"> wepdecrypt_inc dumpfile</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> wepdecrypt -f dumpfile -w
dictionary_file</span><br style="font-family: monospace;">
</div>
<br style="font-family: monospace;">
<span style="font-family: monospace;"> Now lets going to see some other
methods:</span><br style="font-family: monospace;">
<div style="margin-left: 40px;"><span
 style="font-family: monospace; font-style: italic;"> wepdecrypt -f
dumpfile -m64 -i 00:00:00:00:00 -e FF:FF:FF:FF:FF:FF </span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace;"><span style="font-style: italic;">
wepdecrypt -f dumpfile -m128 -i 11:22:33:44:55:66:77:88:99:0A:0B:0C:0D<br>
wepdecrtpt -f dumpfile -m64 -d alpha<br>
wepdecrtpt -f dumpfile -m128 -d all<br style="font-style: italic;">
</span><br style="font-family: monospace;">
</span></div>
<span style="font-family: monospace;"> This uses the internal key
generator to try all specified keys, you can </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> stop wepdecrypt at any time and
resume the session later. Take a look at </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> the logfile and use the last key
as init key to continue the cracking </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> session. If init key is not
specified 00:..:00 will be used and if last key </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> is not specified FF:..:FF will
be used.</span><br style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> At last the most powerful mode
the distributed network attack, first of all </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> start wepdecrypt in server mode</span><br
 style="font-family: monospace;">
<div style="margin-left: 40px;"><span
 style="font-family: monospace; font-style: italic;"> wepdecrypt -s -f
local.dump -m 64&amp;</span><br style="font-family: monospace;">
</div>
<br style="font-family: monospace;">
<span style="font-family: monospace;"> In server mode also init key can
be specified with -i</span><br style="font-family: monospace;">
<span style="font-family: monospace;"> flag.</span><br
 style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> Now execute wepdecrypt as a
client. First get the dumpfile from the server</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> and start wepdecrypt in client
mode</span><br style="font-family: monospace;">
<div style="margin-left: 40px;"><span
 style="font-family: monospace; font-style: italic;"> wepdecrypt -c
example.com:3657 -g </span><br style="font-family: monospace;">
<span style="font-family: monospace;"> (ip number can be used instead
hostname)</span><br style="font-family: monospace;">
<span style="font-family: monospace; font-style: italic;"> wepdecrypt
-c example.com:3657 -l 0</span><br style="font-family: monospace;">
</div>
<br style="font-family: monospace;">
<span style="font-family: monospace;"> Short explanation about packet
filters:</span><br style="font-family: monospace;">
<span style="font-family: monospace;"> -b flag deserves to select an ap
(the mac of the ap must be used to select it)</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> -n flag deserves to select the
number of packets this is independent from -b <br>
<br>
Now wordfile can contain hex keys which will be used as&nbsp;
keys.&nbsp; To&nbsp; use<br>
this feature the first line of the word file should be HEXKEY_FILE.</span><br
 style="font-family: monospace;">
</div>
<div style="margin-left: 40px;"><br style="font-family: monospace;">
<big><span style="font-family: monospace;"><a name="5._Config_files."></a>5.
Config files.</span></big><br style="font-family: monospace;">
</div>
<div style="margin-left: 80px;"><span
 style="font-family: monospace; font-style: italic;"> $HOME/.wepdecrypt</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #Wepdecrypt
configuration file</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #Server
listening port</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> Port=3617</span><br
 style="font-family: monospace; font-style: italic;">
<br style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #Blocksize
can be set up to 1099511627775</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;">
Blocksize=4294967296 (01:00:00:00:00)</span><br
 style="font-family: monospace; font-style: italic;">
<br style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #Full path
to server logfile</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;">
Logfile=/var/tmp/wepdecrypt_s.log</span><br
 style="font-family: monospace; font-style: italic;">
<br style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #Verbosity
levels: 1 - LOW 2 - MEDIUM 3 - HIGH</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> Verbosity=2</span><br
 style="font-family: monospace; font-style: italic;">
<br style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace;"> I think that this is self
explanatory it handles server configuration all </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> datafields must be in the file.</span><br
 style="font-family: monospace; font-style: italic;">
<br style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;">
/etc/wedecrypt.conf</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #
/etc/wedecrypt.conf</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> #
Configuration for WEPDECRYPT</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;"> # Fernando
Tarin</span><br style="font-family: monospace; font-style: italic;">
<br style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;">
JOHNDIR=/usr/sbin/ (usual place)</span><br
 style="font-family: monospace; font-style: italic;">
<span style="font-family: monospace; font-style: italic;">
WORDLIST=/usr/src/john-1.6/run/wordlist</span><br
 style="font-family: monospace;">
<br style="font-family: monospace;">
<span style="font-family: monospace;"> This is used for wepdecrypt_inc
and wepdecrypt_word which uses john the </span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> ripper to generate keys<br>
<br>
In the windows version all files should be in the same directory as <br>
wepdecrypt.<br style="font-family: monospace;">
</span></div>
<div style="margin-left: 40px;"><br>
<big><span style="font-family: monospace;"><a
 name="6._Graphic_interface."></a></span></big><big><span
 style="font-family: monospace;">6. Graphic interface.<br>
</span></big>
<div style="margin-left: 40px; text-align: justify;"><span
 style="font-family: monospace;"><span style="font-style: italic;"></span>This&nbsp;
is&nbsp; the&nbsp; graphic interface for wepdecrypt. The gui is pretty
self<br>
explanatory, every input box has a flag name, just change it with&nbsp;
your<br>
desired&nbsp; values and hit the check button next to the input box,
besides<br>
now, there is a new help option in the help menu (can also be&nbsp;
accessed<br>
pressing&nbsp; "Ctrl+h")&nbsp; that&nbsp; explains&nbsp; every&nbsp;
option. To start wepdecrypt<br>
press the start button. The default&nbsp; directory&nbsp; for&nbsp;
wepdecrypt&nbsp; output<br>
logs&nbsp; is&nbsp; /tmp/&nbsp; (in&nbsp; windows&nbsp; version&nbsp;
is&nbsp; the same directory in which<br>
gwepdecrypt&nbsp; is&nbsp; running)&nbsp; it&nbsp; can&nbsp; be&nbsp;
changed&nbsp; through&nbsp; the&nbsp; gui&nbsp;&nbsp; or<br>
$HOME/.wepdecrypt file.<br>
<br>
</span></div>
<big><span style="font-family: monospace;"><a name="7._Wkeygen."></a></span></big><big><span
 style="font-family: monospace;">7. Wkeygen.<br>
</span></big>
<div style="margin-left: 40px; text-align: justify;"><span
 style="font-family: monospace;"><span style="font-style: italic;"></span>Wkeygen
is a tool that generates WEP keys. Provided to allow the creation<br>
of wordfiles that contains hex keys easily. Usage is pretty simple just
use<br>
-? flag to see its options (linux version only).</span><br>
</div>
<br style="font-family: monospace;">
<big><span style="font-family: monospace;"><a
 name="8._How_to_help_the_project."></a>8. How to help the project.</span></big><br
 style="font-family: monospace;">
</div>
<div style="margin-left: 80px;"><span style="font-family: monospace;">
Well to help me with the project anything is wellcome.</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> - a patch</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> - rpm or deb versions of
wepdecrypt</span><br style="font-family: monospace;">
<span style="font-family: monospace;"> - reporting a bug</span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"></span><br
 style="font-family: monospace;">
<span style="font-family: monospace;"> If you have any suggestion a
question or something like this.</span><br
 style="font-family: monospace;">
<a href="http://wepdecrypt.sourceforge.net/forum/"><span
 style="font-family: monospace;">
http://wepdecrypt.sourceforge.net/forum/</span></a><br
 style="font-family: monospace;">
<a href="mailto:[e-mail]"><span style="font-family: monospace;">
[e-mail]</span></a><br>
</div>
</div>
</body>
</html>