60 Comments so far

1. JC256 on February 26, 2008 11:28 am

   Would also be nice if there were a list of wifi cards that work with Ubuntu. Anyone have one?

2. UbuntuLinuxHelp on February 26, 2008 11:32 am

   Try reading this: http://ubuntulinuxhelp.com/how.....tu-router/ and find this link (in that article): https://help.ubuntu.com/community/WifiDocs/WirelessCardsSupported

3. dAtriK on February 26, 2008 11:55 am

   Another list here: http://aircrack-ng.org/doku.ph.....card%20buy

4. UbuntuLinuxHelp on February 26, 2008 12:29 pm

   Also…

   WiFi Radar Feisty:
   http://packages.ubuntu.com/fei.....wifi-radar

   WiFi Radar Gutsy:
   http://packages.ubuntu.com/gut.....wifi-radar

   WiFi Radar Hardy:
   http://packages.ubuntu.com/har.....wifi-radar

   I don’t see anything for Intrepid yet.

5. Don't WEP Me! Ubuntu (and Others) Are Safer With WPA. | Ubuntu Linux Help on March 6, 2008 5:15 pm

   [...] of the readers of another post “Using Ubuntu to Crack WEP“, sent me this [...]

6. Sam on March 29, 2008 4:10 am

   thanks for posting this tutorial, im very new to ubuntu linux but i was keen to learn how to crack wepcodes. however i have encountered an issue. whe i type the command

   sudo mousepad /etc/kismet/kismet.conf

   it opens mousepad, but the only text in the document says “warning, you are using the root account and this may harm your system”

   so i cannot edit the file.
   i have to use mousepad rather than Gedit because im running ubuntu on an eeepc and it runs much better.

   i would be grateful for any help you could provide and i look forward tohearing back from you soon.

   Sam

7. Sam on March 29, 2008 4:17 am

   another issue that i have encountered is that neither of the links to the madwifi patches and packages work, could you prvide more up to date links?

   thanks again,

   Sam

8. UbuntuLinuxHelp on March 29, 2008 8:08 am

   @Sam – Thanks for letting me know. :)
   The files are now here:

   http://ubuntulinuxhelp.com/wep.....1679.patch
   http://ubuntulinuxhelp.com/wep.....707.tar.gz

   So…

   Instead of:

   madwifi-cvs-20051025.tar.gz
   madwifi-cvs-20051025.patch

   Use…

   madwifi-ng-r1679-20060707.tar.gz
   madwifi-ng-r1679.patch

9. UbuntuLinuxHelp on March 29, 2008 8:15 am

   @Sam – The warning command tells you that you are operating with administrative rights and therefore can edit files with those administrative rights. If you make a mistake or edit something that can damage your installation, you will be able to do that… Because you are doing so with full administrative rights. You can use all sorts of editors like vi, nano, etc. It does not have to be gedit.

   I have often broken my system doing such things, so please be careful that you don’t do anything to break yours. The guide was posted as a learning tool. Therefore do NOT use it to do anything ethically wrong or illegal. I used it to crack my own WEP code and to show people why they should use stronger encryption (like WPA, etc.) and not use WEP.

10. Vadim P. on May 7, 2008 8:10 am

    Could this guide be upgrades for Ubuntu 8.04 please? That repository isn’t available, and some programs are missing from the current ones…

11. UbuntuLinuxHelp on May 7, 2008 8:16 am

    @Vadim P. – Are you able to tell me which ones are missing? I might be able to track them down. Also, if you happen to be looking for:

    madwifi-ng-r1679-20060707.tar.gz
    madwifi-ng-r1679.patch

    They are here:

    http://ubuntulinuxhelp.com/wep.....1679.patch
    http://ubuntulinuxhelp.com/wep.....707.tar.gz

12. Vadim P. on May 8, 2008 8:24 am

    I’m on some intel card, so I don’t think I need the wifi patch. Just want to see if my card can do this to begin with :)

    The missing program is “airsnort”, which I think is responsible for airmon and airodump, and I can’t run those commands.

13. UbuntuLinuxHelp on May 8, 2008 8:45 am

    @Vadim P. – Oh I see, okay, I will look later, but a quick link here: http://linux.softpedia.com/get.....3454.shtml
    Would compiling it help?
    It has a quick blurb on that page about how to compile.
    (I’ll look later anyway).
    Thanks.
    :)

14. Is Your Linux Network Wicd (Wicked)? | Ubuntu Linux Help on May 26, 2008 2:31 pm

    [...] Among some of the features I think especially nice are backward compatibility with some of the command line tools (ifconfig for example), the ability to automatically connect at boot to accessible wifi networks and WPA support. As a side note… if some of you don’t thing WPA is pertinent, please read: Don’t WEP Me! Ubuntu (and Others) Are Safer With WPA. or Using Ubuntu to Crack WEP. [...]

15. Gepetto on June 16, 2008 11:54 am

    For people having trouble with these commands on Hardy, all the commands listed here that start with “air” are part of the aircrack-ng package. As for wifiradar, it’s actually called wifi-radar in the repos. I don’t know about madwifi, I didn’t need it.

    Thanks for the tut, using this was loads of fun. I kept telling my neighbor who works a lot from home that WEP is insecure, but he’d rather take his stupid tech guy’s word that it can’t be broken by current technology (d’oh!) so I grabbed his WEP key, accessed his router config and changed the ESSID to “insecure network”. That scared him into changing his encryption to WPA-PSK :)

    I guess it was an illegal invasion since I didn’t get his permission (or even warn him), but it was all for the greater good, and it was really fun. Obviously I didn’t do anything to hurt his files or exploit his network.

16. Paulo on June 16, 2008 5:01 pm

    I must be doing something wrong, but I can’t see what it is. Even after one hour of running aireplay, airodump has still connected only 11 packets from my AP, and aireplay shows 0 ARP, 0 ACK and 0 packets sent. What gives?

17. UbuntuLinuxHelp on June 18, 2008 6:55 am

    @Paulo – It that wireless card working properly? Are there any wireless networks in range?

18. UbuntuLinuxHelp on June 18, 2008 7:03 am

    @Gepetto – Well… that’s one way to show someone the truth of the matter! :)
    For those who are interested in madwifi on Hardy (8.04), the info is here: https://help.ubuntu.com/community/WifiDocs/Driver/Madwifi#head-2a72fa3e31e1b7509b7b21bb1e2bdce8ee5ac782
    I had fun playing too, so figured I’d post notes – That way I, or anyone, can come back later to refer to them.

19. Paulo on June 18, 2008 11:45 am

    Thanks but I already figured out the problem. Turns out this method only works when there’s another client connected to the network. There’s a tutorial on aircrack-ng.org for obtaining a PRGA and cracking the network even without connected clients: http://www.aircrack-ng.org/dok.....no_clients

    It’s the same method with a few extra steps in the beginning. Worked like a charm.

20. stephen on June 28, 2008 11:28 am

    do you plan on updating this tutorial for hardy? please let me know

21. UbuntuLinuxHelp on June 30, 2008 7:50 am

    @stephen – I’d like to update it; maybe after the LAMP server series is finished. (Timing is a bit tight right now). If you have some input, feel free to let me know. ;)
    Thanks!

22. KuroYoma on October 9, 2008 7:42 pm

    I have a problem. When i use aircrack-ng on the dump*.cap file i get a key but when i use the key it doesn’t work. Is there anything else i have to use on the key it gives to make it work.

    aircrack-ng -a 1 -f 10 -s dump*.cap

    This is the line i use.

23. UbuntuLinuxHelp on October 11, 2008 9:48 am

    @KuroYoma – Hmmm… Are you sure the key is correct? What version of Linux are you using? This post is for versions before Hardy (Ubuntu Linux). I’ve not played with this for about a year (almost), so would have to reinstall the applications and play…

    I do know that to get it to work, you’d have to capture a large number (thousands) of IV’s (initialization vectors). Please remember that normal network traffic is probably not going to generate them very quickly. So… aireplay-ng generates them quicker by doing fake authentication. Then airodump-ng is done on the wireless channel (with a bssid filter) to catch the IV’s (new and unique ones). Then aireplay-ng (in ARP request mode) to inject packets (keep resending packets rapidly). Then finally running aircrack-ng to get the key. Perhaps you need more IV’s (Just a thought as I’ve not done this in a long time).

    Hopefully the above might help clarify a bit more? I hope so. :)

24. xtremeshadow3 on October 25, 2008 1:37 am

    I’m able to download the patch from a link in google, but I can’t seem to get the other file anywhere. All of the sites that list it point to a dead link. Is anyone else having this problem?

25. UbuntuLinuxHelp on October 25, 2008 10:44 am

    @xtremeshadow3 – Oh… which links are dead? (Let me know and I’ll try to revive them).
    Thanks.

26. heya on October 26, 2008 12:17 pm

    heya i am new in ubuntu and i managed to advance untill the part of ..

    sudo -i

    cd /usr/src
    wget http://syserr.com/stuff/madwif.....025.tar.gz
    wget http://syserr.com/stuff/madwif.....1025.patch

    ifconfig ath0 down
    rmmod ath_rate_sample wlan_wep ath_rate_onoe ath_pci wlan ath_hal
    find /lib/modules -name ‘ath*’ -exec rm -v {} ;
    find /lib/modules -name ‘wlan*’ -exec rm -v {} ;

    tar zxvf madwifi-cvs-20051025.tar.gz
    cd madwifi
    patch -Np1 -i ../madwifi-cvs-20051025.patch
    make && make install

    modprobe ath_pci

    then i get trouble i tried changing links with the ones that are on the comments but i dont know what might be wrong

    can anyone put that comand just how it should be?

27. heya on October 26, 2008 12:28 pm

    i also got another problem while typing this comand
    sudo apt-get install linux-headers
    i get a message that says
    needs to select explicitly one to install.
    The package linux-headers does not have candidate for installation

    well it says something like that my ubuntu is in spanish so i translated that

28. UbuntuLinuxHelp on October 27, 2008 7:48 am

    @heya – Not sure which links, do you means these ones? (Below). If so, this should be the command:

    wget http://ubuntulinuxhelp.com/wep.....1679.patch
    wget http://ubuntulinuxhelp.com/wep.....707.tar.gz

    :)

29. UbuntuLinuxHelp on October 27, 2008 7:59 am

    @heya – What version of Linux (Ubuntu) are you using? Are you running it virtual – Like VMware? If so…

    Ubuntu Linux will tell you that the linux-headers is a virtual package and that you need to explicitly pick an installation candidate (as there was no candidate specified). The candidates will be listed, and you can pick the package that looks something like “linux-headers-x.x.xx-xx-xxxxxx”. Then after selecting the one you want, you can install the package by using the command that looks something like below:

    sudo apt-get install linux-headers-x.x.xx-xx-xxxxxx

    If I remember correctly, this will install a couple of packages (well, at least on a Linux, Ubuntu server I think it would. The “headers” and the headers for “server”.

    Also, you can remove headers later (if needed) by a command similar to below:

    sudo dpkg –purge linux-headers-x.x.xx-xx linux-headers-x.x.xx-xx-xxxxxx

    I hope this helps you in some way. :)

30. Pretender on January 13, 2009 8:52 am

    Hi!

    Some of the links for updating are broken. Care to update? ;)

31. UbuntuLinuxHelp on January 14, 2009 3:49 pm

    @Pretender – Thanks for the heads-up. I appreciate that. I did try a couple and they worked. Which links are broken? – And I’ll try to get them fixed for you.

32. djben75 on February 27, 2009 9:14 am

    after i tried this, no wirless networks show up in my network manager! I tried many things already including uninstalling all the packages and nothing seems to work! I am fairly new to linux, is there something i am missing? (I am using intrepid) Please help!!

33. UbuntuLinuxHelp on February 27, 2009 5:29 pm

    @djben75 – If no wireless connections show up, maybe it’s because none are in range? As you were able to connect to this blog, I’m assuming that your NIC is working, right?

34. ChaosX on March 3, 2009 11:17 am

    Hey Guys,
    I cannot get any of the links to work for the madwifi/patches could anyone give an update on the location. I cannot find the newest ones or any of the older ones for that matter. Thanks

35. UbuntuLinuxHelp on March 3, 2009 11:30 am

    @ChaosX – Which patches? There are a couple links in the comments. If you let me know which file (patch) your’re looking for, maybe we can post the link.

36. ChaosX on March 4, 2009 10:14 pm

    wget http://syserr.com/stuff/madwif.....025.tar.gz
    wget http://syserr.com/stuff/madwif.....1025.patch

    are the 2 files I need that I cannot find and the ones listed are out of date or not up. Thanks in advance

37. UbuntuLinuxHelp on March 5, 2009 9:58 am

    @ChaosX – There are links to the files in the comments, try those instead. Keep in mind that these files are now old and obsolete.

    You’ll find newer files here: http://sourceforge.net/project.....s/madwifi/ (mentioned in comments too I think?)

    If you must have the old ones, try going direct to Madwifi (madwifi.net) – Try this directory: http://www.madwifi.net/Downloa.....i.Drivers/ Oh… and before I forget to type it, you may want to check here: http://madwifi.org/

    Hopefully one of these links helped you out? – Cheers!

38. Steve Pockspen on April 22, 2009 3:31 pm

    No airsnort.

39. UbuntuLinuxHelp on April 26, 2009 2:53 pm

    @Steve Pockspen – You can get the .deb package here: http://linux.softpedia.com/pro.....-3454.html :)

40. bob marley on May 16, 2009 2:41 pm

    i tried this aircrack-ng suite and now i cant use my wireless nic… its disabled or something and i dont know how to turn it back on properly.

    right now im connected via wireless usb adapter, i just happen to have one or id be really screwed.

    any help getting my internal wireless card back up and running would be greatly appreciated.

    thanks

41. UbuntuLinuxHelp on May 16, 2009 3:22 pm

    @bob marley – There’s two easy ways to do this.

    1) Restore (copy back) the files/settings you backed up.
    2) Remove any packages you installed and put your original settings back.

    I find I always have to backup some of my files and write my settings down. That way I can always go back to my original system. If I don’t do that, I find I always end up in trouble.

    I hope one of the above two steps should get you going again, as I have no idea what system you’re running, hardware, etc.

42. UbuntuLinuxHelp on May 16, 2009 3:30 pm

    @bob marley – Have you looked here? -> aircrack-ng, where it says “…most common cause is that a connection manager is running on your system and takes the card out of monitor mode. This is a very common problem especially with the Ubuntu distribution. Be sure to stop all connection managers prior to using the aircrack-ng suite. Use “killall NetworkManager && killall NetworkManagerDispatcher” to do this. As well, make sure that wpa_supplicant is not running. Another potential cause is the PC going to sleep due to power saving options. Check your power saving options. The madwifi-ng driver for the atheros chipset contains a bug in releases up to r2830 which causes airodump-ng in channel hopping mode to stop capturing data after a few minutes. The fix is to use r2834 or above of the madwifi-ng drivers…”

43. bob marley on May 17, 2009 1:20 pm

    @ubuntulinuxhelp

    lol, restore or copy back files/settings?

    i didnt back up files or settings, i was just blindly following the instructions. i am a total noob at ubuntu and i have the 64 jaunty version. also im not using using the madwifi-ng driver, i saw it when i had to activate my graphics card driver, but i didnt activate it… should i be using the madwifi-ng driver?

    anyways, i eventually re-installed the operating system and it is working again but i would like to try to run the aircrack suite again but this time back up files/settings first…. so how do i go about doing that?

    thanks in advance.

    also my computer is a hp pavilion dv7-1135nr

44. Pham on June 5, 2009 2:43 am

    Hi all,
    I did the following command

    sudo apt-get install build-essential
    sudo apt-get install aircrack
    sudo apt-get install kismet
    sudo apt-get install airsnort
    sudo apt-get install linux-source
    sudo apt-get install linux-headers
    sudo apt-get install sharutils

    but I could not install aircrack and airsnort. Because it saids “Couldn’t find packet aircrack”. Similar to airnort.

    Please let me know how to do ?

    Thanks in advance.

45. UbuntuLinuxHelp on June 5, 2009 7:01 am

    @Pham

    Try aircrack for Hardy (8.04) here: http://packages.ubuntu.com/har.....ircrack-ng

    and airsnort for Hardy (8.04) here: https://launchpad.net/ubuntu/hardy/+package/airsnort

    I hope they help, please let me know – Thanks.

46. Pham on June 5, 2009 7:28 am

    thank you, but I am so sory. Currently, my pc is runing on Ubuntu 9.04. Please help me !

    Thanks in advance.

47. UbuntuLinuxHelp on June 5, 2009 7:50 am

    @Pham

    Okay… Here is aircrack for Jaunty (9.04): https://launchpad.net/ubuntu/jaunty/+source/aircrack-ng/1:1.0~rc3-1

    Or you could just try sudo aptitude install aircrack-ng

    I’ve not played with this in over a year now (so might be a bit out of touch), But I don’t think airsnort is supported in Jaunty. You can try keeping an eye on http://www.getdeb.net/ and if airsnort ever does get in the Jaunty repositories, the package might be called airsnort-ng

    Also, have you tried this to clean out any issues:

    sudo apt-get install -f
sudo dpkg --configure -a
sudo apt-get update
sudo apt-get upgrade
sudo apt-get autoclean

48. Balam on August 4, 2009 5:30 pm

    I have done the tutorial all the way, step by step, and I get this any idea how to fix this?

    khanbalam@Bactery:~$ sudo kismet
    Launching kismet_server: //usr/bin/kismet_server
    Suid priv-dropping disabled. This may not be secure.
    No specific sources given to be enabled, all will be enabled.
    Non-RFMon VAPs will be destroyed on multi-vap interfaces (ie, madwifi-ng)
    Enabling channel hopping.
    Enabling channel splitting.
    NOTICE: Disabling channel hopping, no enabled sources are able to change channel.
    Source 0 (madwifi): Enabling monitor mode for madwifi_ag source interface wlan0 channel 6…
    ERROR: Unable to create VAP: Operation not supported
    ERROR: Unable to create monitor-mode VAP
    WARNING: wlan0 appears to not accept the Madwifi-NG controls. Will attempt to configure it as a standard Madwifi-old interface. If you are using madwifi-ng, be sure to set the source interface to the wifiX control interface, NOT athX
    FATAL: Failed to retrieve list of private ioctls 95:Operation not supported
    Done.

49. UbuntuLinuxHelp on August 7, 2009 8:47 am

    Looks like your answer is in the output:

    @Balam

    Looks like your answer is in the output (copied below):
    “…
    ERROR: Unable to create VAP: Operation not supported
    ERROR: Unable to create monitor-mode VAP
    WARNING: wlan0 appears to not accept the Madwifi-NG controls. Will attempt to configure it as a standard Madwifi-old interface. If you are using madwifi-ng, be sure to set the source interface to the wifiX control interface, NOT athX
    FATAL: Failed to retrieve list of private ioctls 95:Operation not supported
    …”

    Maybe check your wireless hardware, looks like the wireless NIC does not support the features?

50. Zach on August 31, 2009 2:50 am

    Would it be possible to get the driver and patch links for a Broadcom BCM4311 (rev. 02) card?

51. Jack on September 24, 2009 2:29 pm

    sudo airmon start eth1
    -e
    usage: /usr/sbin/airmon [channel]

    -e Interface Chipset Driver

    eth1 Unknown Unknown

    i have a broadcom BCM 4312 card and please tell me do i need to patch it first….cause from the point of patching,i am unable to make out what to do…..

52. Jack on September 24, 2009 3:16 pm

    mohammad@mohammad-laptop:~$ sudo kismet
    Server options: none
    Client options: none
    Starting server…
    Waiting for server to start before starting UI…
    Suid priv-dropping disabled. This may not be secure.
    No specific sources given to be enabled, all will be enabled.
    Enabling channel hopping.
    Enabling channel splitting.
    FATAL: Unknown capture source type ‘bcm4312′ in source ‘bcm4312,eth1,broadcom’
    [1] + Done(1) ${BIN}/kismet_server –silent ${server}

53. lejoy george on November 28, 2009 4:45 am

    when i tried to download the patch for etheros driver its show this msg same the case with the driver some one help me out pls……..

    root@lejoy-desktop:/usr/src# wget http://ubuntulinuxhelp.com/wep.....1679.patch
    –2009-11-28 15:17:14– http://ubuntulinuxhelp.com/wep.....1679.patch
    Connecting to ubuntulinuxhelp.com… connected.
    HTTP request sent, awaiting response… 403 Forbidden
    2009-11-28 15:17:18 ERROR 403: Forbidden.

54. UbuntuLinuxHelp on November 28, 2009 9:19 am

    @lejoy george

    wget is denied because of abuse.

    One way is to download via FTP instead:

    ftp://ubuntulinuxhelp.com/wep/.....1679.patch
    ftp://ubuntulinuxhelp.com/wep/.....707.tar.gz

55. Heero Yuy on December 2, 2009 12:46 pm

    Tried your FTP links above with wget and doesn’t work…
    Tried using Firefox too, but it just downloads a 0 byte file :(

56. UbuntuLinuxHelp on December 2, 2009 12:51 pm

    @Heero Yuy

    Okay, I just tried too, seems like security again. Maybe I’ll send them to another server and post links here. Give me a few minutes.

    Thanks for the heads up.

57. Heero Yuy on December 2, 2009 1:05 pm

    No problem, waiting for your links ;)

58. UbuntuLinuxHelp on December 2, 2009 1:41 pm

    @Heero Yuy

    Will take a bit longer than I thought. I tried to use my Launchpad account, but it’s a nightmare to try and use. (The instructions are no help). I can’t even delete PPAs!!
    So… I have to try and find another place that is user friendly.

59. UbuntuLinuxHelp on December 2, 2009 2:16 pm

    The madwifi files are now stored in an archive on Ubuntu’s Dropbox at: http://dl.dropbox.com/u/330655.....adwifi.zip

60. curious1 on January 24, 2010 8:20 pm

    would anyone be willing to update this entire tutorial for 2010 (with updated links)? I’ve read every single comment on this page, and while some of it is helpful, and all of you try to help, it seems like the links are still outdated (error, forbidden, etc.). I was originally following the tutorial here; http://www.askstudent.com/hack.....ng-ubuntu/ but it is rather outdated. I then stumbled upon this site, which is a bit more updated, but not enough for a newbie (like me) to get the hang of this stuff. I have setup a laboratory environment for this test and would love to be able to do conduct this test and then demonstrate it to my fellow graduate students (we are taking a hacking & defense course elective). Thank you all in advance.