Welcome back to our Kelvyn machine.
So we captured our password from the wireless access point, we perform the deal authentication attack.
We kicked everyone off of the Internet.
And then when we started the authentication attack and someone tried to connect back, we captured the
four way handshake into one of these files and I transferred them to my Kelly NEXTSTEP.
And do you remember which one of them is important?
Only this dot kept file.
All of the other three we don't need.
Now, you can delete them if you want to.
I'm just going to move them on the side.
And this is the file that we are going to use for both ways of cracking the password.
Now, open up your terminal first.
And unlike any other brute force tag that we previously did with small password lists of tens or hundreds
or thousands of passwords.
This one is going to be a huge, huge password list.
This password list contains over 10 million unique passwords and it is on our Caledonius machine.
So how can we find it?
Well, you can type the command, locate and then rockyou that this is the name of the password list
and we will see that it is currently in this location right here.
So user SlideShare slash wordlist and RockYou that the dot gov.
Let's go to that directory.
And let's cupie rocket attacks that cheezy to home, Mr. Hacker, and then desktop, let's have both
of the files at the same location.
Now, let's go back and you will notice that this file has this dot jizzy extension.
This means we have to unzip it first because this is a zip file.
Since it has got jizzy extension, we can and zip it using zip code.
And to do that we type G zip and then dash the and then the file name.
If I press enter, you will see that this file is so big that it actually takes a couple of seconds
for it to get unzipped.
And if I were to actually try to catch that foul, well, you will see this will go on forever and ever.
Now I can control cities and not at fault if I want to make some changes or add some passwords, and
you will also see that this takes a couple of seconds as well due to file being so big down here, we
can see it has 14 million passwords.
All of these are some simple passwords that could occur in most of the cases when someone has a simple
password, especially for wireless access points.
For example, here is one, three, four, five, six, seven, eight, nine.
We got Password, Princess RockYou and some names right here.
Basically, these are just some usual words that occur in passwords.
Now, to crack this now that we got both of these files right here, we're going to use the dot cap
file from our desktop and the rocket that the wordlist.
We're going to combine that with a tool called air crack.
Air crack is also preinstalled in Kalinich, so you just type air crack Desh and G and to crack the
password, all we need to do is type dash W and then the password list name.
In our case this is rocketed to 60 and after it comes the name of the dot com file.
So I'm just going to type the name of the file and then dot QEP.
This is the entire comment, if I press enter.
You will see it will start cracking our password.
Down here, you can see the different phrases that it uses, such as current phrase.
This is the current password that it is currently trying to guess.
And here we can see the progress of all of the passwords.
So by the time that I started this program, it already managed to scan over ten thousand passwords
and compare them with our hash password.
The speed you get right here in brackets, which is currently almost four hundred passwords per second.
And here you get the total number of passwords that have to be tested.
The time left is at this current speed, how much time you have left to go through all of these passwords.
And here you get the percentage of the entire password list, which we are currently at zero point fifteen
percent.
Now, of course, we are not going to be waiting for this.
I can just go and check out whether the password is in this password list or what I'm going to do right
now for the purposes of this material is I'm going to manually add that password to our password list.
So I'm going to Nannerl, the Iraqi data, and I'm going to scroll a little bit down.
Two, for example, 400 or 500 passwords, and there I'm going to write the correct password to my wireless
access point and we want to see whether our program will be able to find it as the correct password
with that speed of four hundred passwords per second.
So I'm going to stop right here and let's type a new line.
And here I'm going to add the correct password to my wireless access point.
And it is this one right here.
Now, you should do the same thing, just scroll a little bit down through this password list and just
write your password somewhere in the list and you will notice that it will manage to find this in less
than one second.
So let's save this first control.
Oh.
It will write this to the file and then we press control X to exit, the next thing that we want to
do is we want to run this exact same command.
Just this time.
We know that we have the correct password in that list.
Let's press enter.
And here it is, it managed to find the password in one second, you will notice as soon as it finds
the password, it will stop the execution of the program and it will print it right here.
Key found and in the brackets will be the correct password to that wireless access point.
It's scanned about four hundred and ninety two passwords out of ten million.
And in less than one second it found the correct password.
How cool is this?
And keep in mind that this is the speed of us running this from a virtual machine.
For example, once I test this program on my laptop, it has a speed of three to four thousand passwords
per second.
And in the next video, we're going to see how we can increase the cracking speed.
Even more so with CAT, which is the program that we're covering.
The next video, we're actually cracking the passwords with GPU and here we're cracking the passwords
with our processor and cracking with GPU is much faster.
Therefore, we should have a higher speed once performing the cracking with our Hackgate program.
Nonetheless, more about that in the next video.
You there?