Know so far we learn how to use aircraft ngi to run a wordless attack and crack the password for WPA
and WPA to networks.
We did this by doing aircraft ngi followed by the file name that contains the handshake
and followed by the name of the wordlist which in my case is WPA a wordlist.
Now run this command will start to crack in.
And as you can see now it's going through the whole world destroying every single possible password
in there.
So I'm going to control see this.
And as you can see I have quite big dictionary in here.
So it would take two hours and 13 minutes to go through this whole dictionary to try all the possible
passwords in there.
Now there are much bigger dictionaries than the one I'm using right here.
So the cracking process can take several hours or even days.
Now this is not bad for crack NWP I wouldn't mind waiting a day or two to get my password.
The only problem is you're going to have to that aircraft and you run for this amount of time because
if you quit aircraft ngi and run the command again as you can see we're going to start from zero percent
again and we're going to start from the start of the files so aircraft engine doesn't save where it
reached in the previous cracking session.
So what I want to show you today is how to save the cracking session so that if you quit aircraft ngi
and come back to it in a day or two or even if you come back to it after a week you'll still have your
session and you'll start from where you left the last time.
So to do this we're going to first of all use a tool called John Draper.
Now John the Ripper is a very famous cracking tool that can be used to do many things.
And this lecture we're going to use it to do something very simple which is literally just display our
wordlist on the screen.
And I'll tell you why we'll do that.
So first of all let me show you the command.
It's going to be John followed by the name of the wordless.
We're going to say wordlist and give it the name of my wordlist which is WPA wordlist
and then I'm going to tell her that I want you to display this on the standard output which is basically
this current terminal screen.
So the command is very simple we're just doing John which is the name of the program we're giving it
our wordlist which is stored in the root directory so is the current working directory.
That's why all I have to do is just give its name and then I'm saying that I want you to display this
to me on the standard output on the terminal screen.
Now I'm going to hit enter and as you can see this command is literally just list all the passwords
stored in the wordlist.
Now we're hit control-C to stop because it's a very big file and it'll take a while to list everything.
But you get the idea.
The command will literally just display all the passwords on screen.
Now the question is Why am I doing this.
Well in Linux we can redirect the output to anywhere we want to really.
So we're going to use a very useful feature where we can redirect the output of this current command
and use it as an input to another command.
Now we've seen before that when we use aircraft N-G we give it our wordlist as the input.
Today we're going to use the output generated by the command that we just seen which is basically our
wordlist and we're going to use it as an input to aircraft energy and we were going to use that used
in the pipe character which is the vertical bar.
And then we're going to use our aircraft engine command in here so it's going to be aircraft Kenji followed
by the miners w option where we usually give our wordlist.
But we're not going to give awards this time if we wanted to use the output generated by the previous
command and to do that we're just going to put a dash instead of the wordlist and then we're going to
fill the command as we usually do.
So we're going to do mine asked be to specify the MAC address for my target network.
Now I've already copy this.
I'm just going to paste it and then we're going to specify the name of the file that contains the handshake.
And in my case it's called handshakes minus 0 1 cup.
So I'm going to go over this command again just to explain it to you.
So first of all we're using the first command here that I showed you before and this command is literally
just going to display the output of the wordlist on screen.
Then we use the bar character to pipe the output of the screen which is basically my wordlist to aircraft
energy.
So we use aircraft and as we usually do.
And the only difference in here instead of given a wordlist name we put a dash to tell aircraft that
get your wordlist from the result of the previous command from the result of the pipe know all of this
is good.
But what we did so far basically we're literally just doing something that is very similar to the normal
aircraft engine command because this command right here displays the wordlist and this command right
here reads it.
So we still have installed our session.
And here is why we use John the Ripper.
So the only reason we use the repair is not to display the output on screen.
This is this is useless we can do it using other programs but we use it because it can store and resume
sessions.
So we're going to add one more argument to John Draper and that is the most important argument which
is called recession.
So we're going to do session
and we're going to name it anything so we're just going to name it you PC because the name of my network
is UPC.
So now when John the Ripper will run it's going to read all the passwords.
It's going to pipe them to aircraft and the aircraft engine is going to read this password and start
cracking.
And then when we quit John the Ripper will start the session and a file called UPC.
So I'm going to hit enter and you'll see that aircraft ngi will just start as usual trying to crack
my password and I'm just going to let this run for a little bit of time.
So some progress is made and then we'll see if we're actually reassuming from where we left OK.
Now I'm going to press on the q button to quit.
And as you can see we finished 0.4.
You can think 0.39 of the whole file so our progress is 0.39 percent so our session name now is called
UPC because we specified that in the session argument.
So I'm going to clear all of this
and we're going to use John again to assume the section so we're going to tell it to restore
and then we're going to give it the session name and my session name is UPC then I'm going to pipe all
of this again to aircraft ngi.
I'm going to give it my notes there but you my word list and I'm going to send that to dush because
again I wanted to get the word list from the result of the previous command which is the per command.
Then I'm going to give it my VSS idea.
Followed by the name of the file that contains the handshake which is handshake 0 1 cup.
Now notice this time we didn't specify a word list because basically what we're doing is we're telling
John the Ripper to start from where it left last time we gave the word list in the previous command.
And now all we have to do is literally just tell John to start from where you left and John can do that
because it supports that functionality.
And then we're pipe in whatever John is going to read to aircraft.
N-G again with aircraft entry we're not given a word list because it's get in it's from John then we're
given a dubious I.D. and the handshake file.
Now if I hit Enter you'll see the cracking will start again but I'm going to stop it quickly this time
just to show you that we are already at 50 percent.
So as you can see there is no way we could have done that in this very short period of time which means
we basically started from where we left the last time.
So like I said this method is very very simple because it allows you to basically stop the attack and
then come back whenever you want.
Also piping is a very handy skill to know because you can actually use it in so many scenarios to do
different types of things.