Video demonstrating hacking WEP in 10mins

[Geoff]

http://video.google.com/videoplay?do...7962&q=hacking

Using KisMAC on MAC OSX, reveals the hidden SSID and cracks the WEP encryption in 10mins. Enjoy.

[indie]

Downloads quicker at http://www.ethicalhack.org!

Another demonstration of why not to use WEP... and 40bit keys :P

[Geoff]

Yeah I did consider posting the ethicalhacking site too but decided most peoples filters would take offence

[woody]

Wonder how it would fare with our dynamic wep setup then? Will have to get on the mac and have a go!

[ChrisH]

Its been on my list for a while to move away from WEP on the wireless but after a recent post about radius it would seem the windows implementation in Server 2003 standard wont do it so I need to look at a Linux based one which isnt the end of the world but would have prefered to use the windows one. Anyone want to corect me on this or give some tips?

[indie]

Depends on how often the key changes, its worth noting it only took 10 minutes because it was a 64bit key, 128 does take a little longer.

[Geoff]

Its been on my list for a while to move away from WEP on the wireless but after a recent post about radius it would seem the windows implementation in Server 2003 standard wont do it so I need to look at a Linux based one which isnt the end of the world but would have prefered to use the windows one. Anyone want to corect me on this or give some tips?

IAS on W2k3 standard does work. Appears to be a little flakey though. You also need to manually install certs on the client machines.

I'd use a Linux Certificate Authority (OpenSSL) and Radius(FreeRADIUS) server personally. But thats just me.

[ChrisH]

I have a CA running already I just need to do the Radius. Anyway thats on my list for further investigation asap.

[DMcCoy]

Its been on my list for a while to move away from WEP on the wireless but after a recent post about radius it would seem the windows implementation in Server 2003 standard wont do it so I need to look at a Linux based one which isnt the end of the world but would have prefered to use the windows one. Anyone want to corect me on this or give some tips?

IAS on W2k3 standard does work. Appears to be a little flakey though. You also need to manually install certs on the client machines.

I'd use a Linux Certificate Authority (OpenSSL) and Radius(FreeRADIUS) server personally. But thats just me.

Despite using Windows mostly, I hate setting up the certificate server etc. I did get quite far through the guide for radius on windows, until it started creating security certs with the enterprise features. I'm sure there is a way to do it, but I don't have enough time/experience to work it out at the present moment.

I'll probably just set up another debian VM in the end

[Geoff]

http://text.dslreports.com/forum/rem...6052~mode=flat

[ChrisH]

Thanks will have a good read of that and test it some time.

[Ric_]

BTW - You can't use Airport Extreme cards to crack WEP (due to the stoopid things using broadcom chips and broadcom refusing to document how their chips work properly)

No wifi cracking from my G4 iBook it seems

KisMac was the first mac app that I downloaded though and it's still my favourite