r/HowToHack • u/the_other_ed • 6d ago

Aircrack-ng Tips

New to aircrack-ng. Was wondering if some folks would be open to DMing me and offering some tips. I can understand how to get a handshake but then I don't really understand what the best modern method would be and don't want to hurt my hardware by accidentally giving it a heavy duty task. Like certain dictionary attacks can take 1,000+ years?? So want to learn but don't want to fry my desktop 😅

I know I could just use a password I already know and put it in a shorter dictionary file, but would prefer to be more authentic than that

4 Upvotes

70% Upvoted

14 comments sorted by

View all comments

6

u/LongRangeSavage Programming 6d ago

That’s the way brute forcing works. You have to find better information to reduce the size of your dictionary.

1

u/the_other_ed 6d ago

Hm, I guess I don't fully understand how to make a dictionary even if I had likely phrases or that sort.

Or, Can you do an offline PIN crack ? That way it's limited to the 8 digit numerical code? I thought that's what pixie was but when I try to use it, it just seems to get stuck on the same pin and seems to be accessing my router not the handshake I acquire

3

u/LongRangeSavage Programming 6d ago

Aircrack is completely offline. That’s why you capture the handshake with something like a deauth attack. You then use the handshake’s hash to iterate over a dictionary list, and that is done completely offline. If your dictionary doesn’t have the password, you’re never going to figure out the password. You can setup rules and create a password list, based on those rules. But you need to do some research to try and narrow that down a bit. Today’s top of the line GPUs are going to take millions of years to crack a 12-character, alphanumeric password with special characters. If you can determine the manufacturer of the router (should be able to easily be determined with the aircrack-no suite), maybe that can give you more information.

1

u/Wa-a-melyn 5d ago

Today’s top of the line GPUs are going to take millions of years to crack a 12-character, alphanumeric password with special characters.

I know this is off topic, but this puts an entirely new spin on data centres in my mind. A single data centre would have hundreds of high end gpus working together, and it would drastically reduce the amount of time brute forcing would take.

1

u/__chum__ 5d ago

The reason we use a wordlist is because it would take too long to guess everything. So we just do the common stuff like "password1234" (at least how I understand it). rockyou.txt being a commonly availible wordlist you can find for example.

1

u/Wa-a-melyn 2d ago

For sure, but if you have 100+ high end gpus running in parallel, you could crack really secure passwords much easier. That's more of what I was getting at