broken into wep

[MrShankmmz]

i have a netgear wireless router. i have set up a network with a wep password. my roomate owns a mac laptop. his computer will automatially connect to the network. if he trys to manually connect he is prompted too. any computer with a windows operating systems has to put in a password to acess the network. is there anyway computers with a windows os can get in too. how is this done with a mac and not a windows os? is there anything i can read to better understand?

 

[criccio]

If you're roommate gets in automatically, either he knows (and has saved) the password, or WEP encryption isnt turned on to begin with. The easiest way to solve you're problem is to ditch WEP all together as any monkey with a laptop can crack it. WPA is the way to go.

 

[TechieSooner]

If you're roommate gets in automatically, either he knows (and has saved) the password, or WEP encryption isnt turned on to begin with. The easiest way to solve you're problem is to ditch WEP all together as any monkey with a laptop can crack it. WPA is the way to go.

Any monkey with two (unless it's changed now) WiFi cards... Not many folks have two WiFi cards unless they are seeking to do this.

 

[goodcooper]

Any monkey with two (unless it's changed now) WiFi cards... Not many folks have two WiFi cards unless they are seeking to do this.

i dont't hink you all realize how hard it is to crack a non-autogenerated 128bit wep...

i've tried on my own network, randomly made up a 128bit wep, put kismac to work on it... no way in hell... i even tranferred a couple DVDs over wireless just to generate some traffic...

with the amount of traffic i put through wireless (about 2 or 3 laptops) it would take a guy several weeks to crack my 128bit wep... imo, if it takes anybody more than 24 hours to crack your wep, you've got "good enough" protection at your house...

 

[GlobalFear]

Thats because you are doing it wrong. Passive attacks like the one you attempted take a long time. Your best bet is to generate a nice stream of ARP requests with the help of something like aireplay (Part of aircrack).

Anyone with a copy of BackTrack can crack wep in ten minutes, its not exactly magic.

 

[Xipher]

i dont't hink you all realize how hard it is to crack a non-autogenerated 128bit wep...

i've tried on my own network, randomly made up a 128bit wep, put kismac to work on it... no way in hell... i even tranferred a couple DVDs over wireless just to generate some traffic...

It's not about generating traffic at all. In one of my classes my professor cracked the wep key on the access point he set up in 15 minutes (this was only 64 bit wep to reduce the time). The trick is to generate packets that force the client/AP to generate the next key by breaking the connection so the sniffer can get seeded well enough to figure out the rest. It does work just takes some one with knowledge and the proper tools to do it.

 

[y0verflow]

Yeah, the gist of it is that you can consistently crack WEP in under an hour, even with the 104 bit key size.

 

[goodcooper]

Thats because you are doing it wrong. Passive attacks like the one you attempted take a long time. Your best bet is to generate a nice stream of ARP requests with the help of something like aireplay (Part of aircrack).

Anyone with a copy of BackTrack can crack wep in ten minutes, its not exactly magic.

it wasn't a passive attack, i was reinjecting packets with a prism card, you've still got to find enough UIDs to reinject... ... and the full 104 is a lot harder to crack than the 40


i mean if you have the WPA option take it, its a no brainer, i'm just kind of tired of hearing people say a WEP key is basically the same as an open network

 

[Dallows]

i have a netgear wireless router. i have set up a network with a wep password. my roomate owns a mac laptop. his computer will automatially connect to the network. if he trys to manually connect he is prompted too. any computer with a windows operating systems has to put in a password to acess the network. is there anyway computers with a windows os can get in too. how is this done with a mac and not a windows os? is there anything i can read to better understand?

Your router should have a setting for mac filtering. Put in the mac addresses of computers you want to have access and make it set to only allow those. OR get his mac address and and set it to deny access.

 

[goodcooper]

Your router should have a setting for mac filtering. Put in the mac addresses of computers you want to have access and make it set to only allow those. OR get his mac address and and set it to deny access.

this should only be done in addition to any security...

mac filtering is the easiest form of wireless security to circumvent, if it can be called security at all

 

[dpgamer]

it wasn't a passive attack, i was reinjecting packets with a prism card, you've still got to find enough UIDs to reinject... ... and the full 104 is a lot harder to crack than the 40


i mean if you have the WPA option take it, its a no brainer, i'm just kind of tired of hearing people say a WEP key is basically the same as an open network

WEP is the same as an open network to anyone who wants access. The 104 bit key only takes a little longer to get anough IV's. I'm not sure what you mean by UIDs to reinject, it isn't hard to sniff a little traffic, make an ARP packet, then inject away.