Video Tutorial: Installing Aircrack + Wicrawl on Ubuntu Linux

Aircrack-ng

Aircrack-ng is a set of tools for auditing wireless networks. These tools can recover 802.11 WEP and WPA-PSK keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools.

Last year i walked you through installing the Aircrack-ng suite on Ubuntu Linux.

We will be installing and using just part of the Aircrack-ng suite, airmon-ng. This will allow us to put our wireless card into "Monitor" mode.

Wicrawl

Wicrawl is a simple wi-fi (802.11x) Access Point auditor with a simple and flexible plugin architecture. The plugins allow us to find out useful information about an AP so we don’t have to manually check each access point. Plugins are implemented for existing common tools, and new plugins can be written in any language. Wicrawl is able to use multiple cards, and eventually will be able to use multiple computers.

The goal is to automate the tedious task of scanning wi-fi access points for interesting information. This can be a useful tool for penetration testers looking to “crawl” through massive numbers of APs looking for interesting data. Plugins will be everything from DHCP and nmap to aircrack or hooks to move a motorized directional antenna around.

The guys over at Midnight Research Labs stopped development back in 2007. Being a bit out-dated, it wouldn't compile on the latest Ubuntu without a couple tweeks. I replaced the entire source code in the Aircrack-ng plugin folder with the latest SVN (as of this post). I also had to add a header file to the discovery folder to help it compile.

I went ahead and tared up my folder with all of these edits so you can easily compile it on the latest Ubuntu Linux (9.10 as of this post).

In this video tuorial, i walk you through installing Aircrack-ng as well as Wicrawl.

1) Install dependences

# sudo apt-get install build-essential libxml-smart-perl libssl-dev libsqlite3-dev sqlite3 subversion iw

2) Grab the latest snapshot of Aircrack-ng

# sudo svn co http://trac.aircrack-ng.org/svn/trunk/ aircrack-ng

3) Change to the Aircrack-ng folder and build Aircrack-ng

# cd aircrack-ng
# sudo make sqlite=true

4) Install Aircrack-ng

# sudo make sqlite=true install

5) Put wireless interface into monitor mode

# sudo airmon-ng start wlan0

6) Test injection capability on your wireless card

(Note: Your wireless interface may be something other than wlan0, type iwconfig to confirm)

# aireplay-ng -9 mon0

You should see something like:

16:29:41 wlan0 channel: 4
16:29:41 Trying broadcast probe requests...
16:29:41 Injection is working!

If you dont see the above, you need to go patch your wireless driver to support injection.

Check the compatibility chart here.

7) Download Wicrawl

# wget http://www.timashley.me/files/wicrawl.tar.gz

8) Extract Wicrawl

# tar zxvf wicrawl.tar.gz

9) Change to wicrawl folder and build Wicrawl

# cd wicrawl
# sudo make

10) Install Wicrawl

# sudo make install

11) Run Wicrawl

Note: make sure you have a wireless interface in monitor mode (mon0)

# sudo wicrawl

12) Select your interfaces

Interfaces -> Use Interfaces -> wlan0
Interfaces -> Monitor Mode -> mon0

13) Choose plugins

Plugins -> Edit active plugins

14) Auto pwn

Wicrawl -> Start in Automatic Mode