h@cking WiFi

when i first shifted to desa palma, we felt bored without Internet, like quarantined, can’t get contact with friends, and information.

By then, we asked for streamyx, we applied it. After applied, we only knew that the port was full, no more port for us, they added us to their waiting list. We straight away asked him, how long? He can’t confirm for us, and may took months! Holy crap! How to live without internet??

I then think of stealing people’s wifi. We searched for wifi networks, lots of network! But all locked with password… Desa Palma resident are damn clever… Then, I went to the library with my laptop, spending the whole afternoon searching the information to hack WiFi on the net. I found that there is a type of old network encryption, known as WEP, is very weak and can easily cracked. There’s some tools needed for the crack. Here’s my ingredients:

1x laptop with WiFi
1x Ubuntu live CD (linux OS)
1x aircrack-ng cracking tool
1x brain and some command skills

Ok, here’s how it works. The computer is talking to the wireless access point with encrypted data. We try to listen what’s they are talking over the air, and collect a large amount of packet’s Initialization Vector (their words). After collecting all these packets, we need to use the aircrack tool to calculate the encrypting password. Understood? If you don’t, check here:

http://docs.lucidinteractive.ca/index.php/Cracking_WEP_and_WPA_Wireless_Networks

This cracking needs linux, bcoz windows is not supported, their driver is not open sourced so that we can’t do any packet injection. I booted up the ubuntu live cd, it’s damn slow, as it keeps reading files from CDrom. So, I installed it into my hard disk. Ok, ubuntu running smoothly, time for crack. I searched the network around.

The red underlined are my target. I tried to ‘listen’ all the WEP networks, and see how many clients are connected with the network and the network quality (means closer to me, so i can listen clearly). As if there is no client, there is no ‘sound’ that we can listen to.

I’ve tried to search for around 3 days, as many of the network I tested keeps disconnected, and I tried to give up. But the 3rd day, I found that a network, named ba*****, have a client connect to the network, and the signal is pretty good. I’m so excited, but I have to collect over millions of packets, that’s need a long time, luckily, I found that there is a method to burst the packet quantity, it’s called packet injecting. It’s work in this way, when the wireless access point sends the data to the computer, I add-in some command to it, to tell the access point that the computer can’t heard properly, and ask to resend the data. By doing this repeatedly, I can collect a great amount of IV.

In minutes, i have reach the goal, it is enough to be processed and calculate. The calculator tried to brute force the encryption to match these IV, and in minutes time, calculated the encryption password.

Wow! I see the sunshine again. I quickly turn back to Windows, connect the network with the password just cracked, it works! I have internet access right now. All our room mates are so happy, although the signal is not stable, will often disconnect.

I can easily login to the router page with default password, and look for the owner’s streamyx username password. Using his streamyx username password, i could login to Tmnet bill online, login with the username, and view his bill. Yes, we found that he is staying the opposite block of our unit. And we checked, its package is RM88, which is 1Mbps package. There is a lot of info can be done, just by cracking the wireless network. Pretty danger huh? So, if you haven’t lock your network with the stronger WPA2 encryption, change it now, or your information could easily leak out.

And…. Lol…. when we was eating McDonald’s the next week, the streamyx guy called us, and will install streamyx 1 hour later. Wow..So fast? We thought months!