Complete suite for monitoring, attacking, testing, and cracking WiFi networks, including WEP and WPA/WPA2-PSK.
aircrack-ng -w {wordlist} {capture-file} ๐ wordlist โ /usr/share/wordlists/rockyou.txt ๐ capture-file โ handshake.cap aircrack-ng -w {wordlist} {capture-file} Sandbox: execFile · Timeout: 3600s
network.manipulation.sniff network.crack.wep network.crack.wpa network.deauth network.monitor | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
wordlist | file | No | - | Path to dictionary file for WPA/WPA2-PSK cracking | -w, --wordlist |
attack-mode | string | No | - | Attack mode flag | -a, --attack-mode |
essid | string | No | - | Target network ESSID | -e, --essid |
bssid | string | No | - | Target network BSSID | -b, --bssid |
password | string | No | - | WPA password to test | -p, --password |
show | boolean | No | - | Show known keys in capture | -s, --show |
quiet | boolean | No | - | Quiet mode, suppress output | -q, --quiet |
korps | boolean | No | - | Enable KoreK attacks for WEP | -K, --korps |
strength | integer | No | - | WEP key strength in bits (40/104) | -S, --strength |
fudge | integer | No | - | Fudge factor for PTW attack | -f, --fudge |
g | boolean | No | - | GUI mode | -g |
h | boolean | No | - | Display help | -h |
i | boolean | No | - | WEP key index | -i |
j | boolean | No | - | Output hash in hccapx format | -j |
l | boolean | No | - | Write key to file | -l |
n | boolean | No | - | Use PTW attack | -n |
t | boolean | No | - | WEP40/WEP104 selection | -t |
z | boolean | No | - | Use 64-bit WEP attack | -z |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
wireless.crack.key | Cracked WEP or WPA key | text/plain | - | verified |
wireless.capture.pcap | Captured wireless packets | application/vnd.tcpdump.pcap | - | verified |
Inputs
wireless.capture.file Packet capture file (.cap or .pcap)
wordlist.file Dictionary file for password cracking
Outputs
wireless.crack.key Cracked WPA passphrase or WEP key
wireless.crack.hccapx Hashcat-compatible hash file
network_trafficnetwork_trafficraw_socket_access Produces
wireless.crack.keywireless.crack.hccapxConsumes
wireless.capture.filewordlist.file| Resource | Value |
|---|---|
| CPU | high |
| Memory | 256 MB |
| Network | low |
| Disk I/O | medium |
Crack WPA2 handshake using dictionary
aircrack-ng -w /usr/share/wordlists/rockyou.txt handshake.cap Crack WEP capture using PTW attack
aircrack-ng -a 1 -b 00:11:22:33:44:55 wep.cap Show known keys in capture file
aircrack-ng -s capture.cap Crack WPA with specific ESSID
aircrack-ng -w wordlist.txt -e MyNetwork handshake.cap Crack WEP with KoreK attacks
aircrack-ng -K -b 00:11:22:33:44:55 wep.cap Show all IVs and AP information
aircrack-ng capture.cap Convert capture to hccapx format
aircrack-ng -j hash.hccapx handshake.cap Crack with quiet mode and automatic detection
aircrack-ng -q -w wordlist.txt handshake.cap Aircrack-ng is a complete suite of tools for assessing WiFi network security. It focuses on different areas of WiFi security: monitoring, attacking, testing, and cracking. It supports WEP and WPA/WPA2-PSK key recovery.
| Mode | Flag | Description |
|---|---|---|
| PTW | -a 1 |
Standard WEP cracking (PTW attack) |
| KoreK | -a 1 -K |
KoreK attacks for difficult WEP |
| WPA-PSK | -a 2 -w |
Dictionary attack on WPA handshake |
| WPA-PTK | -a 2 -p |
WPA with known password test |
# 1. Enable monitor mode
airmon-ng start wlan0
# 2. Capture handshake
airodump-ng -c 6 --bssid 00:11:22:33:44:55 -w capture wlan0mon
# 3. Crack the handshake
aircrack-ng -w /usr/share/wordlists/rockyou.txt capture-01.cap