Ubuntu Security :: Improve Home Wireless Using Air Crack?
Jul 22, 2010I've been studying air crack so that i can learn ways to improve my home wireless network and using air crack on ubuntu isn't as easy as i thought it would be.
View 9 RepliesI've been studying air crack so that i can learn ways to improve my home wireless network and using air crack on ubuntu isn't as easy as i thought it would be.
View 9 RepliesI have an Acer Aspire One -532h and i just installed ubuntu 10. I am trying to crack my own Wep network at home with Aircrack-ng. So after i installed Ubuntu and installed everything in "updatemanager", i installed Aircrack,Macchanger. And as i look in "iwconfig" and ifconfig i see the Atheros driver Ath9k and Wlan0. Now my 1st question. Do i have to install madwifi or such for the aircrack to inject?
2:nd I have tried to install madwifi also but when aireplay-ng want to inject ,the whole computer freezes. How do i fix this?....have looked aound google and found that many have the same trouble...
I'm using air-crack to crack into my network for fun. (It's WPA, NOT wep)
I've acquired a network handshake (I think, do I run
Code:
sudo airodump-ng --channel 11 --bssid 00:00:00:00:00:00 -w data mon0 and capture only four packets for WPA keys?)
After that, I need to run the command aircrack-ng -w wordlist capture_file (where wordlist is your dictionary file, and capture_file is a .cap file with a valid WPA handshake) My wordlist is in /home/steaksauce/Documents/Dictionaries/ and the particular file I want to use as a dictionary is lenth10.txt -- I downloaded a dictionary, and added my own passkey to it so I could have my fun
[Code]...
I'm using ubuntu 9.10 and I'm trying to crack my own password with John the Ripper. I've been reading and working at this for a long time and I've not been able to crack my password. I've added a "test" account on my machine with the password "password": For my Unix Password:
Code:
mark@mark-laptop:~/John/john-1.7.3.4/run$ sudo ./unshadow /etc/passwd /etc/shadow > mypasswd
mark@mark-laptop:~/John/john-1.7.3.4/run$ sudo ./john mypasswd
No password hashes loaded
YES I have read the README and the FAQ and for this problem they give the following possible problems:
Q: Why doesn't John load my password file? It says "No password hashes
[Code]...
I've encrypted my root partition with LUKS and cannot remember my password. My main question is this: is it possible to extract the hash (or key; not sure on the correct terminology here) from the LUKS header and run it through a cracker? The hash type is SHA1 and I can remember the characters I used for the password, just not in the correct order (lots of special characters). That being said, given such a small charset, it should be crackable within a reasonable time, correct? Especially if I used a GPU accelerated cracker. What I don't know how to do is go about getting the hash from the LUKS header. Is any of this possible, or am I SOL? Of course, I have physical access to the system so I can boot it into any utilities I may need to.
View 3 Replies View RelatedI would like to have a web site pop-up on the persons laptop that connects to my wifi network. The page will let them know this is my network and give a list of shares on the network. Then click ok to get wireless authentication. Something like you get when you connect to a wireless connection in a hotel. software i can install on my Ubuntu 9.10 server to do this.
View 1 Replies View RelatedI've got an amazon EC2 instance running Natty 11.04. I want to harden this server and make sure it's very secure as I ultimately will be handling sensitive data. I'm wondering what should be in /etc/apt/sources.list. Can anyone comment on these contents? Or, better yet, recommend a good secure sources.list file?
Code:
## Note, this file is written by cloud-init on first boot of an instance
## modifications made here will not survive a re-bundle.
## if you wish to make changes you can:
[code]....
I've got Ubuntu 9.10 running on an old thinkpad with an 800 mhz cpu. It's running wifi through a g rated card and a g rated router. The internet is very slow. I'm thinking of upgrading to an n rated card and router. Or, is the system just too old and nothing is going to help with internet speeds?
View 3 Replies View RelatedI recently installed Ubuntu on my MacBook and it's great. The only problem is the Internet speed... on Mac OS X it is much faster which doesn't surprise me because both have been optimized to run fast.
I was wondering if there was a driver, or similar, that would improve the speed for Ubuntu?
I have read that to improve security in Ubuntu a good fix is to make the /home folder tree non-executable by default. This would mean that malware could not run in the /home tree without changing the setup.Is this a viable change, or is it just icing on the cake, any one any thoughts on this.
View 9 Replies View RelatedI'm trying to crack a password on a pdf document. I have been using pdfcrack from the repositories but when I run the command pdfcrack -f filename I get the error: Encryption not detected (is the document password protected?)
I get the same error if I add the -o or -u option. Does anybody know how to do this? Strangely, I can get into the file just by opening it in foxit in Windows, but when I save it elsewhere it is still password protected, so I need the real password. (Can't print to pdf in foxit in Windows)
I'm trying to understand the entire method of cracking a wireless network using aircrack.I thought the idea is to collect a lot of encrypted packets, and then try to crack these using the fact that the IV's used to encrypt a packet are not always different from each other.ight?ck-ng to be able to crack a WPA with a pre-shared-key.But what is the point of using a dictionary? If you use that, why would you bother collecting packets? Using a dictionary is basically guessing the encryption-key isn't it?
View 1 Replies View RelatedBefore anybody says it, no, I am not doing anything illegal. I have a problem. I have about 50 rar and zip files. Each of them are locked with one of four passwords. I know the passwords, but I don't know which password is for which archive. Since this is a repetitive task that I will have to do again in the future, I want to write a script (or find one) that will try each of the four passwords for all of the .rar or .zip files in a directory.
I believe the technical term for this is "dictionary attack" - however, my dictionary would only contain 4 words. I know some rudimentary Python. Would it be best to use Python for this or would Bash (which I don't know at all) be more suitable. Does anybody know of a script/app that already does this? I am not interested in bruteforce solutions.
I am having trouble with my home network, from one computer to another both using wireless g (Ubuntu 10.04) what transfer rate should I expect/hope for when copying a file from one computer to another? My speed is consistently 220 KBps am I correct in assuming this is pretty bad?
View 1 Replies View RelatedI have a rar file that is password protected and that i forgot the password (no clue at all!). How can i extrar the files on the rar. I'm using ubuntu 10.04.
View 7 Replies View RelatedIs there a way to crack the windows Administrator password in Linux (using the SAM file) WITHOUT resetting it?
Ok so Ive already got Ubuntu 10.10 on a usb bootstick. Chntpw is installed as well. What I'm wondering is are there any programs to crack as in decrypt the SAM file and show the password but not erase it? Most Linux programs Ive come across don't do this. They just reset the password.
I started getting some sort of error when I logged in saying "Could not update ICEauthority file." I tried to solve this problem myself by Googleing around and I ran across a message that said to type the following command if /home is encrypted:
Code:
sudo chomd 700 /home/danny
I did that and when I logged in I noticed that everything in /home was gone! I think it is still there somewhere because there still seems to be about 500gb of hard drive space that something seems to be filling. It must be my old profile, right?
how i can remote access my pc at home from work ? on different pc that has access to INTERNET. what software shall I install on my pc at home ? I want to be able to install software on my pc at home from my work place, my home pc has unbuntu Linux ubuntu 2.6.31-17-generic #54-Ubuntu SMP Thu Dec 10 17:01:44 UTC 2009 x86_64 GNU/Linux
View 9 Replies View RelatedDuring the installation of Ubuntu Karmic, I picked the option that encrypts my home directory.
A few questions:
(1) Shortly after installation, I was asked to run a command to print a key necessary for data recovery from a rescue CD. I didn't run it at the time and am now looking for the command to run. What is it?
(2) I think I read somewhere that this also encrypts swap. Great. Correct me if that's wrong.
(3) If I suspend the machine, is my home directory encrypted? That is, if I have this on a laptop and travel with the suspended laptop and someone steals it, are my data safe, or not?
(4) I assume the weakest point in the system is my relatively short login password (but I think the install tests it and found it okay). Is there a recommendation how long this should be?
I have my home partition encrypted and would like to take the decryption out of the system. Such as when booting the PC it would say it can't find the keys so stop and wait for me to put my usb drive in to continue (reboot and try again). Is there some way to get something like this set up?
View 2 Replies View RelatedI'm using lucid desktop edition, and I need to encrypt my home folder, but I didn't mark that option in the fresh instalation of lucid. I'd like the login screen to ask for the password and then decrypt my files.Is it possible to do without erasing my user?
View 2 Replies View RelatedI installed Ubuntu 10.04 only be dismayed to find ${HOME}/bin FIRST IN THE PATH. I blogged about it at my blog (I sudo an xterm rather than just sudoing to get a different background for the sudo'd xterm): [url]
I agree that some new user should probably not be logging on as root. But if the replacement for 'ls' is in their ${HOME}/bin/ the sudo'd shell inherits the same PATH, umask, and everything else! In general I take a dim view of a sudo only way of doing things. It seems to cause more problems than it solves for disciplined, knowledgeable users. In the case of Ubuntu it caused me to create a /root folder for root to reset the umask back from 077 which is what I use over to 022 which is what root should use. The /root/.profile of course made sure there is no /home/me/bin in the sudo'd PATH. It didn't matter because somebody is not just SETTING the file perms and is instead calculating them based off of modifications to the umask. JUST SET THEM! I ran into a problem with GRUB getting things fouled up because I was having to remove the new kernels and instead of using the command line option (much prefereable) used Synaptic Manager instead: [url]
In fhe case of an infection living in a user's file space you really should want to go in to clean it out as some other user than the user that is infected. Having said that the hackers seem to be going for the whole enchilada right off the bat. A WARNING is in order here. DO NOT USE A ROOT ACCOUNT OR SUDO FOR NORMAL TASKS! But please put ${HOME}/bin last in the PATH or preferably don't even put it in the PATH at all. Let users add it themselves if they want it. Also once hackers figure out that hijacking a sudo tty (from what I just read else-where here I would say several hackers are working on doing that right now - sendmail my ****) is a dandy way of doing things you really will need to provide for ways of cleaning a user infestation out by going at it some other way than through that infected user. A lot of Ubuntu users have only one login account, the one they created when they set the machine up.
I have just installed Ubuntu Jaunty (I do not like Karmic, please don't try to make me upgrade) and after installing all my programs I realized I did not encrypt my home directory.
I know it's very simple to do this during the installation but I can't seem to find an option to do it after it.
Is there a way to do this?
I just installed 9.10 on my laptop and selected the option for home folder encryption. I am running DropBox and placed the DropBox folder on my desktop (meaning it should be encrypted when I am logged out.) So I have two questions:
1) Shouldn't this setup cause my DropBox files on the server to be encrypted? Apparently they are not because they appear as unencrypted text using the DropBox Web interface.
2) If they were encrypted on the server (which doesn't appear to be the case right now), how would it be possible to share them with another client unless the encryption on both clients were set up identically?
I recently installed Ubuntu Linux and did not encrypt the home directory during the install. Now I want to encrypt my home directory, or even better the whole hard drive.
View 2 Replies View RelatedWhile setting up my laptop on a new hard drive (a bad mobo caused writes which pretty much rendered teh old hdd unusable) I was asked if I wanted to encrypt my home partition.
I've been wanting this for several years - even going as far as trying to get a copy of CheckPoint. That's waht my organization uses on all Wintendo laptops and is required.
In any case, I said "yes" and am happily using my laptop with an encrypted home partition. I'm assuming based on this - [URL] - that it is using EncryptFS as the scheme.
if I were to misplace my laptop, how easy would it be for a forensics team to retrieve my data. Let's assume I have a fairly strong passphrase, such as BisZumBitterenEnd3. [URL]
When I installed, I selected the option to encrypt my home folder. I believe this is causing constant crashes now, since error message is user id/password related. Is there a way to remove the encryption?
View 5 Replies View RelatedI had some major problems after the recent Ubuntu upgrade and had to boot from a live cd. I have a separate /home partition, but it was encrypted using the default install encryption in the 9.10 install cd. How can I get to my files so I can back them up?
I have tried this but it did not work: http://ubuntuforums.org/showthread.php?t=1337693
I have a major major issue with an encrypted /home directory. I had used encryption on my home directory when I installed 9.10. However, I had not noticed that I needed to store the automatically generated passphrase anywhere. Now, upon installing 10.04, my home directory would not decrypt. I checked my .encryptfs directory and the wrapped-passphrase file is GONE. I only have the Private.sig files from my 9.10 installation and of course know the login password I binded to the passphrase. I can see my .Private directory with filenames starting with ECRYPTFS_FNEC_ENCRYPTED. Now, my PhD thesis which I have to deliver in 2 weeks is in there. With no backups. How to recover my data. If no 'normal' method would work, is it possible to use a brute force attack and feed it my login password?
View 3 Replies View RelatedI'm using 10.04 with encrypted home dir. I think the behavior below is wrong:
I can log in as root and change user's password. After that the user can log in using new password, which is normal, but it can also decrypt its home dir using the new password, which is dangerous. Assume I lost my computer. This encrypted home dir will not protect my private data because whoever gets the computer can boot it up with a livecd and chroot to change my user's password and then boot up my system and log in using new password.