Hello everybody and welcome to this tutorial. Today, I will show you how you
can install aircrack and reaver. So, aircrack is pretty simple. Just type in yum
install
aircrack-ng, and it's gonna pick up the right version by default, so just go
ahead and press enter. In fedora it runs through checks every time, you call yum,
you can pass - c arguments in order not to do that.
It says package aircrack-ng is already installed and latest version. But,
you might be prompted for a question along the way. If you want to
skip that just go ahead and type in -y, that's it. With this command that I
am selecting at the moment, installation will fly through, you won't be prompted
for any questions, and you will have aircrack-ng installed on your system
without any problems. However, reaver is quite a different story.
Reaver cannot be found in Fedora's repositories, and therefore it has to be
downloaded from the net. Now there are lots of places to do this. I have
chosen to download it from Google code, that's basically the safest place from
where you can download it. And let's just go ahead and open up my favorite browser
which is Firefox, you can open whatever you wish,
type in reaver google code. It should pop up, yep, this is it. There we go. Now we
are on the Google code website where we have reaver-wps, you have a description here,
and you have a pro version here. Basically, the difference between the pro
version and the one that we're getting for free is this graphical user
interface. Which, I mean let's face it, if you're a pen tester, or a white hat
hacker, you're not gonna be using that many GUIs. I mean pretty much not
at all. Optimized PIN sequencing, this just means that it's gonna try pins in a
certain order, which is more likely to succeed than the default one, according
to some, but not necessarily true, and integrated
WEP cracking. And as I said, you don't really need WEP. You're not gonna be able
to find it these days pretty much anywhere. If you do, as I said before,
those people don't deserve to have WiFi. It's basically open
WiFi regardless of what sort of a password you put in. Make sure you're
not from those people, I mean fine, okay, somebody's gonna be able to
connect your network and all that, but it opens up a route for a lot
worse activity, for something more malicious. Let's put it so they'll be
able to reroute your traffic, and do stuff of a kind, and sniff it. Not a good
idea, just switch to WPA or WPA2. Anyway,
I'm gonna go ahead and click on downloads in the upper left corner, and
there are different versions here that can be downloaded. I mean there
are some bug fixes, there are no fundamental differences in the way that
Reaver works in between these versions, but there are bug fixes, definitely, and
that is very nice. It is maintained, the package there's support for it, and so on.
So just go ahead and click on reaver 1.4.tar.gz, and it says reaver.tar.gz here,
file description, etc. This is a checksum, you can use this in order to verify is
your file intact, but I'm not gonna do that now. I'm just gonna go ahead and
download it. So once it is downloaded you can go ahead and open up the folder in
which it actually exists, and I have a lot of things here. Where is it, where is
it, here we go. So it says I have different versions that I have
downloaded from different sites, but if you find this package that I am
selecting for you at the moment, it says Reaver 1.4 FC20, the letters are pretty
small and this is maximum that I can zoom it in,
don't download it. It it doesn't work that well at all. It tends to break and
the .rpm extension doesn't work quite as you would expect it to work. Just
download it from Google code and compile it from source. There's no reason why not
to do it, especially when you have me showing you in detail how to do it.
So just go ahead and double click on this file, you can extract it
through a GUI method, it's far simpler. You can also extract it
through the terminal, but I'm just gonna go ahead and use GUI for this occasion.
This is one of the advantages of Linux over Windows. By default it will be able
to unpack pretty much anything zip, tar, winrar, whatever, it's going to be
able to unpack it, no problems, which is fantastic.
No extra installation needed, this is all installed by default. So let's just go
ahead and click on extract. Now where do I want to extract? Let's say to desktop because I'm
gonna delete it anyway, as I already do have it installed. So
just go ahead and press OK, and right, give me desktop. Sorry for this. OK. Yeah,
I've just issued, I just told it to do it twice.
Oh, well. Apply to all, override, we're not gonna lose a lot of time there as
the extraction process is relatively fast. OK, so, let's just go
back to our terminal, navigate over to desktop,
and I imagine I have a lot of things there. Nope, it's not this
one. OK, so cd /home/Chronic/Desktop, enter, ls, and do I have it here? Yep, there
we go. So clear, let me just show you that I
do in fact have it, ll. It's much neater if I do it like this,
and there we go, reaver-1.4. Let's navigate over to that folder, reaver-1.4,
clear the screen, list the contents of
the directory. Go to docs first and let's just go ahead and see what
is there. And you might think that I am some sort of an expert, or something
of a kind, and that I just do these things out of my head...
no. People create readme files for a reason. They are there to be read because
the developer has left specific instructions on how to do something. So
just go ahead and cat it. Excellent! So the following are Reaver source
files. It has the description of what is located in each one of these files. So you
have 80211.c functions for reading, sending, and parsing 802.11
management frames. 802 11 is a standard, as I said before, but look at this, look
at this. The developer has actually, well useless things for the time being, but
the developer has actually left the entire installation process here. You
have every single command that you need to run, explained in detail what it does,
and how you can type it in and execute it. This is wonderful! And that's why I
say, when you download something, when you unzip it, just go ahead and find the
readme file, it's there for a reason. People do tend to leave instructions
there on how to do something, and they've most likely encountered the same
problems that you might have encountered, so you can even see possible solutions.
Anyway, you can check this inscription out, not an inscription but
the text, Reaver is only supported, and only supported on Linux platforms.
It requires libpcap, this libsqlite3,
and one more, can't really pronounce this, and can be built and installed by
running the following command. So, execute the configuration script, make, make
install. That's it. And it even tells you how to actually uninstall it. So, they're
there for a reason. Anyway, ls, of course you cannot run
the configuration file from here, you need to reverse course, and go to source
from, yep, src. Let's see what is in there, there we
go. We have configure, and you can see by default here it's executable.
If I just give you a longer listing, configure, there you go. It has an x
permission here, here, and here. So the user has it, the group has it as well.
Anyway, type in ./configure. So now it's checking for
stuff, it has its dependencies without which it cannot function. Type in
make, there we go, it's running through. So I I didn't do anything out of
my head here. I just went on the web, I found the safest place I can find to
download the code from, and I'm compiling it here as the creator, as the developer
of the code instructed me to do it. And the instructions aren't complicated, just
three commands, and the final command is make install. Now it's gonna give me a
lot of errors here, well not errors but warnings primarily, because I already
have, I already have it installed. And see here it says rm, I need to
clear this out, and then be able to install this. But that's not
gonna happen, primarily because I do have reaver installed. So let's just go ahead
and check one more time if there is anything else that we've
left out, if I can reach it down below. Yep, there we go. So, no, I haven't left
anything out. Basically, the last command for you will run, for me it won't,
primarily because I already have reaver installed on my system. If
there are any problems feel free to post it in the question section. I will be
more than happy to help you out. Let's just go ahead and clear this out. Let's
test it, let's see. So type in reaver - -help, excellent!
It is installed, it is functional, it is responsive to our commands, and here is
the syntax for reaver. This is the basic syntax, of course you can pass all
of these arguments to it, and there are quite a lot of them. Basically, what you
say is - i for network interface, and - b for BSSID, or for the MAC address
put quite simply. For the MAC address here you have it, this is just a sample
MAC address that has been generically placed here, and of course we have even
for Reaver - vv for double verbose output, which is fantastic! I'll just go ahead
and clear the screen. That was a way in which you could have installed
aircrack and Reaver in Linux. But just in case you are a Windows user, I'll show you how
to do it in Windows. Until then, I bid you farewell.