How to Crack a WiFi Password Using WiFi Pineapple and Kali

How to Crack a WiFi Password Using WiFi Pineapple and Kali

What Do I Need?

What is a WiFi Pineapple?

WiFi Pineapple by Hak5 has become the new industry standard pentest platform for penetrating WiFi and wired networks. Automate WiFi auditing with scripts and commands easily and efficiently; command the airspace with an interactive recon dashboard, and stay on-target and in-scope with the leading rogue access point suite for advanced man-in-the-middle attacks.

  1. Set Up WiFi Pineapple
    1. I recommend connecting the WiFi Pineapple Nano to a stable USB power supply capable of delivering 9w for initial setup. When connecting to a PC, use the included USB y cable.
    2. Download the latest WiFi Pineapple Nano firmware from the Hak5 Download Center.
    3. Plug the Nano into your computer using the included USB y cable.
    4. Head to the default landing page:
      http://172.16.42.1:1471

    5. Follow the on-screen instructions to complete the setup. This process should only take 5-10 minutes depending on the power of your machine.

  1. Capturing WPA Handshakes
    1. Log into your administration portal.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Select ‘Manage Modules’ option on the left menu.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Select ‘Get Modules from WiFiPineapple.com’.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. There are a lot of modules to pick from and the library is ever increasing in scope. Seriously. Get online and check them out.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. We want to install a clever module named ‘SiteSurvey’. The ‘SiteSurvey’ module allows the tester to view access points transmitting around you, with information such as ssid, mac, encryption method, cipher, authentication method, channel, frequency, and signal quality. This is also where we start capturing data from the access point and, of course, de-authentication of the access point.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Once the ‘SiteSurvey’ module is installed you’ll be able to access it from the left menu, under ‘Modules’.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Click the ‘SiteSurvey’ module and any additionally required dependencies will be installed. It’s recommended to install the module to ‘Internal’ storage. It’s been reported that problems can be experienced with linking if the module dependencies are installed on ‘SD Card’ storage.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Once the dependencies are installed new menu items will appear under the ‘SiteSurvey’ module. Before you can start to scan you need to specify the interface to be used. It’d usually be wlan0 or wlan1. Remember that the Nano has two interfaces.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. To find out what Access Points (AP) are currently nearby we can scan for just AP or AP Clients. For now, let’s just scan only for APs.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Once the nearby APs are discovered we have multiple options available on the far right. The capture will start listening on the channel of the selected AP and will highlight traffic that’s currently being sent and received. The ‘SiteSurvey’ module will listen specifically for ‘handshakes’.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Click the ‘Capture’ button that’s in line with the AP you’re interested in targeting. Starting the capture process.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Next click on the ‘Running Processes’ menu, and you’ll see that airodump-ng is currently running.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Once the capture begins ‘SiteSurvey’ will create a new entry under the ‘Capture’ menu at the bottom of the interface. It updates every 5 seconds to show the number of ‘IVS’ and ‘WPA Handshakes’ that have been captured.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. If handshakes aren’t showing themselves for quite some time or at all, you can attempt to deauthenticate or kick people off that network by sending ‘Deauth’ packets. To do this, click the ‘Deauth’ button in line with the target that you’re scanning.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Once the Deauth process starts you can double-check that it’s running by looking at the ‘Running Processes’ to see that the aireplay-ng is operating.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. Once you’ve acquired the ‘WPA Handshake’ capture, you can stop all of the other currently running processes.
    2. You can now either view, download, or delete the current captures at the bottom of the ‘SiteSurvey’ module. For now, let’s download ‘Capture’ and try to crack the captured hashes from the recorded ‘WPA Handshake’.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

    1. A compressed folder will be downloaded. Once uncompressed, or unzipped, you’ll be left with something that looks a little like the below screenshot. The handshake hashes will be contained in the .cap file.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

  1. Cracking the Hash
    1. Kali Linux contains several native ways of cracking WPA/WPA2 hashes. One of the awesome tools is something called ‘Hashcat’.
    2. To crack a hash using Hashcat we need to convert the captures file to something that Hashcat can understand. There are two ways of doing this.
    1. Once you have your converted .hccapx file downloaded you can then pipe it directly into Hashcat for cracking using mode 2500 using the following command:
    ./hashcat64.exe -m 2500 hash.hccapx

    1. Now, sit back, relax, and wait. This could take some time depending on your computer’s specification.

    How to Crack a Wifi Password Using Wifi Pineapple and Kali

Conclusion

There’s a lot of use cases where this knowledge becomes extremely worthwhile. However, it should always be remembered, with great knowledge comes great responsibility, which means, simply, that just because you know how to do something, you don’t do it just because you can. There’s a lot more detail we could go into with the above how-to; for example, by using custom-built rainbow tables to brute-force the handshake hashes. But whatever way you go about cracking those WiFi passwords, it’s likely to be computationally expensive.

How To Set up a VSFTPD Server on a CentOS 7 VPS or Dedicated Server

Brief Description FTP is usually insecure exposing clear-text passwords, userna
2 min read
Avi Ilinsky
Avi Ilinsky
Hosting Expert

How To Set up a VSFTPD Server on an Ubuntu 16.04 VPS or Dedicated Server

Brief Description FTP data is usually insecure since information (usernames, pa
2 min read
Eliran Ouzan
Eliran Ouzan
Web Designer & Hosting Expert

How to use phpMyAdmin to develop a website (without MySQL experience)

Brief description A web developer who is not well versed into coding websites f
2 min read
Idan Cohen
Idan Cohen
Marketing Expert

How to Install MySQL on a Windows Web Server Running Apache

This tutorial will show you how to install the MySQL database on a Windows serve
3 min read
Michael Levanduski
Michael Levanduski
Expert Hosting Writer & Tester
HostAdvice.com provides professional web hosting reviews fully independent of any other entity. Our reviews are unbiased, honest, and apply the same evaluation standards to all those reviewed. While monetary compensation is received from a few of the companies listed on this site, compensation of services and products have no influence on the direction or conclusions of our reviews. Nor does the compensation influence our rankings for certain host companies. This compensation covers account purchasing costs, testing costs and royalties paid to reviewers.
Click to go to the top of the page
Go To Top