Hack wifi password – Unlimited Streaming with no data usage

Haven’t you ever wanted to hack wifi password?

Stream 4K videos without data consumption?

It’s possible! Anyone can crack the standard encryption of wireless networks.

I’ll show you two ways to get free internet.

Let’s start!

Basics: How does wifi work?

Wlan (Wireless Local Area Network) means wireless local network.

You are usually connected to the internet with a copper cable with a power pulse. Your router uses a wifi antenna to convert the electrical signals into electromagnetic waves. These waves propagate across the room at the speed of light, so a wifi antenna on your smartphone and laptop can pick up the signals.

Wlan and Wi-Fi are not the same thing! Every ignorant person uses these terms synonymously, although there is no connection:

• Wi-Fi is the name of the certification by the Wi-Fi Alliance for the IEEE standards
• Wlan is the radio network with electromagnetic radiation

Rather say “I need wifi! I want to stream!” – not “I need wlan?!”?

Steffen Lippke

Who determines the wifi? The standards

Over the course of time, the standardization institution IEEE has reissued the wifi standards. With each update, higher speeds are available:

The standards do not primarily describe the encryption, but the frequencies, capacities and bandwidth of the wifi transmission.

1. IEEE 802.11bgn or Wlan bgn offers you a 2.4 gigahertz band (2.4 billion oscillations per second) on up to 14 channels. Each channel has a bandwidth of 22 to 50 MHz (50 million oscillations).
   You can use it to transmit up to 4 times 4K stream at 600 net Mbps.
2. IEEE 802.11ac or Wlan AC transmits on the 5.2 gigahertz band with from 36 to 40 channels. Each channel transmits with a bandwidth of 20 – 160 megahertz.
3. IEEE 802.11ax or Wlan 6 (E) transmits on a 5.2 gigahertz band. A new electromagnetic signal modelling based on the OFDMA method can transmit 10 bits instead of 8. This gives you 25 % more bits per second. The router can transmit on 256 different channels.

Most routers you find today use 802.11 g or n and are WPA2 encrypted. If you have booked a 1 gigabit line, only a fraction of the data will arrive via your WLAN. Even if your router has WLAN AC or AX, the end device must also support the frequencies. Most users in the village and in the city have routers that can theoretically process 100 times that amount, while the connections in the internet development country of Germany only deliver a fraction.

Insecure encryption

We want to attack the encryption of the wifi! The operator of a Wlan signal can only protect the signal from eavesdropping to a limited extent by walls and fences.

The encryption of the radio signals used to be done with Wired Equivalent Privacy (WEP). Rons Code 4 (RC4) was supposed to guarantee a secure network by means of stream encryption. Today, this method is considered obsolete. If used incorrectly (without warm-up time), RC4 is easy to crack.

Criminals leverage the WEP standard with a known-plaintext attack.

The WEPplus standard makes it very difficult for criminals to find the key pairs – but cannot prevent a hack.

In 2024, WAP3 is considered the most secure standard for wireless signals. The router manufacturers implement the encryption standard with the Advanced Encryption Standard (AES). The standard is still susceptible to side channel attacks, but these are somewhat unrealistic.

Practice Tutorial

If you want to break into wlans, you must only crack your own or by someone who has given you written permission. This work is usually done by pentesters.

Hardware and software requirements

Hardware: Not every WLAN antenna of every laptop can crack a WLAN. Use the following:

• Alfa Network AWUS036ACH 2.4 GHz and 5 GHz with Realtek RTL8812AU chipset
• TP-Link N150 TL-WN722N (V. 1.x) 2.4 GH with the chipset Atheros AR9271
• Alfa Network AWUS036NHA 2.4 GHz with chipset Atheros AR9271

Operating system: Hackers like to use the Linux distribution Kali Linux. Kali Linux is an operating system like Windows, which is optimized for hackers. All tools for hacking are already pre-installed and configured. You can use a virtual machine to run Kali Linux on your computer without having to do without Windows or Mac. Use here for the Kali Linux tutorial!

Software: In this tutorial I show you two ways how you can easily penetrate a foreign wifi. For this I use Airgeddon on Linux and Aircrack Ng with Windows.

1. Way: Cracking a wlan with Airgeddon (Linux)

You can find the software on Github https://github.com/v1s1t0r1sh3r3/airgeddon

You may only run the following tutorial on your own router or with permission on third party networks (more on Ethical Hacking). Once you have successfully installed Kali Linux, wget and 7z / zip, follow the steps below:

1. Download the installation files
   wget https://github.com/v1s1t0r1sh3r3/airgeddon/archive/master.zip
2. Extract the files from the ZIP file with
   unzip master.zip
3. Go to the folder
   cd airgeddon-master
4. Call the programme with your root rights
   sudo bash airgeddon.sh
   The Airgeddon software is installed and ready to crack wlans.
5. First select option 5 and then option 4 to get a list of all wlans
6. Search the Data column for numbers above 0 (takes 20 – 30s)
7. End the search process by pressing Ctrl C to return to the main menu
8. Select option 5 Capture Handshake to fish the encrypted WPA password file out of the air.
9. Select option 1 to perform a mini DOS attack on the router. This will force a connected device off the wifi (perform this step only on your own networks)
10. Wait for the WPA handshake (depending on the router, this may take a little longer)
11. Save the handshake locally on your computer.
12. If you want, you don’t have to be near the wifi network any more and should sit down at a powerful computer (with a strong GPU).
13. Go back to the main menu with Ctrl C
14. Select option 6 for offline cracking
15. Go to your browser and download a large password list (130 MB)
16. Select option 1 for cracking the WPA handshake
17. Specify the parameters that the programme asks for.
18. Start the cracking process.
    

After a few seconds, the password should be cracked if it is a weak password. If the password is more complex, cracking may take hours. This method does not guarantee 100 per cent success in cracking. The hacker assumes that most wifi owners use simple passwords because the use of simple passwords is more comfortable in everyday life.

Steffen Lippke

2. Way: This is how it works with Aircrack-ng (Windows)

To find out the wifi password, you need a computer or laptop with a compatible wifi module or an external antenna.

Possible wifi modules are made by Netgear, Ubiquiti, Linksys and D-Link.

To check your module for compatibility, you have to find out the chipset of your module from the component descriptions.

Steffen Lippke

1. Open the
   System Information > Components > Network > Adapter
   in Windows
   1. Search for the chipset or the name of your wlan card
   2. Volunteers provide the names of the WLAN module components in special wikis for the individual laptop manufacturers
2. Google “chipset <PRODUKTNAME>” to determine the chipset
3. Run the injection test with the Aircrack-ng GUI

You will find a database of compatible cards under the Madwifi project.

The result of my search is the Intel Dual Band Wireless-AC 8260, 2×2 802.11a/b/g/n/ac and an Intel Tri-Band Wireless-AC 18260, 2×2, 802.11a/b/g/n/ac and WiGig (802.11ad) (optional, WiGig and LTE are mutually exclusive) – unfortunately not compatible.

External wifi antennas

Alternatively, use an external antenna with the following chipsets:

• Atheros AR9271 chipset
• Ralink RT3070
• Realtek RTL8187L
• Devices: TP-LINK TP-WN722N / TP-WN722NC

Remember: Aircrack-ng usually runs on Linux. With Windows, the hackers can only listen to packets, but not inject packets into the wifi. –> Install Kali Linux! Linux is more freely configurable and modifiable.

Steffen Lippke

Step-by-step procedure

Aircrack-ng does not crack the encryption, but tries to fish the pre-shared wlan pair keys. The technology is called Pre shared Key (PSK). The wifi tool works with statistical methods to get the result faster.

With Aircrack-ng you can go two ways:

• Active: De-authenticate the messages of an existing transmitting wifi compatible device
• Passive: Wait for a wifi device to authenticate to the wifi router (advantage no injections needed and the task is possible with Windows)

This guide is based on the Aircrack-ng guide.

1. Download the latest version of Aircrack-ng. The main website does not work, so download it from Filehippo.
2. Unzip the file
3. Go into the folder aircrack-ng-1.X.X-win > aircrack-ng-1.X.X-win > bin >
4. Start the GUI with the .exe Aircrack-ng GUI.exe

You need the following steps for the passive strategy:

1. Open PowerShell with admin rights
2. Go with cd into
   aircrack-ng-1.X.X-win > aircrack-ng-1.X.X-win > bin
3. Start airmon-ng with
   .airmon-ng
   to collect the PSK.

Wlan Security – Protection from Criminals – Encrypt!

At the end of the tutorial, I would like to give you tips on how to protect yourself against wifi hacking. Let’s start with the known vulnerabilities in wireless communication.

Vulnerabilities in Wlan Standards

With the Dragonblood vulnerabilities, two IT security experts point out problems with the WPA3 standard. This vulnerability is a side-channel attack and in most cases difficult to implement. WPA-3 is still the recommended standard in 2020, according to CompTIA experts.

5 Measures for secure wifi

1. Use the WPA3 standard with AES encryption. If you have an IT affinity, WPA-3 for Enterprise is worthwhile. Use encrypted communication with HTTPs or a VPN to be on the safe side.
2. Use a 63-digit password with a high entropy, so that the probability of cracking the password is close to zero (private use). Make up a password phrase: “I’m totally addicted to cat chips!” – written out in full. You can then share the password via QR code.
3. Use a MAC filter and only allow the devices that you use in the household. The router blocks all other devices immediately when the MAC filter is activated. MAC spoofing is possible at any time.
4. Update your router regularly and apply the security patches promptly. Use autoupdates!
5. Use LAN instead of Wlan. LAN is much faster, you get a stable connection with very low latency / jitter (good for gaming and conferences) and no one can “simply” eavesdrop on you.