If you are planning to pentest a WPA/WPA2 network (with No WPS), I have two words for you: Good. Luck.

Wpa Handshake Capture
Crack Wpa Handshake online, free
Online Wpa Handshake Cracker

In all my experiments with penetration testing, I have found dictionary attacks on WPA/WPA2 handshakes to be the most annoying and futile exercises. This is because:

Crack Wpa Handshake online, free Wpa2 Handshake Explained This is a community effort to study and improve security of WPA protected WiFi networks.You can contribute to WPA security research - the more handshakes you upload, the morestats, and the more we'll understand how feasible WPA cracking is in practice. Crack Wpa Handshake online, free Wpa2 Handshake Explained This is a community effort to study and improve security of WPA protected WiFi networks.You can contribute to WPA security research - the more handshakes you upload, the morestats, and the more we'll understand how feasible WPA cracking. WPA2 Cracking Pause/resume in Hashcat (One of the best features) This feature can be used anywhere in Hashcat. It isn’t just limited to WPA2 cracking. Even if you are cracking md5, SHA1, OSX, wordpress hashes. As soon as the process is in running state you can pause/resume the process at any moment.

going through each word in a dictionary file containing millions of words is time-consuming.
success is not guaranteed (the passphrase may not be present in your dictionary).

During my experiments in India, the WiFi passphrases are usually a combination of Hindi and English words or a Hindu name which are, of course, not present in any dictionary that I download no matter how exhaustive it promises to be.

If you are still brave enough to try a dictionary attack on WPA handshake, here’s the procedure.

UPDATE: I have also posted a video on how capture and crack a WPA hanshake on my YouTube channel.

How to launch a Dictionary Attack on WPA Handshake

You might get lucky and your nearest WiFi password may be based on a common dictionary word or number sequence. In such a case, you may succeed with a dictionary attack.

Step 1: Enable monitor mode on wireless interface

This will start the monitor mode.

Step 2: Take note of the nearest WiFi networks.

Step 3: Take note of the channel of your target network, dump packets from that channel and save them to a local capture file.

Step 4: Wait for WPA handshake capture

At this point, you can use ‘aireplay-ng’ to de-authenticate an associated legitimate client from the network. The point is that as he/she will authenticate again shortly, we will capture the handshake without having to wait too long:

If you don’t know the MAC of any associated client, simply ‘broadcast’ a ‘deauth’ to all clients:

Step 5: After you grab a WPA handshake comes the hard part of brute forcing using a dictionary. Use ‘aircrack-ng’ for this:

Now say your prayers and hope the passphrase is present in the dictionary you chose.

You can also use online distributed WPA/WPA2 handshake cracking tool on this website:

Note that if the Access Point has WPS Enabled, it becomes easier to recover the WPA / WPA2 passphrase as there are only 11,000 possible combinations needed to brute force the WPS PIN due to an implementation flaw.

Wpa Handshake Capture

Disclaimer: This is for experimentation or authorized penetration testing purposes only.

Introduction

WiFiBroot is an open-source Wi-Fi cracking tool that has the ability to hack WPA/WPA2 based Wi-Fi networks. The tool is multipurpose and can be used to perform a number of attacks on a wireless network. Since most wireless networks depend on WPA and WPA2 security authentication this tool has proved to be very helpful. It is written in python and has extensive features which make it very effective in bypassing WPA/WPA2.

If you want to learn more about wireless security protocols, check out Wireless Security Protocols: WEP, WPA, WPA2 and WPA.

Crack Wpa Handshake online, free

WiFiBroot: Wi-Fi Cracking Tool for WPA/WPA2 [Handshake, PMKID, Cracking, EAPOL, Deauthentication]

As all-in-one Wi-Fi cracking tool WiFiBroot can be used to perform both online and offline hacking attacks, depending on Scapy, a packet manipulation python library. It provides 4 modes from which you can choose from, depending on the mode chosen you can crack the saved hashes when offline or deploy a real-time online attack. The tool also uses these modes to identify the type of attack that is being performed.

WiFiBroot is known to perform de-authentication, PMKID, handshake, and EAPOLS attacks. Because the tool collects information before launching an attack, all the attacks are accomplished within a very short time.

Features:

Can work on Verbose mode
Has wireless sniffer(which scans for any wireless network that is within range)
Can dissociate frames automatically
Has a directory for storing handshakes
Automatically detects EAPOL
Fast WPA and WPA2 cracking
Offline Cracking

Supported Platforms:

Linux

Dependencies:

Scapy <=2.4.0 (recommended)

WiFiBroot Install

Since this tool relies on scapy it is important that you install Scapy first before starting the installation process. To install scapy run the the following command:

After scapy is installed you can proceed to install WiFiBroot by cloning the respo:

Usage

To get a list of available modes and options, use -h:

Note: Each mode has its own options/filters. See example below:

Handshake

Online Wpa Handshake Cracker

Example: Capture 4-way handshake and crack MIC code

Example: Capture and Crack PMKID

For more details and info, click on the “download” button below.

Crack Wpa Handshake Online