One of the better basic wordlists in Kali is /usr/share/wordlists/rockyou.txt.gz. To unzip simply run gzip -d /usr/share/wordlists/rockyou.txt.gz. Be sure to add 'known weak' passwords that are used by the organization you are testing. I like to add these 'additional' custom passwords to the top so they are tested first. First, rockyou wordlist was added in the backtrack and later it was added in Kali Linux 1. This is the first version of kali Linux launched in 2013. I have eyes on Kali Linux from the born of it. By the way, using Kali Linux awesome. You can create your own dictionary during a password cracking attack.

Welcome to HackingVision, in this tutorial we will demonstrate how to crack password hashes in Kali Linux with the Crackstation Wordlists.

Hardware

In this tutorial, we are using GTX 1080 8GB and Ryzen 5 1600 CPU in this tutorial you can use whatever NVIDIA GPU that you like. By using both CPU and GPU in Hashcat we can obtain better password hash rates this allows us to crack password hashes faster and more conveniently than we typically could than just using a CPU.

If you’re using a GPU make sure you have the NVIDIA drivers for your GPU installed. If you don’t have access to any NVIDIA GPU a strong CPU is recommended the wordlist we are going to be using is 15 GiB uncompressed Hashcat will take a little while longer if your de-hashing passwords hashes without a GPU. Hash rates will depend on the speed of your computer’s CPU the faster your CPU the better, If you have a fast GPU you will be able to crack passwords much quicker. There are many factors that come into play when it comes to password cracking such as the size of the wordlist, the size of the target hash file and the speed of your CPU or GPU. For example, Dehashing passwords for certain hashing algorithms can be slower than other hashing algorithms. If you are cracking a lot of large password hash lists an SSD is recommended in this guide we are using a standard 1TB HDD currently all of my SSD’s are occupied by other operating systems.

If you have limited bandwidth we can use a Smaller Wordlist that is 684MiB uncompressed but does not include as many passwords or alternatively we can use a wordlist that is included by default in Kali Linux.

Hashes

In this tutorial, we will be de-hashing SHA1 hashes. You can use sha1-online to encrypt SHA1 password hashes. Let’s create some hashes to test with Hashcat.

Create some password hashes using sha1-online and save the password hashes hashed by sha1-online into a text file. I will hash 20 passwords and save them in a text file. Create your own password hash list or you can use the password hashes below. I will be using the nano text editor in this tutorial.

Open up a terminal and enter the command. This command will create a new text document called sha1.txt enter your password hashes add each hash byline. You can copy the password hashes below if you don’t want to hash your own password hashes.

Once you have finished adding your password hashes in nano you can write the file by using keys CTRL+O after changes have been written use CTRL+X to exit the nano text editor.

The passwords that we hashed should be the following when decrypted let’s see if Hashcat can find any of our password hashes.

Download Wordlist

Download Wordlists:https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm

In this tutorial, we will be using Crackstation.txt.gz wordlist. You can choose whatever wordlist you want to use you don’t have to use the crackstation ones that we have included in this tutorial to use Hashcat. We recommend these wordlists as they include lots of leaked real human passwords if you don’t know what the Crackstation wordlists are there the results of Crackstation cracking LinkedIn’s and eHarmony’s password hash leaks with the list.

The wordlist we use using in this tutorial is 4.2GB Compressed and 15 GiB uncompressed (https://crackstation.net/files/crackstation.txt.gz) if you have limited bandwidth use Crackstation Smaller Wordlist (Human Passwords Only) that is 247MiB compressed and 684MiB uncompressed.

Default wordlists in Kali Linux are stored in /usr/share/wordlists

Uncompressing Crackstation Wordlist

To uncompress .txt.gz files we can use gunzip install gzip by opening a terminal and entering the following command. gunzip will uncompress wordlists within the same directory as it’s run from.

Now that gzip is installed we can uncompress the wordlists we downloaded from Crackstaion using the following command.

To uncompress the smaller real human wordlist from crackstation you can use the following command.

Now that we have uncompressed the Crackstation wordlists we can now use them in Hashcat.

Hashcat

Its time to run Hashcat against our target SHA1 hashes. Let’s see what hashes we can dehash.

Open a terminal

cd into the directory that your hash list is stored in edit the following command -m 100 is hash type SHA1 add the location of your hash list and wordlist.

My hash list is called sha1.txt the output of my passwords.txt file is the same directory as sha1.txt I am using the crackstation wordlist from /usr/share/wordlists/crackstation.txt that I copied to /usr/share/wordlists/ earlier. Your downloaded wordlist is most likely stored and uncompressed in Downloads, in that case, we would add /Downloads/crackstation.txt make sure that you use using the uncompressed wordlist and not the compressed .txt.gz version.

Hashcat found 12/20 password hashes that we gave it using the crackstation.txt wordlist.

Let’s see what passwords Hashcat was able to crack. We can list the contents of the passwords.txt file containing the passwords that Hashcat was able to de-hash using the cat command in Linux.

From the directory that your passwords.txt file is saved in use the following command to list the password words that Hashcat was able to recover. cat is a standard Unix utility that reads files sequentially, writing them to standard output.

Hello Friends Today I Am Going to Show You How To Hack Wifi Without Using Wordlist Or You Can Call it as Hacking Wifi Password Using Reaver Method

THIS IS FOR EDUCATIONAL PURPOSE ONLY, I AM NOT RESPONSIBLE FOR ANY ILLEGAL ACTIVITIES DONE BY VISITORS, THIS IS FOR ETHICAL PURPOSE ONLY

THIS IS FOR EDUCATIONAL PURPOSE ONLY, I AM NOT RESPONSIBLE FOR ANY ILLEGAL ACTIVITIES DONE BY VISITORS, THIS IS FOR ETHICAL PURPOSE ONLY

Requirements:

Kali Linux – Operation System in Your System or In Your Flash Disk (USB Pendrive)
4GB or Above Pendrive
Kali Live Boot
Wifi networks nearby with Excellent Signal to make hacking faster

1) Click Here to download KaliLinux

2) Click Here to See How To Make Kali USB Live Boot

Click Here To Learn All Methods And Types of Wifi Hacking

Limitations:

1) Can hack only WPS Enabled Routers

2) Cannot hack WPS Turned ON Routers

What is WPS: :

WPS Means Wifi Protected System, This Is a Different Type of security system which is enabled for some routers, it is the best method to hack wifi , But it does have Limitations, they are some routers with WPS enabled are secured by another security called “AP RATE LIMITING” if you see this just leave that network and go to another network.

1) Till now no one found any method to break that security system, may be in my later posts I will try to post how to break that security system

2) Wpa And Wpa2 Networks can only be hacked using wordlist, Which uses Brute Force Attack in which probability of getting password is only 35%

3) But In Reaver Method Probability is 100% (Only If AP Rate Limiting Is Not Available)

4) So it is better to go for reaver method if wps is available

5) It consumes less time than Brute Force Attack Or Dictionary Attack

6) If the network that you want to hack has an excellent signal and if your system is in good condition, then the hack completes in 5 – 18 Hours.

How To Hack Wifi WPA/WPA2 – WPS Enabled Netork without Using Wordlist

Step 1: Open Terminal and type “ifconfig” (Optional)

Step 2: Here I will be selecting wlan0 as my interface

And the Next Command Is “airmon-ng start wlan0”

Step 3: Now you can see the available supplicants and the interfaces

Step 4: There are two options from here on, you can either kill the supplicants or move on with the other command.

1) By Using Kill Command and Stopping the Wlan0 Supplicants

2) By Using the Command “airodump-ng mon0” instead of kill and the next

command is “airodu

Kali Linux Password Wordlist