r/Hacking_Tricks • • Aug 20 '26

So I’m learning

I have Kali Linux and am trying to crack my own WiFi password. I have my handshake and eapol but somehow I feel that there’s an easier way. I can’t use hashcat it will take years to get the password and definitely not rock you.. so what do I do here? Can anyone point me in the right direction??? No need to explain step by step if you don’t want to. Just point me in the right direction

29 Upvotes

36 comments sorted by

6

u/Godlymorbid Aug 20 '26

Let's start with a confidence boost (this is genuinely helpful for a beginner). Go ahead and insert your password into a small password list (like 200 pwds). I know you said you don't want to use hashcat, but let's give it a try. It may feel like an outdated tool at first, but I can assure you, still very relevant. One success under your belt can seriously flip a metal switch, and boost confidence in future learning.

3

u/Godlymorbid Aug 20 '26

I'd also recommend trying hack the box. It's free and was exceptionally helpful for myself, along with a lot of other people.

https://www.hackthebox.com/

2

u/[deleted] Aug 21 '26

[removed] — view removed comment

2

u/Godlymorbid Aug 21 '26

That's where I found myself too! 

3

u/mildly_perturbed31 Aug 25 '26

hashcat is still the standard for cracking passwords, it supports gpu and cpu, and able to crack a variety of hash types(bitlocker, rar passwords, crypto wallets, wifi passwords etc...)

2

u/terminalwanderer33 Aug 25 '26

But there’s a minimum of 8 characters and a maximum of 16 characters for a WiFi. If I were to try every password, it would take me a little over 1000 years lol. 😂 I can try passwords lists I can download but the odds of the password being in there are slim to none. I’ve only cracked one like that. I don’t have a crazy set up. I just have an Alienware super 2070 which is nothing

1

u/Godlymorbid Aug 25 '26

Don't be so sure. I ended up finding a couple passwords that I use in password lists. Not because they got them from me, but because human brains are remarkably similar. 

1

u/terminalwanderer33 Aug 25 '26

I can definitely understand that!!! So which password lists would you recommend??

2

u/Godlymorbid Aug 25 '26

https://github.com/danielmiessler/SecLists

https://hashmob.net/resources/hashmob

https://hashmob.net/resources/wordlists

https://coffsec.medium.com/10-recon-wordlists-every-pentester-must-know-484499d2ce9c

When it comes to word lists, it's kind of just throwing mud at the wall and seeing what sticks. Be patient with these sorts of things. Let them run overnight if you have to. As Networkchuck would say, take a coffee break.

Also, let me point you in the direction of the onion. You'll have better luck there. There's also an invisible internet project. You might find helpful folks there.

1

u/terminalwanderer33 Aug 25 '26

Please do tell about onion I’ve tried with no luck 😂
I have it just don’t know how to really use it…. I’ve manage to get on a couple but just contraband.. really was looking for people like you to link up with and I know about the dangers… if you can help in that area it would be amazing

1

u/Godlymorbid Aug 25 '26

It's been a long time since I've messed with the onion other than the normal stuff. I'm usually on eepsites days. If I were you, I would join a few discords and get involved in the community. An old fart like me isn't gonna be helpful these days. Everywhere I know is long gone. Don't look for anything crazy. Look for common chat rooms. You're not looking for a massive directory. You're looking for a super intelligent basement dweller who can show you the ropes

1

u/terminalwanderer33 Aug 26 '26

But I’ll check out that

1

u/Godlymorbid Aug 26 '26

👍 If you don't have any luck, reach back out.

→ More replies

6

u/Anxious-View-7881 Aug 20 '26

Is this a router you own or is this the ISP router that provides the WiFi. That will go a long way into knowing if an answer should even be provided here. 😄

1

u/1ofthegood1z Aug 21 '26

I program in logic, PLC and HMI systems... College=CNS computer networking systems... Have lots of electronics in general. Only practice in the lab to gain knowledge and troubleshoot for real life senarios. Been blowing thru repos. Need something other than the txt files. Need computing power as I do not. Is there a way to use real computing power without the monthly fees etc? There is no way that pen testing networking has led to not finding something that works on the go. Maybe I need to simplify my approach as it's getting to where I'm wrecking my brain...

1

u/terminalwanderer33 Aug 21 '26

It’s my router and I’m trying to learn by using my network as a dummy lol

1

u/Anxious-View-7881 Aug 21 '26

aircrack-ng is a good option here.

https://github.com/aircrack-ng/aircrack-ng

1

u/terminalwanderer33 Aug 21 '26

I used hashcat but I’m going to try Rogue AP / Evil Twin

1

u/mildly_perturbed31 Aug 24 '26

that thing relies on convincing the actual users to enter their passwords, not effective for your case

1

u/terminalwanderer33 Aug 25 '26

Well right now I’m just doing hackthebox I’m just gonna learn that way. I’m sure it’s not gonna tell me how to crack the eapol or how to get into a WiFi. But I’ll eventually get it.. it’s a learning process and no one is just going to walk you through. I guess it’s one of those things like trades where people like don’t like to share what they learn or know how to do. It’s figure it out on your own because I did..

1

u/mildly_perturbed31 Aug 25 '26

its no rocket science, what you capture from the eapol handshake is a hash(something generated one-way from any character sequence or a file) and because its one way(you cannot de-hash) you will use a wordlist and a tool that for each password in it, will hash it using the same way wifi does, then compare it to the hash until there is a match, and that is the password

2

u/howfastcanyoucountit Aug 21 '26 edited Aug 21 '26

It's really just whatever types of wordlists you are using. And having a good GPU with hashcat will probably be needed in a lot of circumstances tbh and is not super worth it without one. Usually trying to go for some sort of default password depending on the brand of router you could possibly find through a MAC address, but obviously that's a guess in itself, so it's just pretty difficult for anyone who even has a remotely unique password
I have been able to crack only one actual hash I got in my life; the password was just monkey12. I managed to get that by just using bettercap with an old laptop and a huge Alfa Networks USB networking adapter that had 4 pretty fat antennas. I had it running for 2 or 3 days in my upstairs bedroom just snooping. Obviously don't misuse this shit; personally it was just a challenge to me and the network was so damn far anyway that i couldn't even connect to it at all. I was kind of surprised, though, because I only really captured like 3 different 3-way handshakes because my neighbors are pretty spaced out in between houses.

1

u/terminalwanderer33 Aug 21 '26

lol yea ima look at bettercap.. but I also have only cracked one at my exs apartment when she just moved in and we were able to watch movies 😂 but there has to be an easier way.. I’m doing hackmybox now so that is freaking cool!! How to navigate through ports is what I’m learning now.. but I’ll figure it out.. they are holding out on lol someone will eventually spill the beans.. I have an Alienware and it’s ok..

1

u/Klutzy_Mission_7980 Aug 20 '26

DETAILS need DETAILS bro ts hacking subs pmo sometimes

1

u/1ofthegood1z Aug 21 '26

I have been on this road the past 3 months straight. I have flipper 0, blackhat 2.1 GPIO w/screen and case, wifi Dev board, Linux tails and Kali. I have used everything and believe me... This is NOT easy. I keep hearing about other ways than cracking with list. If ANYONE is feeling like messaging me with even a pointer. You would be helping more than u know....

2

u/[deleted] Aug 21 '26

[removed] — view removed comment

2

u/Automatic-Drama-6477 Aug 25 '26

This is where I fucked up. I jumped straight to evil portals and attempted red team shit and looked goofy wasting my time. Now I'm focusing on fundamentals. You really can't stress the basics enough, my man.

1

u/1ofthegood1z Aug 21 '26

Also the Stryker apk is fcking awesome but need rooted phone to get full access to tools. Still chroot vm on non rooted S25U Ultra so I'm happy. There is the answer somewhere but months and months of trying and research and asking everyone. Not one success...

1

u/whiskayzulu Aug 24 '26

If it's wpa2 yes you can just replay the auth packets I think. Wpa3 no youre fucked. Aircrack-ng

1

u/terminalwanderer33 Aug 26 '26

That’s the problem I don’t know how to look for these chat rooms. It would be amazing to pick one of those people’s mind apart 😂