Wireless Tips & Tools

Cracking WEP

aircrack-ng /path/nameofpcap

Cracking WPA

aircrack-ng /path/nameofpcap  -w /usr/share/wordlists/rockyou.txt

Decrypting traffic once you know the key in Wireshark

Wireshark:  Edit, Preferences, Protocols, IEEE 802.11, Edit, +, WEP/WPA dropdown, double-click Key and paste key in.  Click OK, OK and traffic is decoded.

Decrypting WEP at terminal

#airdecap-ng -w INSERT KEY /path/filename
This saves a new file that is -dec (that is not decrypted)

Decrypting WPA at terminal

#airdecap-ng -e INSERTSSID -p INSERTPASSPHRASE /path/filename
This saves a new file that is -dec (that is not decrypted)

Wireshark Filters:
https://dalewifisec.wordpress.com/2014/04/29/wireshark-802-11-display-filters-2/