Ödev - 3

Breaking WEP

WEP, the Wired Equivalent Privacy protocol, is rather insecure and can be broken within minutes. Your task for this assignment is to locate and break a given WEP network in a group of up to 2 people. Find yourself a group members and work as a team. You can also do the assignment alone, if you prefer.

WEP can be broken very fast, which has been shown in this paper. This attack has been implemented in aircrack-ng, which is freely available. Your task is to break the network "bungee" located at yard 2 of the TU main building (GPS: N 48 11.890 E 16 22.185). It is reachable in the ZID room "KP" (http://www.zid.tuwien.ac.at/index.php?id=835), the Nelsons and of course in the yard. We recommend that you test your equipment and try everything before hacking "bungee" as using aircrack-ng can be very error prone if you use it the first time. If you do not want to install Linux you might use the live CD "Backtrack" which is shipped with aircrack-ng. The aircrack website has numerous tutorials and a wealth of information on WEP cracking, be sure to check it before you start (Hint: there are no clients connected).

Needed equipment: a wireless card which is supported by Aircrack-ng. A list of supported devices can be found here. Some of the devices listed there are rather cheap, less then 20 Euro (e.g. some Linksys WUSB54GC). If your device is not supported, you can borrow an USB sticks from us for a day which has been tested with Linux. Contact Martin Mulazzani in that case.

Once you broke the WEP key, connect to the network and open a browser. Any URL you enter (e.g. google.com) should take you to a website with a secret, which is needed for completing this assignment.

Please answer the following questions:

1. What is the networks WEP key ?
2. How did you break the key ? Document your steps in detail.
3. What is the secret ?
4. Please list all group members