Database Users

Getting into a wireless network without the WEP key

My friend was boasting about how secure his network is and how nobody could ever hack into it. I am able to pick it up on my Universal, but it asks me for the WEP code. It would be very funny if I could use his connection after all his boasting :twisted: ! So, is there any app that can do this - perhaps by guessing all possible combinations until it gains access, or any other way?
Thanks

WEP is an older security method that has been proven to be hackable and especially true if the 64-bit version is being used.
There are tools around to hack WEP security, but I doubt it is for PPC. Even for PC, it requires some drivers for the wireless card, and a lot of the wireless card are not supported, including Centrino.
Lets assume that you have the appropriate equipment. Depending on the key size your friend used, e.g. 64 / 128 bits, you are required to be there to capture enough data (approx 500Mb for 128bits, I think) to get enough 'clue' to decode the key being used.
Finally, lets assume you had the key. You boasting friend may have a second layer of protection with wireless MAC address filtering, which filter out un authorized units based on MAC address. Of cource, MAC address can be spoof, but doubt there are any easy method of PPC unit yet.

You need another laptop as well as the PPC.
Download and install: Auditor: http://www.remote-exploit.org/index.php/Main_Page it is basically a boot from CD Linux with just the tools you need to 'probe' networks. use the PPC to find the Mac address, SSID and channel. Then fire up the laptop and start using all the tools to crack the WEP. The more data going over the network, the faster the apps will be able crack the WEP code. If enough data is flowing through the router, it is possbile to crack a 128 bit WEP in 10-20 minutes. If you have two laptops, you can get the other one to talk to the router (with spoofed MAC) to increase the data.
As already mentioned, all this depends if your card is supported by the apps, and can be put in silent mode (if you don't want to draw attention to yourself)
Of course, it is much easier just to walk 50 yards down the street and find an unsecured network for your free Skype calls.
cough.
/Mad

Thanks for the help. How would I find the chennel and MAC address with my universal?! I just want to get into my friends as a joke, and so finding another network wouldnt be much help!!
Thanks

6680abhi said:
Thanks for the help. How would I find the chennel and MAC address with my universal?!
Thanks
Click to expand...
Click to collapse
Mine is german, so my translations may be wrong
From the start menue
-> Settings
-> connections
-> Wireless-LAN
There you'll find the information you are looking for.
Do you have some experience with Linux? It's a bit more complicated than Windows Mobile

AFAIK for Wep cracking there are also a couple of programs for PocketPC existing which can do this within minutes.
but this depends strongly on the WLAN hardware.
Search in google for this.

BlackICE said:
AFAIK for Wep cracking there are also a couple of programs for PocketPC existing which can do this within minutes.
but this depends strongly on the WLAN hardware.
Search in google for this.
Click to expand...
Click to collapse
Thanks for the help. I have serached on google, but am unable to find a wep cracking application for ppc. Could you perhaps give me a link to one?
Thanks

look here:
http://www.google.com/search?num=30...esnum=0&ct=result&cd=1&q=wlan+sniffer&spell=1

Thanks again, but could you please be more specific with an application, and post a link to the application, as I was unable to find anything by clicking on the google search you posted.
Thanks

6680,
it is easyer to use a notebook, preferrably with two Prism2 based network cards, and boot WHAX from a CD.
Let that run for some time and it'll find the WEP key for you.
It took more than 30 hours to get the key for my neighbours WLAN :?

I did not post you more specific links, as I have to look myself through all these links. Actually, some of the Wlan sniffer programms do have also a PocketPC version.
Actually, it is far more easier to use a notebook than a pda. Also I doubt that there is any program around, which is fully supporting the Wlan hardware of the Universal. At least this was the case half year ago.

T-Mobile GPRS / EDGE GOOGLE FIX - regedit MTU setting

For those of you who cannot browse GOOGLE sites using the unlimited T-Mobile GPRS/EDGE plan do the following:
On your WM5 device, use a registry editor and do the following:
Go to HKLM\Comm\Cellular Line\Parms\tcpip
and add a DWORD registry key called MTU with value 1460 (UPDATED)
Open PocketIE/Opera/Netfront and go to any Google page you want!
Oh, and make sure your internet gateway is using:
internet2.voicestream.com

It seems as though the fix is not working for all cities.
I'm actually in New York City, so I guess the MTU values could be different in different areas. Works great on an MTU of 1460 in NYC.
You can try values from 1500 (default) all the way down to 1400.
Trial and error, if it does work for you though, please post the city and MTU value you got it working with.
Goodluck everyone. I have been struggling with this since February and am really pleased I have finally managed to resolve it.
If there are any other New York City T-Mobile users, please confirm the fix.
Thanks.

The following solution worked for me on my T-Mobile MDA. Note: the NdisWan key did not exist, I had to create it from scratch. Before adding the information below into my registry, I was unable to get past the initial google page. Now I can google anything, and use google maps too! And BTW I am in Long Island.
Change the MTU Settings for PPP Connections
Click Start, click Run, type regedit in the Open box, and then click OK.
Locate and then click the following subkey in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\NdisWan\Parameters
Add a Protocols subkey (if it does not already exist). To do so:
a. On the Edit menu, point to New, and then click Key.
b. Type Protocols, and then press ENTER.
4. Add a 0 (zero) subkey to the Protocols subkey. To do so:
a. Click the Protocols subkey that you created step 3.
b. On the Edit menu, point to New, and then click Key.
c. Type 0 (zero), and then press ENTER.
5. Click the 0 subkey that you created in step 4.
6. On the Edit menu, point to New, and then click DWORD Value.
7. In the Value data box, type ProtocolType, and then click OK.
8. On the Edit menu, click Modify.
9. In the Value data box, type 800, make sure Hexadecimal is selected under Base, and then click OK.
10. On the Edit menu, point to New, and then click DWORD Value.
11. Type PPPProtocolType, and then press ENTER.
12. On the Edit menu, click Modify.
13. In the Value data box, type 21, make sure Hexadecimal is selected under Base, and then click OK.
14. On the Edit menu, point to New, and then click DWORD Value.
15. Type ProtocolMTU, and then press ENTER.
16. On the Edit menu, click Modify.
17. Under Base, click Decimal, type the MTU size that you want in the Value data box, and then click OK.
18. Quit Registry Editor.
19. Restart your computer.
The MTU size that worked with the customer I was talking to was 1350.

Squuiid said:
For those of you who cannot browse GOOGLE sites using the unlimited T-Mobile GPRS/EDGE plan do the following:
On your WM5 device, use a registry editor and do the following:
Go to HKLM\Comm\Cellular Line\Parms\tcpip
and add a DWORD registry key called MTU with value 1450
Open PocketIE/Opera/Netfront and go to any Google page you want!
Oh, and make sure your internet gateway is using:
internet2.voicestream.com
Click to expand...
Click to collapse
This worked PERFECTLY! I'm in NYC as well and 1450 worked. (for what's it worth, that long process also described in this thread DID NOT work for me)

Squiid you are the man I work in NYC and live in NJ works like a charm... it's especially great cause i'vee ben trying to access all my gmail and GFYD accounts and it's been so inconsistent. It works well thus far thanks!

Squiid you are the man I work in NYC and live in NJ works like a charm... it's especially great cause i'vee ben trying to access all my gmail and GFYD accounts and it's been so inconsistent. It works well thus far thanks!

The registry fix for MTU of 1450 seems to be working in Dallas, thanks for the tip.

ok... so right after I added the editi in the registry it worked right away I was sitting at the starbucks on W35th and 7th. Then I went to a building right down the street and had to google something I couldn't access any google page.
I had great service in the building just no google pages which thought I had fixed. Now I can't access them from anywhere in the city again? the MTU edit is still in my registry.
Any ideas on this? thanks?

This worked for me, PHL market.
It allowed me to get to google.com.
However I still can't access any of the other google sites. (local/maps)

MTU of 1460 best
Have done some adittional testing, an MTU value of 1460 works best!
1450 sometimes works on all google sites other times not.
1460 seem to work all the time.
Please leave your feedback, and for those that have, thanks.

Not working here
Squuiid said:
For those of you who cannot browse GOOGLE sites using the unlimited T-Mobile GPRS/EDGE plan do the following:
On your WM5 device, use a registry editor and do the following:
Go to HKLM\Comm\Cellular Line\Parms\tcpip
and add a DWORD registry key called MTU with value 1460 (UPDATED)
Open PocketIE/Opera/Netfront and go to any Google page you want!
Oh, and make sure your internet gateway is using:
internet2.voicestream.com
Click to expand...
Click to collapse
I´m not with T-Mob but I do have these problem, I tried the values you suggested but doesn´t seem to work. Is there a range of values that I should try?

I figure out myself
luiggi said:
I´m not with T-Mob but I do have these problem, I tried the values you suggested but doesn´t seem to work. Is there a range of values that I should try?
Click to expand...
Click to collapse
Here one may find a useful list of values depending of the connection type
http://www.stearns.org/p0f/mtu.h
by the way, none of these worked for me.

adamb2k6 said:
The following solution worked for me on my T-Mobile MDA. Note: the NdisWan key did not exist, I had to create it from scratch. Before adding the information below into my registry, I was unable to get past the initial google page. Now I can google anything, and use google maps too! And BTW I am in Long Island.
Change the MTU Settings for PPP Connections
Click Start, click Run, type regedit in the Open box, and then click OK.
Locate and then click the following subkey in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\NdisWan\Parameters
Add a Protocols subkey (if it does not already exist). To do so:
a. On the Edit menu, point to New, and then click Key.
b. Type Protocols, and then press ENTER.
4. Add a 0 (zero) subkey to the Protocols subkey. To do so:
a. Click the Protocols subkey that you created step 3.
b. On the Edit menu, point to New, and then click Key.
c. Type 0 (zero), and then press ENTER.
5. Click the 0 subkey that you created in step 4.
6. On the Edit menu, point to New, and then click DWORD Value.
7. In the Value data box, type ProtocolType, and then click OK.
8. On the Edit menu, click Modify.
9. In the Value data box, type 800, make sure Hexadecimal is selected under Base, and then click OK.
10. On the Edit menu, point to New, and then click DWORD Value.
11. Type PPPProtocolType, and then press ENTER.
12. On the Edit menu, click Modify.
13. In the Value data box, type 21, make sure Hexadecimal is selected under Base, and then click OK.
14. On the Edit menu, point to New, and then click DWORD Value.
15. Type ProtocolMTU, and then press ENTER.
16. On the Edit menu, click Modify.
17. Under Base, click Decimal, type the MTU size that you want in the Value data box, and then click OK.
18. Quit Registry Editor.
19. Restart your computer.
The MTU size that worked with the customer I was talking to was 1350.
Click to expand...
Click to collapse
I'm using an 8525 with
CE5.2.1622 ( Build 18128.0.4.4 )
ROM 3.62.502.3 ( 10/11/07 )
Radio 1.16.00.00
Protocol Ver: 32.53.7018.01H
( Yes I used pof's SIM/CID Unlocker....way to go pof ! )
Anyway, I've tried adding these keys ( which, by the way, once I reboot the 8525, I lose all BUT the "ProtocolType" entries under the "0" key ), and setting my MTU from 1430 to 1460 as the original author suggested, and I can get past google.com, and it simply dies "Opening" gmail/calendar/maps.
THe funny thing is I'm running Xplode's WM6 ROM for BlueAngel on an older Siemens SX-66, and even though it DOESN'T have any of these entries mentioned, it works....I can go to gmail just fine, even without the registry settings.
Has ANYONE gotten a consistent solution to this ? Is there any particular ROM image someone can recommend to move to that includes fixes for this ?
Thanks.

Updated Radio ....still doesn't work.
I updated the Radio ROM To 1.54.30.10, and it still doesn't work. Even though now, I have 2 "cellular line" entries in the HKLM\COMM section of the registry.

HTC P6500 & HP IPaq 614c PPP Protocol MTU
Hi everyone,
I am wondering if any can look over my problem and possibly offer some advice?
I have a problem probably generic to most PDA devices where i can not change the MTU size for the PPP Protocol.
I have made the changes as advised in this thread and neither have worked for me, the MTU is still default 1500.
Changes made are as follows:
"HKLM\Comm\Cellular Line\Parms\tcpip" Set to 1450, MSS is still 1460
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NdisWan\Parameters\Protocols\0" and also changed \Parameters to \Parms as they all within Registry on WM6 and set ProtocolMTU, PPPProtocolType and ProtocolType as in XP, MTU set to 1450 but the MSS is still 1460.
I am using Windows Mobile 6.
The tool i use on the PDA is the Microsoft Power Toys Analyzer, copy the file to my XP machine and open the netlog0 file with Wireshark and investigate the capture.
The latter of the two keys is how the MTU is changed on a Windows XP machine.
I do know that data cards connected to a PC that use the WWAN protocol for GPRS connection will list a Wireless Network Interface card and for that the MTU would be changed under the network adapter itself, if they are using the PPP Protocol and listed as a Dial Up adapter the the latter key above must be used, all tested and works a treat.
I am imaging that PDA devices must work in the same way.
The devices i am currently using definatly use the PPP Protocol to connect, can anyone advice how this MTU is changed or even advice how to tweak registry to get GPRS to use WWAN, the latter may be impossible for me as i am not a software developer, tweaks i can handle.
Well thanks for looking at my post and i hope someone can point me into the correct direction.
Many Thanks
Martin.

WEP 128 bit encryption

Can anyone tell me if it is possible to use WEP 128 bit encryption with the Wi-Fi adapter on the Hermes
Thanks

leswaller said:
Can anyone tell me if it is possible to use WEP 128 bit encryption with the Wi-Fi adapter on the Hermes
Thanks
Click to expand...
Click to collapse
Yes it is, but if you use a passphrase like "myhomenet" or the like i.e. when you set up your router you entered a name/word as a password, then do not put this name in when setting up on the Hermes.
It accepts the the password much better in Hexadecimal format. So go here:
http://www.powerdog.com/wepkey.cgi
and the site will convert the password into hexadecimal for you. Use the one it generates for 128 encryption.
Mike
If your router is set to broadcast its identity then Hermes will detect the network and ask you to enter the password. If not you will need to be armed with the network name as well as the hex password and you will need to go to wifi settings and add them manually.

Thanks Mike
I understand that bit, but how does the hermes diferentiate between 64 bit and 128 bit keys? On the router I select one or the other, but I can't find a means of doing this on the Hermes/mobile 5. If I try and enter a 128 bit key I appear to run out of space before I get to the end of the key
Les

leswaller said:
Thanks Mike
I understand that bit, but how does the hermes diferentiate between 64 bit and 128 bit keys? On the router I select one or the other, but I can't find a means of doing this on the Hermes/mobile 5. If I try and enter a 128 bit key I appear to run out of space before I get to the end of the key
Les
Click to expand...
Click to collapse
That's ok so long as it keeps entering as you type it will just slide along as you type.
Mike
PS once entered the number of *s will not equal the number of didgits you entered (that's a normal security measure)
I find it easier to get someone to shout out the digits as I type them in. Or use hitchhiker that allows you to cut and paste the key in.

Thanks Mike, Succesfully connected. Will the Hermes remember the key, especially if I log on to another network
Les

leswaller said:
Thanks Mike, Succesfully connected. Will the Hermes remember the key, especially if I log on to another network
Les
Click to expand...
Click to collapse
Let me put it this way - it's supposed to. I have mine setup for both home and work networks and all works well. However for some reason in the early days it had a habit of forgetting but that was nearly a year ago - its all settled down now - I just tap on connect wherever I am and it auto connects to the appropriate network.
Mike

Many thanks for your help Mike, I will keep my fingers crossed.
Les

WPA key lenght issue

I upgraded my router's firmware to the DD-WRT and decided to go from my previous 24 character key to a new 64 character one.
I was able to connect to my WPA2 encrypted network fine with the old key but not the new one. I immediately get "Failed to connect to network"
I did some searches on google and the forum but have not found anyone with a similar issue. Are there any known issue with Android and overly secure networks?

joshtheitguy said:
I upgraded my router's firmware to the DD-WRT and decided to go from my previous 24 character key to a new 64 character one.
I was able to connect to my WPA2 encrypted network fine with the old key but not the new one. I immediately get "Failed to connect to network"
I did some searches on google and the forum but have not found anyone with a similar issue. Are there any known issue with Android and overly secure networks?
Click to expand...
Click to collapse
use 63 characters (gives you a 256 bit hash anyway) more info: https://www.grc.com/passwords.htm
Also reD-WRT from their help screen:
To use WPA Personal, enter a password in the WPA Shared Key field between 8 and 63 characters long. You may also enter a Group Key Renewal Interval time between 0 and 99,999 seconds.
Click to expand...
Click to collapse
When you are copying and pasting, careful not to include a "space" at the end of your key... hard to see and causes all sorts of trauma.
All that said, my G1 and DD-WRT work great with WPA2 + AES
--M

joshtheitguy said:
I upgraded my router's firmware to the DD-WRT and decided to go from my previous 24 character key to a new 64 character one.
I was able to connect to my WPA2 encrypted network fine with the old key but not the new one. I immediately get "Failed to connect to network"
I did some searches on google and the forum but have not found anyone with a similar issue. Are there any known issue with Android and overly secure networks?
Click to expand...
Click to collapse
Same problem for me. I just got an Android Dev Phone 1 and it won't take a 64 char hex key to our wireless router. I had to change the router to a 63 char non-hex key, then the phone would connect. This problem was not resolved by updating to the latest RC33 firmware. Has anyone reported it to Google, or know how to report it? People with iphones had no problem with the 64 char hex key, so they'd better get on it. =)
EDIT: I reported this issue at http://code.google.com/p/android/issues/detail?id=2009 so hopefully it will be resolved in a future release.

Why would anyone prefer a 64 number hex key over a 63 character ASCII key?
It's all just copy/paste anyway and the 63 character ASCII key provides more possible combinations.

t1n0m3n said:
Why would anyone prefer a 64 number hex key over a 63 character ASCII key?
It's all just copy/paste anyway and the 63 character ASCII key provides more possible combinations.
Click to expand...
Click to collapse
When the wireless router originally asked for a 0-63 char "passphrase" OR a 64 char hex key, I figured the hex key would be more secure just because it was longer (I didn't think too hard about it). I now understand that they're more or less equivalent, but that doesn't mean Android shouldn't support the 64 hex option for those who have it set up that way. As it stands it took awhile to put the new 63 char key into a number of people's devices just so my one phone could work.

kanisdragon said:
When the wireless router originally asked for a 0-63 char "passphrase" OR a 64 char hex key, I figured the hex key would be more secure just because it was longer (I didn't think too hard about it). I now understand that they're more or less equivalent, but that doesn't mean Android shouldn't support the 64 hex option for those who have it set up that way. As it stands it took awhile to put the new 63 char key into a number of people's devices just so my one phone could work.
Click to expand...
Click to collapse
I could see that as being a pain to deal with. However the OP said that this was a change anyway, so it wouldn't be a big deal to convert IMO.
The only thing I hate is a device that you can't copy/paste the key into (E.G. my PSP) I hate typing in all those characters.
I change my key about once a week anyway, so I am used to it. (And my PSP gets a less secure "guest net" to play on.)

How to recover wpa key on symbol mc70

Yeah, I know the Wpa key is encoded and thus not readable... But hang on, there's more to come.
At our work we use Symbol Mc7090 pda's which connect to the wifi network. The Mc7090's are setup with Symbol pocket browser 2.0 and symscript running on WM 5.
Recently I copied the contents of the Mc70 with a clone program to my own Mc70.
So far, so good. My personal device perfectly connects to the wifi network at my work, and I can use all functions and programs on the pda.
The other day I discovered that mostly all of the software the pda uses is webbased. So in fact it can be used with all devices that can make a connection to the wifi network.
Cool! what if I can find the Wpa key and enter it into my Ipad? That would be rather nice wouldn't it...
I started to dig into the guts of the pda:
When starting "Wireless launch" - Manage profiles - I can see the profile Wise.
This is the right profile. When I try to edit this profile I can see the ESSID (which I already found and tried to connect with my Ipad), Encryption is TKIP and passkey is ************. I expected that.
I installed PocketAsterisk, but this tiny prog isn't showing anything else then the damn asterisks....
So this is going nowhere...
back to "wireless launch".
When choosing options, there's "export". Here you can choose between "Export options" & "Export all profiles".
When choosen both options you get 2 files: WCS_PROFILES.reg & WCS_OPTIONS.reg.
I kinda expected to find a hex key or similar in either one of these files. But was I wrong or... I attached both files.... It must contain the key as far as I know.
Who can help me? Is it possible to find the key, or not? Am I wasting my time?

Is there no one who knows the answer?