Now that we've captured the handshake from our target access point and we have a word ready to use we
can use aircraft energy to crack or determine the key for the target access point aircraft and just
going to go through the wordless file.
It's going to combine each password with the name of our target access point to create a PMK the PMK
is created using a certain algorithm called the P.B. KDAF 2.
So it's not like just combining the password and the SS ID it's encrypted them in a certain way and
then it's going to compare the PMK to the handshake.
If the PMK was valid then the password that was used is the passwords for the tag for the target access
point.
If it wasn't valid then aircraft engine is just going to try the next password.
So again aircraft entry is going to go through the list.
It's going to combine each passport in the list with the name of the target access point to create a
PMK the PMK is compared with the handshake.
If the PMK is valid that that password is the password for the target access point.
If it's not then it's just going to try the next password.
All this is going to be done using aircraft.
And let's see how we do it.
So it's going to be a.
And you the name of the file that contains the handshake.
And that is test hand-shakes zero on.
And then we'll put a minus W and the name of the word.
So I have it's called WPA a wordlist
Kenji test the name of the file that contains the handshake.
And then we have the name of the wordlist.
After the minus W. I'm going to hit enter.
And now crack.
And just going to go through the list as you can see is trying all the passwords.
It's going to combine each password with the name of the target access point to create a PMK and then
compare the PMK to the handshake.
If the PMK is valid then the password that was used to create the PMK is the password for the target
access point.
If the PMK is not there it's just going to try the next password.
And as you can see the he was found.
And that's the same key that we were able to find when we were when we typed it using the WPX feature.
So this was the basic way using a wordlist.
And it took two minutes and 16 seconds to crack the password.
Now the speed depends on how quick your processor and if you have any processes running that's making
your computer a bit slower.