Using Aircrack-ng with John the Ripper
Now that we have edited and tested our custom JtR rules,
we will recapture our AP’s new WPA passphrase with airodump-ng.
We’ve captured the handshake.
And then we pipe our JtR command into aircrack-ng.
We send our JtR password mangling command to standard out,
but pipe it to our aircrack-ng command,
which targets our AP’s ESSID with the -e option.
But instead of aircrack-ng taking input from a wordlist file,
we will use standard input.
The dash at the end signifies standard input from our capture file.
JtR mangled our original wordlist into more than four million entries,
allowing us to recover the password in just over four minutes.
We were able to recover the passphrase
even though it didn’t appear in the original wordlist.