Updated on 20 Oct, 2005 on Windows XP

AirSnort Windows (Wireless WEP crack)

Wireless Card Installation

1. Download Airopeek Demo (apwdemo.exe) or AiroPeek NX (apnxdemo.exe) and install. Make sure your wireless card is supported. You would find at http://ftp.wildpackets.com/pub/demos/.
2. Install Airopeek Demo, and update your wireless card driver. Follow the instruction at C:\Program Files\WildPackets\AiroPeek Japanese Demo\Driver\Readme.htm
3. I am using a CISCO Aironet 350, so I need to update (downgrade) the firmware to version 4.25.30. I downloaded ACU (Aironet Client Utility) and firmware from CISCO web site. To download it, you will need an account so you must register yourself.
4. If Airopeek works, your wireless card can capture wireless packets

AirSnort Installation

1. Download AirSnort from http://airsnort.shmoo.com. I have downloaded airsnort-0.2.7e.tar.gz
2. Extract the file (airsnort-0.2.7e.tar.gz). I extracted into
   C:\Program Files\airsnort-0.2.7e
3. Download GTK + 2.4.14 and extract into
   C:\Program Files\airsnort-0.2.7e\gtk+-2.4.14
4. Download Glib 2.4.7 and extract into
   c:\Program Files\airsnort-0.2.7e\glib-2.4.7
5. Download Pango 1.4.1 and extract into
   c:\Program Files\airsnort-0.2.7e\pango-1.4.1
6. Download ATK 1.8.0 and extract into
   c:\Program Files\airsnort-0.2.7e\atk-1.8.0
7. Add command search path under My Computer->Advanced Tab, Environmental Variables, and Path. You would add as,

   C:\Program Files\airsnort-0.2.7e\bin; C:\Program Files\airsnort-0.2.7e\atk-1.8.0\bin; C:\Program Files\airsnort-0.2.7e\glib-2.4.7\bin; C:\Program Files\airsnort-0.2.7e\gtk+-2.4.14\bin; C:\Program Files\airsnort-0.2.7e\pango-1.4.1\bin

   
   Note: Don't include any space.
8. Copy the Peek5.sys and peek.dll from the Airopeek directory (C:\Program Files\WildPackets\AiroPeek Demo) to the airsnort bin
   C:\Program Files\airsnort-0.2.7e\bin
9. Download iconv.dll to your Airsnort bin.
10. Download intl.dll to your Airsnort bin.

How to use

1. Start captures in channel scan mode (select "scan" instead of "channel").
2. Select Network device and Driver type. If you are using CISCO, select "DWL-650".
3. Click "Start". Once it started, you can change to the specific channel.



Note: In my experience, using Aircrack is the best tool compare to others. Aircrack on Linux supports packet injection which means we can increase the traffic, so we need only few hours to capture sufficient packets. Otherwise you will need several days.

Here is other my reports.

Tool	OS	CPU usage	Encryption	802.	NIC Support	Packet injection	My recommendation
Airsnort	Windows	High	WEP	11b?	Few	Not supported	Low
Airsnort (note)	Linux	High	WEP	11b?	Few	Not supported	Low
Aircrack (note)	Windows	Low	WEP, WPA	11a/b/g	Many	Not supported	Mid
Aircrack (note)	Linux	Low	WEP, WPA	11a/b/g	Many	Supported!	Recommended!