Home > Protocol Analysis > Decrypting WEP using Wireshark and AirPcap

Decrypting WEP using Wireshark and AirPcap

May 17th, 2013

1. You must have Wireshark successfully installed on capturing host

2. You must have the AirPcap Wireless Capture Adapter successfully installed on capturing host

  • Obtain Wireless Channel, Security Mode, and Key from Access Point
  • Open Wireshark and expand Wireless Toolbar (View > Wireless Toolbar). Please note you could also set decryption options under Edit > Preferences > Protocols > IEEE 802.11.
  • Select Wireless Channel traffic will be traversing
  • Select Decryption Keys
  • Select New
  • Input Security Type (Mode)
  • Input Key
  • Start capture on AirPcap Wireless Network Adapter
  • Have client connect to Access Point

NOTE:  you will need to capture the client’s initial communication with the Access Point

Categories: Protocol Analysis Tags:
Comments are closed.