Keep in mind you can have aircrack-ng, airodump-ng and aireplay-ng running all at the same time. For cracking WEP, the ARP Request Replay Attack and the Cafe Latte Attack are quite useful.

The tool has a number of different attacks, some very specialized, some generally useful. Tools such as aireplay-ng are designed to do just that. One thing you can do is to generate a lot of traffic. It said that with just barely over 1000 IVs, it can't deduct any information about the WEP key, so it'll try again once you have 5000 IVs, then again when you have 10000 IVs, and so on. What does that mean?Īircrack actually gave you the correct message.

Usually, 40-bit WEP (64 bit key) can be cracked with 300,000 IVs, and 104-bit WEP (128 bit key) can be cracked with 1,500,000 IVs if you're out of luck you may need two million IVs, or more. With a brute force attack, you only need to capture a single encrypted packet and then apply an enormous amount of computing power. The number of required IVs depends on the WEP key length, and it also depends on your luck. The aircrack-ng FAQ says: How many IVs are required to crack WEP? Cracking WEP works by statistical analysis, and in order to do that reliably, you will need lots of data.

Brute force wep key cracker