'A step by step guide to breaking WEP'

Perform WLAN discovery

Is the SSID
No being Yes
broadcast?

Disassociate a legitimate
client to determine SSID

Captured at
No least 1 data Yes
packet?

Perform traffic injection

to generate data packets

WepAttack
No break the Yes
WEP key?

Attempt to capture WEP

data packets
(1,000,000+ for 128-bit
WEP)

Sufficient data
No packets being Yes
collected?

Capture WEP data

Perform traffic injection
packets (1,000,000+
to generate data packets
for 128-bit).
Break the WEP key

Enter the WEP key and

associate to the WLAN

Association
No Yes
Successful?

Sniff network until a

valid MAC address is
determined
IP Address
No received via
DHCP?
Yes
Assume the MAC of the
Assign a static IP in the
valid client (once it goes
WLANs subnet
down)

Should now have access to Copyright 2006 Wirelessdefence.org.

Version 0.1 the WLAN All Rights Reserved.