Test whether your own home or office Wi-Fi password is strong enough to withstand a dictionary attack.
Learn how WPA/WPA2 handshake capture and offline cracking works as part of a network security course.
Practice using Aircrack-ng and Hashcat in a Kali Linux environment on a network you own.
Requires a wireless card that supports monitor mode, Kali Linux, and the Aircrack-ng suite installed.
This repository is a step-by-step tutorial explaining how to test a WPA/WPA2 Wi-Fi network's resistance to password guessing attacks. WPA and WPA2 are the security protocols most home and office Wi-Fi routers use. The tutorial is written for Linux users, specifically those running Kali Linux, a distribution designed for security testing. The process works by putting a wireless card into a listening mode, waiting for a device to join the target network, capturing the brief authentication exchange that happens when it does (called a handshake), and then running that captured data through a password-guessing tool offline. The guessing tool tests thousands or millions of common passwords against the captured handshake to see if any match. The tutorial covers two tools for this: Aircrack-ng for CPU-based guessing and Hashcat for GPU-based guessing, which is significantly faster. The README includes the exact commands to run at each step, sample output showing what to expect, and notes on an optional faster technique that actively forces connected devices to reconnect so you can capture the handshake sooner. The tutorial states clearly that it is for educational purposes and for testing your own network, and includes a disclaimer that using it against networks you do not own or have permission to test is not authorized. This is a tutorial repository with no installable code. It requires specific hardware (a wireless card that supports monitor mode), Linux, and the Aircrack-ng software suite. A Chinese translation of the tutorial is also included in the repository.
← brannondorsey on gitmyhub — every repo by this author, as a profile.
Verify against the repo before relying on details.