Scroll to navigation

TKIPTUN-NG(8) System Manager's Manual TKIPTUN-NG(8)

NAME

tkiptun-ng - inject a few frames into a WPA TKIP network with QoS

SYNOPSIS

tkiptun-ng [options] <replay interface>

DESCRIPTION

tkiptun-ng is a tool created by Martin Beck aka hirte, a member of aircrack-ng team. This tool is able to inject a few frames into a WPA TKIP network with QoS. He worked with Erik Tews (who created PTW attack) for a conference in PacSec 2008: "Gone in 900 Seconds, Some Crypto Issues with WPA".

OPERATION

Shows the help screen.
MAC address of destination.
MAC address of source.
Minimum packet length.
Maximum packet length.
Frame control, "To" DS bit.
Frame control, "From" DS bit.
Disable AP Detection.
Number of packets per second.
Set frame control word (hex).
Set Access Point MAC address.
Set destination MAC address.
Set source MAC address.
Set target SSID.
MIC error timeout in seconds. Default: 60 seconds
Keystream for continuation.
Keystream file for continuation.
Inject FromFS packets.
Pairwise Master key (PMK) for verification or vulnerability testing.
Preshared key (PSK) to calculate PMK with essid.
Capture packets from this interface.
Extract packets from this pcap file.

AUTHOR

This manual page was written by Thomas d'Otreppe. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

SEE ALSO

airbase-ng(8)
aireplay-ng(8)
airmon-ng(8)
airodump-ng(8)
airodump-ng-oui-update(8)
airserv-ng(8)
airtun-ng(8)
besside-ng(8)
easside-ng(8)
wesside-ng(8)
aircrack-ng(1)
airdecap-ng(1)
airdecloak-ng(1)
airolib-ng(1)
besside-ng-crawler(1)
buddy-ng(1)
ivstools(1)
kstats(1)
makeivs-ng(1)
packetforge-ng(1)
wpaclean(1)
airventriloquist(8)

January 2020 Version 1.6.0