nexmon – Blame information for rev 1

Subversion Repositories:
Rev:
Rev Author Line No. Line
1 office 1 .TH TKIPTUN-NG 8 "February 2016" "Version 1.2-rc4"
2  
3 .SH NAME
4 tkiptun-ng - inject a few frames into a WPA TKIP network with QoS
5 .SH SYNOPSIS
6 .B tkiptun-ng
7 [options] <replay interface>
8 .SH DESCRIPTION
9 .BI tkiptun-ng
10 is a tool created by Martin Beck aka hirte, a member of aircrack-ng team. This tool is able to inject a few frames into a WPA TKIP network with QoS. He worked with Erik Tews (who created PTW attack) for a conference in PacSec 2008: "Gone in 900 Seconds, Some Crypto Issues with WPA".
11 .SH OPERATION
12 .PP
13 .TP
14 .I -H, --help
15 Shows the help screen.
16 .TP
17 .B Filter options:
18 .TP
19 .I -d <dmac>
20 MAC address of destination.
21 .TP
22 .I -s <smac>
23 MAC address of source.
24 .TP
25 .I -m <len>
26 Minimum packet length.
27 .TP
28 .I -n <len>
29 Maximum packet length.
30 .TP
31 .I -t <tods>
32 Frame control, "To" DS bit.
33 .TP
34 .I -f <fromds>
35 Frame control, "From" DS bit.
36 .TP
37 .I -D
38 Disable AP Detection.
39 .PP
40 .TP
41 .B Replay options:
42 .TP
43 .I -x <nbpps>
44 Number of packets per second.
45 .TP
46 .I -p <fctrl>
47 Set frame control word (hex).
48 .TP
49 .I -a <bssid>
50 Set Access Point MAC address.
51 .TP
52 .I -c <dmac>
53 Set destination MAC address.
54 .TP
55 .I -h <smac>
56 Set source MAC address.
57 .TP
58 .I -F
59 Choose first matching packet.
60 .TP
61 .I -e <essid>
62 Set target SSID.
63 .PP
64 .TP
65 .B Debug options:
66 .TP
67 .I -K <prga>
68 Keystream for continuation.
69 .TP
70 .I -y <file>
71 Keystream file for continuation.
72 .TP
73 .I -j
74 Inject FromFS packets.
75 .TP
76 .I -P <PMK>
77 Pairwise Master key (PMK) for verification or vulnerability testing.
78 .TP
79 .I -p <PSK>
80 Preshared key (PSK) to calculate PMK with essid.
81 .PP
82 .TP
83 .B Source options:
84 .TP
85 .I -i <iface>
86 Capture packets from this interface.
87 .TP
88 .I -r <file>
89 Extract packets from this pcap file.
90 .SH AUTHOR
91 This manual page was written by Thomas d\(aqOtreppe.
92 Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation
93 On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.
94 .SH SEE ALSO
95 .br
96 .B airbase-ng(8)
97 .br
98 .B aireplay-ng(8)
99 .br
100 .B airmon-ng(8)
101 .br
102 .B airodump-ng(8)
103 .br
104 .B airodump-ng-oui-update(8)
105 .br
106 .B airserv-ng(8)
107 .br
108 .B airtun-ng(8)
109 .br
110 .B besside-ng(8)
111 .br
112 .B easside-ng(8)
113 .br
114 .B wesside-ng(8)
115 .br
116 .B aircrack-ng(1)
117 .br
118 .B airdecap-ng(1)
119 .br
120 .B airdecloak-ng(1)
121 .br
122 .B airolib-ng(1)
123 .br
124 .B besside-ng-crawler(1)
125 .br
126 .B buddy-ng(1)
127 .br
128 .B ivstools(1)
129 .br
130 .B kstats(1)
131 .br
132 .B makeivs-ng(1)
133 .br
134 .B packetforge-ng(1)
135 .br
136 .B wpaclean(1)