CmdID

CmdID / Commands

aircrack-ng

Crack WEP and WPA/WPA2 keys from handshake in captured packets. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Crack WEP and WPA/WPA2 keys from handshake in captured packets. Part of Aircrack-ng network software suite.

Crack key from capture file using wordlist

aircrack-ng -w path/to/wordlist.txt path/to/capture.capIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Crack key using multiple CPU threads from capture file using wordlist

aircrack-ng -p number -w path/to/wordlist.txt path/to/capture.capIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Crack key from capture file using wordlist and the access point's essid

aircrack-ng -w path/to/wordlist.txt -e extended_ssid path/to/capture.capIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Crack key from capture file using wordlist and the access point's MAC address

aircrack-ng -w path/to/wordlist.txt --bssid mac path/to/capture.capIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name aircrack-ng
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])