Firstly, thank you both for replying!
Originally Posted by Harmaa Kettu
There is a driver for this in the kernel. Setting it up is a bit hard because it needs firmware from Windows driver, but the documentation on http://bcm43xx.berlios.de/
should help. This step-by-step guide
for Gentoo especially is useful even for other distributions.
Cheers for the links Harmma...will check this out tonight when i get home. Have the laptop beside my other pcs, which makes testing a lot easier for me. I can refer to guides/internet while trying out different things. Good news that i might not need to purchase another wireless! Yeah
Will let you know how i get on! Although, i made some progress last night on a friends laptop...will post up my results.
Originally Posted by 686plus
Just to make sure all things are covered... Did you enable the interface? Backtrack boots with no interfaces enabled, unlike most other live distros.
I think backtrack has broadcom drivers already, but I can't remember for sure. Use the lsmod command to see what drivers are loaded. It probably starts with bcm. lspci tells us your card is recognized, so see if the driver is loaded.
Also, which backtrack are you using? A stable or beta version?
And just my opinion... wep vulnerabilities are well documented and there is no need to test a key. It can be cracked. If you're just trying to convince your boss, get permission in writing. If you're just trying to get into an encrypted wireless network, don't. In either case, it probably won't get you a promotion.
Hi 686plus...you are correct
I didnt enable my card. Total idiot! Found out last night while at a friends house. Im using BackTrack v2 (stable)...i hear what your saying about my employer. Just at the moment im a general techy...nothing special. I would like to maybe move into a specified field or something. Sort of stuck in a rut at the moment...trying to find something in computing i can excel in. I know everything is going wireless - would like to get into it while i have an advantage in my work place. I wont hack the works wireless, jsut mention the security risk...when they say "no" i can say "yes"...show them...sort of blowing my own trumptet. Sounds terrible i know.
But enough about how crap my job is hahaha...when i was at my friends house, he recently purchased a new Acer Aspire (AMD Dualcore, under 500!!!) I entered the "iwconfig" command and found ath0 along with lo, eth0 + wifi0. Nice! ath0 i read was the best?
When trying to use airodump:
airodump-ng --write out --ivs --abg ath0
It wasnt working, i then found out in another forum, i had to put the card into monitor mode(this is when i found out i screwed up the test on my laptop)...this wasnt working. I then found the following command:
wlanconfig ath1 create wlandev wifi0 wlanmode monitor ath1 (im almost 100% sure this is correct, cant find the post with i got this from and im currently in work...will post up the proper one if any different tonight-sorry)
BUT this seemed to work, after hitting enter, i was given ath1 in a blank line.
I then used airodump-ng --write out --ivs --abg ath1
But keep getting
Unreconized option --abg
When i take out --abg it works, i managed to pick up some access points...so wrote down the BSSID + Channel number.
I hit Ctrl C
airodump-ng --channel 11 --write out --ivs ath1
Brings up a window, but nothing was coming up...
Is this because im taking out the --abg (i know that its to search the a,b + g bands) but im not getting whats displayed at http://www.i-hacked.com/content/view/231/42/
Click here to see what i should get:
Thanks in advance guys