HowTo : Pause/Resume Aircrack-ng

In some cases, it's not possible to Crack WPA/WPA2-PSK Key with Aircrack-ng in one step, especially while using a large dictionary.

Unfortunately, aircrack-ng can't pause and then resume cracking itself, but it is possible to save and then continue session with John The Ripper.

In this small note you'll find how to save the current state of aircrack-ng and then continue the cracking from where it was stopped.

Install John The Ripper

Run the following command to install John The Ripper, if you haven't done it :

$ sudo apt-get install john

Pause/Resume Aircrack-ng

If you crack WPA/WPA2-PSK key with John The Ripper, you can press any key to check the current status.

When you press q or Ctrl-C, John The Ripper aborts/pause cracking and saves the information about the progress of the current session to a file ~/.john/john.rec (by default).

To continue an interrupted session, run the John with --restore=[session name] option.

Let's use John The Ripper to create a session foo, pipe its output to aircrack-ng, try to pause and then resume the cracking.

Aircrack-ng : START

Start Cracking WPA/WPA2-PSK Key, using John The Ripper and aircrack-ng :

$ john --session=foo --stdout --wordlist=wordlist.dic | aircrack-ng -w - -b 00:11:22:33:44:55 WPAcrack.cap
Option Description
--session The name of the session
--wordlist The name of the dictionary file
-b The MAC address of the access point
WPAcrack.cap The name of the file that contains the authentication handshake

Aircrack-ng : PAUSE

Press q or Ctrl-C to pause cracking.

Aircrack-ng : RESUME

Continue cracking from where it was stopped (resume session foo) :

$ john --restore=foo | aircrack-ng -w - -b 00:11:22:33:44:55 WPAcrack.cap