arpforge:

Project Homepage: http://www.cr0.net:8040/code/network/ (OFFLINE)

Project Homepage: Local Mirror  aircrack-2.41.tar.gz  MD5: 05A37C8A165EFB11EA226829C809DEB3

NOTE: The next generation of Aicrack: Aircrack-ng is now available!

Arpforge is used in conjunction with aireplay (only available on Linux) to decrypt a WEP data packet without knowing the key.  At least one data packet has to be decrypted (utilising aireplay -4).

Once the packet is decrypted the source MAC (of an associated station) and destination IP (of a station that replies to ARP requests) are noted.

This MAC and IP address are then used with arpforge to forge an ARP request in order to speed up the data packets being passed across the network for WEP cracking purposes.  The ARP request is then replayed with aireplay.

example arpforge packet generation:

arpforge-ng  replay_dec-0627-022301.xor  1  00:13:10:30:24:9C  00:09:5B:EB:C5:2B 192.168.1.100  192.168.1.2  arp.cap

See http://tinyshell.be/aircrackng/wiki/index.php?title=KoreK_chopchop for a full break down of each step.