hen_luiz

Basically, the brute force attack on WPA/WPA2-PSK use the MIC. If the password is too large, becomes more difficult. But, the GTK is the same for all stations and we know the first traffic encrypted with GTK: DHCP Request. I'm thinking use a known plain text attack and discover the GTK. My question is: Can I capture encripted frames of SSID without associating me a Access Point? What's the software do it? Thank you very much.