Download Wifislax from the official page.
Burn the downloaded .iso into a CD in order to boot it.
Reboot the computer (if necessary) and boot it.
Press Enter when necessary.
Elect the option no pcmcia and press Enter.
Introduce root as user and toor as password in order to login.
Introduce now startx to start the operative system in graphics mode.
Go to Start>
Wifislax> Asistencia Chipset> Asistencia intel pro wireless>
Cargar ipw3945 inyección - ipwray-ng; to start injection mode. The system must detect now 2 more network card interfaces: wifi0 and rtap0.
Write in the Shell that have just appeard airodump-ng wifi0.
Take a look of which WEP encrypted network (ENC category) has more Beacons and pay special attention on what channel it is (CH category) and what's it's name (ESSID category). That will posibly be the network with more signal received.
Press Ctrl+C and introduce airoway.sh.
Move with the cursor to the channel of the wanted network and press Enter when the wanted network appear.
Elect the network with the number it has associated.
Press number 2. There will appear some information refered to an association. If you succeed there will appear this: Association successful :-).
Press number 3. There will appear some information refered to a reply.
Now wait till the attack 3 (the step told just before) comence to catch ARP's and #Data category reaches 30000.
Press number 8 when you have collected the required Data. There will appear some red letters and numbers. If you succeed it must appear a KEY FOUND down in the window.
Write in a piece of paper both keys (HEX and ASCII respectively).
