maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   [request] reaver for n900 - wps pin brute force hack (https://talk.maemo.org/showthread.php?t=81219)

meShell 2012-01-03 18:04

Re: [request] reaver for n900 - wps pin brute force hack
 
Reaver v1.3 (working)

Code:

Description:  Release of full command-line commercial Reaver code.
New utility, walsh, to scan for WPS enabled APs.
Added support for small DH keys for speed improvements.
Various bug fixes.


Working on my n900:

Code:

Reaver v1.3 WiFi Protected Setup Attack Tool
Copyright (c) 2011, Tactical Network Solutions, Craig Heffner <cheffner:::tacnetsol.com>

[+] Waiting for beacon from 00:xx:xx:xx:xx:xx
[!] WARNING: Failed to associate with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[!] WARNING: Failed to associate with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[!] WARNING: Failed to associate with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[+] Associated with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[+] 0.01% complete @ 2012-01-03 19:13:27 (40 seconds/attempt)
[+] 0.01% complete @ 2012-01-03 19:14:05 (78 seconds/attempt)
[+] 0.01% complete @ 2012-01-03 19:14:42 (115 seconds/attempt)
[+] 0.01% complete @ 2012-01-03 19:15:20 (153 seconds/attempt)




Edit:

Added the new utility "WALSH".
New utility, walsh, to scan for WPS enabled APs.
... but it seems this one needs some time again until it is working, for me it does nothing, it always displays the help.

Estel 2012-01-03 18:12

Re: [request] reaver for n900 - wps pin brute force hack
 
What 'a bit better' means, in case of program that isn't working (on N900) at all? More details, please?

meShell 2012-01-03 18:13

Re: [request] reaver for n900 - wps pin brute force hack
 
Quote:

Originally Posted by szopin (Post 1145079)
What fixes did you apply? Revision 42 (the one using sqlite3 as yours) gives me same hanging as before.

reaver Issue 41
http://code.google.com/p/reaver-wps/issues/detail?id=41


I changed as mentioned char -> int.

Now I compiled latest 1.3 stable again and there it is already fixed in sources.

I am running v1.3 right now and it is working.


Quote:

Originally Posted by szopin (Post 1145079)
Your version fails to initialize interface (bit better I guess)

You need to run reaver on interface mon0, after mon0 got created by airmon-ng (see first page, I changed example, too).


Code:

reaver -i mon0 -b XX:XX:XX:XX:XX:XX -vv

szopin 2012-01-03 18:23

Re: [request] reaver for n900 - wps pin brute force hack
 
Alright, 1.3 (revision 48 currently in trunk at least) works, though superuser privileges required. Sudo that and got some movement

meShell 2012-01-03 18:26

Re: [request] reaver for n900 - wps pin brute force hack
 
Quote:

Originally Posted by szopin (Post 1145217)
Alright, 1.3 (revision 48 currently in trunk at least) works, though superuser privileges required. Sudo that and got some movement

Ah good you remember me to mention root needed!
I forgot to mention it on first page, I tried to sum up in short (the text in green).

and fixed wrong libpcap-Version in shell commands:

wrong:
wget http://repository.maemo.org/extras-t...emo4_armel.deb

correct:
wget http://repository.maemo.org/pool/mae...+0m5_armel.deb


I will try to clean up the first page threads the next days.

mr_pingu 2012-01-05 23:19

Re: [request] reaver for n900 - wps pin brute force hack
 
Just compiled my first software ever, I think I done it all right as I got a binary and I copied it to /usr/bin and chmod +x it. Reaver starts fine but it doesn't change PINs. It keeps trying te samen PIN over and over again, everytime I start reaver with these parameters another PIN is tried. However it does not change during run ;o

Is it my compiling noobnes or is it reaver thats buggin me? Installed SDK on VM and compiled it from there with the instructions found on page 1. I even compiled mdk3 but didn't test it yet.

Now I can compile I hope I will bring reaver or mdk3 to the repos once, no promises tho. This feels already like a huge step, the N900 is my only and first linux device ;p Can we compile on the N900 itself?

szopin 2012-01-06 12:19

Re: [request] reaver for n900 - wps pin brute force hack
 
Is the AP you are trying it on with WPS/QSS/... enabled? Sounds like it works (if you got injection/monitor mode enabled) but the router is not responding. Maybe the signal is too weak? Does the AP show up in normal connection wizard (from status menu-bar) as WiFi-Protected Setup Compliant?
If you will be packaging it remember to just place symbolic link in /usr/bin and the binary (stripped) on opt

StefanL 2012-01-06 12:29

Re: [request] reaver for n900 - wps pin brute force hack
 
Quote:

Originally Posted by mr_pingu (Post 1146374)
Now I can compile I hope I will bring reaver or mdk3 to the repos once, no promises tho. This feels already like a huge step, the N900 is my only and first linux device ;p Can we compile on the N900 itself?

Yes we can :D, this is what I had been doing until I recently lost my development setup when reflashing.

gcc, make, etc. are all available from the repos for compiling c programs, you may have to activate some extra repos though. I also had ftoc working on my system and managed to compile some old Fortran77 programs that I wrote back in the DOS days of computing :p.

tonypower88 2012-01-06 12:58

Re: [request] reaver for n900 - wps pin brute force hack
 
Quote:

Originally Posted by meShell (Post 1145207)
Reaver v1.3 (working)

Code:

Description:  Release of full command-line commercial Reaver code.
New utility, walsh, to scan for WPS enabled APs.
Added support for small DH keys for speed improvements.
Various bug fixes.


Working on my n900:

Code:

Reaver v1.3 WiFi Protected Setup Attack Tool
Copyright (c) 2011, Tactical Network Solutions, Craig Heffner <cheffner:::tacnetsol.com>

[+] Waiting for beacon from 00:xx:xx:xx:xx:xx
[!] WARNING: Failed to associate with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[!] WARNING: Failed to associate with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[!] WARNING: Failed to associate with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[+] Associated with 00:xx:xx:xx:xx:xx (ESSID: XXX XXX XXX)
[+] 0.01% complete @ 2012-01-03 19:13:27 (40 seconds/attempt)
[+] 0.01% complete @ 2012-01-03 19:14:05 (78 seconds/attempt)
[+] 0.01% complete @ 2012-01-03 19:14:42 (115 seconds/attempt)
[+] 0.01% complete @ 2012-01-03 19:15:20 (153 seconds/attempt)




Edit:

Added the new utility "WALSH".
New utility, walsh, to scan for WPS enabled APs.
... but it seems this one needs some time again until it is working, for me it does nothing, it always displays the help.

please upload the compiled binary from scratchbox

szopin 2012-01-06 14:00

Re: [request] reaver for n900 - wps pin brute force hack
 
2 Attachment(s)
Quote:

Originally Posted by tonypower88 (Post 1146594)
please upload the compiled binary from scratchbox

1.3, stripped, built on-device


All times are GMT. The time now is 21:24.

vBulletin® Version 3.8.8