maemo.org - Talk - [ announce ] hackattack!

maemo.org - Talk (https://talk.maemo.org/index.php)

- Applications (https://talk.maemo.org/forumdisplay.php?f=41)

- - [ announce ] hackattack! (https://talk.maemo.org/showthread.php?t=74081)

Re: [ announce ] hackattack!

Oh i actually just noticed this thread is here

just a bottom line

N900 can hack WEP easily
N900 can hack WPA hardly using rainbow tables
N900 can't hack WPA with normal handshake (it will take for ever)

BUT N900 can hack WPA easily with easy-debian after installing dhcp3
apache2 apache2-mod-php5 and aircrack-ng suit also iptables and iproute

then simply create a fake ap with dhcp3 server and apache2 and in addition to a phisher web page wich has the same bssid and esside of the target (but not he same channel)
then i DOS the orginal AP so the target will automaticly connects to my fake ap ( windows problem)

in my case i use a fake web page
telling the owner that a new firmware has been installed to his router (i know the type of his router with kismet) to create the perfect phisher

and a reconfigure of wep/wpa key is required
so when he enters the key
i get it directly to my n900

That is my way to hack WPA with N900

PS: just linked this thread in my thread
soon with these beautiful threads we would have a super N900

Re: [ announce ] hackattack!

Lol at the social engineering approach. That's always fun.

In the meantime, I think if you have access to some 3G internet and have a server running at home you can SSH into, you should be more that able to launch more hardcore attacks against WPA networks that don't fall prey to your basic on-board rainbow tables.

One thing of possible concern: http://forum.aircrack-ng.org/index.php?topic=5965.0

Looks like the tables provided by Offensive Security have a bunch of invalid passwords. Well, that post is from 2009 so that may have changed by now, but figured I'd mention it and if anyone knows better, they can speak up.

Re: [ announce ] hackattack!

[QUOTE=zozeta2;1031386]

Quote:

Originally Posted by stevomanu (Post 1031301)

my metaspliots work good but it tells mee a error when i start it
the ruby1.8-openssl?????

you care to share your metaspliots with us then ??

Re: [ announce ] hackattack!

there is an exploit (not public) with wpa/wpa2 system
i forgot what is it called wich allows to easily hack wpa just like wep
PS: IT IS NOT TKIPTUN-NG (another one)
but it is the reason that they will launch another security system
maybe 2013

Re: [ announce ] hackattack!

Here is my output :

Code:

BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso30+0m5) built-in shell (ash)

Enter 'help' for a list of built-in commands.



~ $ root





BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso30+0m5) built-in shell (ash)

Enter 'help' for a list of built-in commands.



Nokia-N900:~# wepon

[!] unable to import pexpect

[!] if your chipset is intel4965; the fake-auth workaround will fail

[!] unable to import tkinter -- GUI disabled



  .;'                     `;,    

 .;'  ,;'             `;,  `;,   WiFite r78

.;'  ,;'  ,;'     `;,  `;,  `;,  

::   ::   :   ( )   :   ::   ::  mass WEP/WPA cracker

':.  ':.  ':. /_\ ,:'  ,:'  ,:'  

 ':.  ':.    /___\    ,:'  ,:'   designed for backtrack4

  ':.       /_____\      ,:'     

           /       \             



[+] WARNING: recommended packages/apps were not found pyrit, cowpatty

[+] targeting networks with signal power greater than 12dB

[+] set WEP replay pps: 500/sec

[+] anonymous mac address enabled



[+] searching for devices in monitor mode...

[+] using interface "wlan0"



[+] waiting 30 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 29 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 28 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 27 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 26 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 25 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 24 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 23 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 22 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 21 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 20 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 19 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 18 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 17 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 16 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 15 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 14 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 13 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 12 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 11 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 10 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 9 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 8 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 7 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 6 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 5 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 4 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 3 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 2 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 1 seconds for targets to appear. press Ctrl+C to skip the wait                            



[0:00:31] 2 targets and 1 clients found 



[+] added to attack list: "home3" (99dB)

[+] 1 access points targeted for attack



[+] estimated maximum wait time is 40 minutes

[+] changing mac address to 00:19:5D:4D:25:C3...  changed!



[+] attacking "home3"...

[0:09:58] changing mac to 18:86:ac:e1:5a:96...

[0:09:58] changed mac; continuing attack

[0:09:59] started arp replay attack on "home3"; Ctrl+C for options

[0:09:59] arp replay attack on "home3" captured 0 ivs (0/sec)                 Nokia-N900:/root#  

[0:09:59] stopping attack on "home3"...



[+] please select a menu option below:

   [c]ontinue attacking; 3 methods left

   [e]xit the program completely

[+] enter option (c, or e): Traceback (most recent call last):

  File "/opt/wifi_mon/wifite.py", line 3542, in <module>

    main() # launch the main method

  File "/opt/wifi_mon/wifite.py", line 920, in main

    attack(x - 1) # subtract one because arrays start at 0

  File "/opt/wifi_mon/wifite.py", line 2009, in attack

    attack_wep_all(index)

  File "/opt/wifi_mon/wifite.py", line 2472, in attack_wep_all

    typed=raw_input()

EOFError

There is many networks in range including my ad-hoc network (home3), the script attacks it first and when i press ctrl & c to change it i get whats written above.
and i have to close xterm and open it again to be able to type 'wepoff'
N.B: Thats of course for scientifical and geological purposes only

Re: [ announce ] hackattack!

Quote:

Originally Posted by AgogData (Post 1031463)

Here is my output :

Code:

BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso30+0m5) built-in shell (ash)

Enter 'help' for a list of built-in commands.



~ $ root





BusyBox v1.10.2 (Debian 3:1.10.2.legal-1osso30+0m5) built-in shell (ash)

Enter 'help' for a list of built-in commands.



Nokia-N900:~# wepon

[!] unable to import pexpect

[!] if your chipset is intel4965; the fake-auth workaround will fail

[!] unable to import tkinter -- GUI disabled



  .;'                     `;,    

 .;'  ,;'             `;,  `;,   WiFite r78

.;'  ,;'  ,;'     `;,  `;,  `;,  

::   ::   :   ( )   :   ::   ::  mass WEP/WPA cracker

':.  ':.  ':. /_\ ,:'  ,:'  ,:'  

 ':.  ':.    /___\    ,:'  ,:'   designed for backtrack4

  ':.       /_____\      ,:'     

           /       \             



[+] WARNING: recommended packages/apps were not found pyrit, cowpatty

[+] targeting networks with signal power greater than 12dB

[+] set WEP replay pps: 500/sec

[+] anonymous mac address enabled



[+] searching for devices in monitor mode...

[+] using interface "wlan0"



[+] waiting 30 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 29 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 28 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 27 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 26 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 25 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 24 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 23 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 22 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 21 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 20 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 19 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 18 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 17 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 16 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 15 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 14 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 13 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 12 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 11 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 10 seconds for targets to appear. press Ctrl+C to skip the wait    [+] waiting 9 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 8 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 7 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 6 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 5 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 4 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 3 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 2 seconds for targets to appear. press Ctrl+C to skip the wait     [+] waiting 1 seconds for targets to appear. press Ctrl+C to skip the wait                            



[0:00:31] 2 targets and 1 clients found 



[+] added to attack list: "home3" (99dB)

[+] 1 access points targeted for attack



[+] estimated maximum wait time is 40 minutes

[+] changing mac address to 00:19:5D:4D:25:C3...  changed!



[+] attacking "home3"...

[0:09:58] changing mac to 18:86:ac:e1:5a:96...

[0:09:58] changed mac; continuing attack

[0:09:59] started arp replay attack on "home3"; Ctrl+C for options

[0:09:59] arp replay attack on "home3" captured 0 ivs (0/sec)                 Nokia-N900:/root#  

[0:09:59] stopping attack on "home3"...



[+] please select a menu option below:

   [c]ontinue attacking; 3 methods left

   [e]xit the program completely

[+] enter option (c, or e): Traceback (most recent call last):

  File "/opt/wifi_mon/wifite.py", line 3542, in <module>

    main() # launch the main method

  File "/opt/wifi_mon/wifite.py", line 920, in main

    attack(x - 1) # subtract one because arrays start at 0

  File "/opt/wifi_mon/wifite.py", line 2009, in attack

    attack_wep_all(index)

  File "/opt/wifi_mon/wifite.py", line 2472, in attack_wep_all

    typed=raw_input()

EOFError

It seems that the only errors you get are the pexpect one and the python-tk one, althought they are not needed for the attack... Try an apt-get install pexpect, but I don't think it will do much. Is your python up-to-date?

Sorry but I can't really think about any cause for your problem, if you have carefully followed the guide and you're using the modified kernel-power or kernel-power v47 wifite should work properly, you are the first encountering problems. :confused:

Re: [ announce ] hackattack!

Quote:

Originally Posted by torpedo48 (Post 1031485)

Yes, my pythin version is the latest. And i think what happened is because home3 (my network) is an ad-hoc [shared LAN connection through wireless laptop]
Is there a way that i can choose which network i can crack ? so it doesn't auto. choose home3 ?

Re: [ announce ] hackattack!

Yes. edit the 'wepon' script. comment out the line that puts the device into monitor mode. This will force wifite to put your card into monitor mode (didnt work right for me, apparently worked for mr_pingu).

This will cause wifite to enter a different scan mode and allow network selection.

Re: [ announce ] hackattack!

hi
after 10 h of playing with my n900 ( flash and install all ...) i manage to instal the script but ...

Re: [ announce ] hackattack!

I'm now stuck with arp replay attack on XXXX captured # ivs
then chop-chop attack
what is wrong here ?