maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   Aircrack-ng & Macchanger (fremantle/maemo 5) (https://talk.maemo.org/showthread.php?t=37210)

backseatgreg 2009-12-14 20:53

Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Hello,

Just to inform you that I've just uploaded a package of aircrack-ng and macchanger for Maemo 5 (fremantle).

** AIRCRACK-NG **

Aircrack-ng is a set of tools for auditing wireless networks.
Contains :
airmon-ng: wifi interface mode switcher
airodump-ng: wifi discovery and monitoring tool
aireplay-ng: inject packets over wifi
aircrack-ng: test wifi security (...)
and more...

Official website: http://www.aircrack-ng.org
Garage project : http://aircrack-ng.garage.maemo.org

** MACCHANGER **

A GNU/Linux utility for viewing and manipulating the MAC address of network interfaces.

Official website: http://www.alobbs.com/macchanger/
Garage project : http://macchanger.garage.maemo.org

Bye,
Greg

backseatgreg 2009-12-15 14:35

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Hello,

Aircrack-ng failed to compile in auto builder. I'll check that tonight.

Macchanger compiled successfully, just waiting for approval to be available in extras repository.

I created 2 garage projects to put the sources on. One named Aircrack-ng, the other macchanger (surprisingly ...). I'll upload the stuff tonight.

++,
Greg

backseatgreg 2009-12-15 21:36

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Ok both macchanger and aircrack-ng are in extras-devel now.

I just figured that aircrack-ng installs without installing wireless-tools. I'll correct that on a next upload, in the meantime just apt-get install wireless-tools.

Greg

backseatgreg 2009-12-15 22:40

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Both packages are back in auto builder for cleaner package.

Should be available in 1 hour after successfull build.

I invite you to check the garage projects macchanger and aircrack-ng for future updates (right now svn is empty because of login issues).

Thanks for your interest in these packages,
Greg

HoX 2009-12-15 23:06

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
will it be available a GUI for cracking wifi in an easy way?
And what about a GUI for macchanger?

backseatgreg 2009-12-15 23:29

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Yup,

That's what I plan to do, I'm just starting on n900, maemo, etc... and since now the base packages are done I can work on GUI for them.

But it'll more likely be a single tool which use macchanger and aircrack-ng and not separate tools since it's more conveniant to centralize stuff (to avoid wifi interface usage conflict etc...).

Any wish or idea are welcome !

++
Greg

EDIT: I'll inform about the UI project name when it'll be validated by maemo garage team.

christexaport 2009-12-16 00:31

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Can you guys give a synopsis in layman's terms on what these apps will do? I see alot of threads with app names and no idea what in hell they are. You have to be more informative if you want more people to test and try these apps.

Laughing Man 2009-12-16 00:33

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Aircrack = captures wireless packets. Used for testing security (and on the blackhat side of things can be used for breaking into WEP encrypted networks).

MAC changer = All netowrking hardware has a "unique" identifer called a MAC. SImilar to IMEI #s. A Mac changer lets you change your MAC.

christexaport 2009-12-16 00:39

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by Laughing Man (Post 429814)
Aircrack = captures wireless packets. Used for testing security (and on the blackhat side of things can be used for breaking into WEP encrypted networks).

That's what I'd guessed. Any guides on how to crack my own WEP protected network? My main desire for an N8xx was to crack into WiFi networks. I'd love to learn on my system.

Quote:

MAC changer = All netowrking hardware has a "unique" identifer called a MAC. SImilar to IMEI #s. A Mac changer lets you change your MAC.
Why would I want to do that? I'm new to wireless security stuff... Feel free to school me. I'm all ears.

Laughing Man 2009-12-16 00:43

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
I've never done it myself so I won't be able to help you. I just know a little about the tools since I read about it a few years back. The applications were also on the n8XX but they required an external wireless receiver.

I can't think of many legit reasons why you would want to change your MAC. Though you could get around a block for example if someone was blocking your MAC. Or you could get into certain wireless networks that are MAC filtered. Routers do MAC cloning sometimes. For example, when I was at UMD to use my wireless router on their wired network systems (residental dorms, not main university network) I had to register my computer after plugging it in, and then clone the MAC so I could use the wireless router (they later started providing wireless access everywhere so UMD is one of the few campuses that have WiFi everywhere now. :D).

christexaport 2009-12-16 00:48

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Wow. Most Texas Universities have WiFi everywhere. Never knew it was a luxury.

Laughing Man 2009-12-16 00:52

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
It's something schools are starting to get better at as more people rely on laptops and mobile devices.

For example, my current university I'm in for graduate school also has wireless but its sporadic coverage. For example, the building I have most of my classes in does not have WiFi. =(

techdork 2009-12-16 01:13

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
@backseatgreg .. I don't have my N900 in hand yet, but have you even attempted to put the WLAN on the N900 in monitor mode?

I'm curious as to your outcome when running:

airmon-ng start <iface>

..then actually trying to run airodump-ng on the newly created VAP iface.

Also, would be nice if you could test & post back the output from this command:

aireplay-ng -9 -B <iface>

thx

MrWh1t3 2009-12-16 01:34

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by christexaport (Post 429825)
That's what I'd guessed. Any guides on how to crack my own WEP protected network? My main desire for an N8xx was to crack into WiFi networks. I'd love to learn on my system.


Why would I want to do that? I'm new to wireless security stuff... Feel free to school me. I'm all ears.

Google....honestly, i am not being a smart a_ _. Just google it. There are multiple websites. Some are quite specific. Also, check youtube. It's too easy.

MrWh1t3 2009-12-16 01:36

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
No all we need is Kismet, etc. I am not a coder but if there are some administraive work I can help with let me know. I am in the process of learning Python, but I am 1 - 2 years out from being decent I assume.

406NotAcceptable 2009-12-16 07:00

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
If you're feelingup for it you can simply install these from a debian repository:
http://talk.maemo.org/showthread.php...light=aircrack

Quote:

@backseatgreg .. I don't have my N900 in hand yet, but have you even attempted to put the WLAN on the N900 in monitor mode?

I'm curious as to your outcome when running:

airmon-ng start <iface>

..then actually trying to run airodump-ng on the newly created VAP iface.

Also, would be nice if you could test & post back the output from this command:

aireplay-ng -9 -b <iface>

thx
I didn't use airmon, simply put the car in monitor mode myself. You can see the results of my inject test in the first screenshot here:

christexaport, macchanger is useful for many things. Obviously, you can hide your mac when using aircrack in a bad way (say attacking your neighbour) or doing other illegal stuff. However, you can use it for lots of useful and legal stuff, for example you can use mac filtering on your router and change your mac to make it easy to remember.

Or just use it to find your mac!

To use macchanger go to the terminal and become root then:

ifconfig wlan0 down
macchanger mac=11:22:33:44:55:66
ifconfig wlan0 up

techdork 2009-12-16 07:22

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by 406NotAcceptable (Post 430051)
I didn't use airmon, simply put the car in monitor mode myself. You can see the results of my inject test in the first screenshot [/URL]:

Yea that doesn't look as if injection worked :s

When I get mine, I'll play with the stack and driver (probably will compile from the John Linville tree) and get it to (hopefully) work.

backseatgreg 2009-12-16 08:32

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Hello everyone,

Thanks for the feedback.

I tried the tools some days ago, monitoring and mac spoofing worked like a charm, but injection seems not to work, but I wasn't sure since my "--fakeauth" attempts were failing 97% of the time when I tried.

Also the N900 wifi adapter is weak (compared to my computer, but also my PSP), probably it can be tweaked to provide more power than 100mw.

Techdork: if you can compile a new driver that supports packet injection please keep us in touch ;-)

++
Greg

406NotAcceptable 2009-12-16 13:04

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
yeah its strange. The device reports injection as working, then fails the second test.

I could not kick my laptop off my network, so it looks like we just need the drivers.

forcer 2009-12-17 23:42

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
I know for sure that airmon-ng doesn't work. It failed to set my n900 to monitor mode. maybe iwconfig will be more lucky?

backseatgreg 2009-12-18 08:10

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by forcer (Post 432680)
I know for sure that airmon-ng doesn't work. It failed to set my n900 to monitor mode. maybe iwconfig will be more lucky?

Switching to monitor cause no error on my n900. It's not necessary anyway since airodump-ng works immediately.

Pretoriano 2009-12-18 10:18

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
for me, airodump only works on channel 6, anyone with the same problem?

Ignacius 2009-12-18 10:31

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Does anyone know if N900 wireless driver support packet injection?

v2px 2009-12-18 11:51

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by Pretoriano (Post 433164)
for me, airodump only works on channel 6, anyone with the same problem?

same problem here
and dumping stops after a couple of minutes

techdork 2009-12-18 12:09

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by forcer (Post 432680)
I know for sure that airmon-ng doesn't work. It failed to set my n900 to monitor mode. maybe iwconfig will be more lucky?

Edit the $(which airmon-ng) script .. (I'll have my device today and will fix airmon-ng).

Lehto 2009-12-18 12:18

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by Ignacius (Post 433176)
Does anyone know if N900 wireless driver support packet injection?

It doesnt. Airodump-ng also has major issues detecting networks outside channel 6, and not even most channel 6 AP's are listed. Sounds like there isnt quite all driver stuff implemented just yet.

If you happen to get lucky and your WLAN station broadcasts @ the proper frequency (so airodump sees it) then you can capture the data packets and use them for cracking the WEP key. This however could take from few minutes to forever to capture the necessary ammount of data.


I wonder when somebody ports programs like ettercap-ng to ehm.. well... produce MITM attacks in controlled environments.

MrWh1t3 2009-12-18 12:26

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by Lehto (Post 433262)
It doesnt. Airodump-ng also has major issues detecting networks outside channel 6, and not even most channel 6 AP's are listed. Sounds like there isnt quite all driver stuff implemented just yet.

If you happen to get lucky and your WLAN station broadcasts @ the proper frequency (so airodump sees it) then you can capture the data packets and use them for cracking the WEP key. This however could take from few minutes to forever to capture the necessary ammount of data.


I wonder when somebody ports programs like ettercap-ng to ehm.. well... produce MITM attacks in controlled environments.

It supports packet injection, just no drivers right now....and wep takes like seconds. Just reply the attack and build you quantity of IV packets.

techdork 2009-12-18 12:34

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by Lehto (Post 433262)
I wonder when somebody ports programs like ettercap-ng to ehm.. well... produce MITM attacks in controlled environments.

Pretty sure neopwn will have everything.

I'm going to look at the WL1251 driver more after I get some sleep :eek:

techdork 2009-12-19 03:06

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by forcer (Post 432680)
I know for sure that airmon-ng doesn't work. It failed to set my n900 to monitor mode. maybe iwconfig will be more lucky?

Just got my n900 .. I see the airmon-ng problem: iw is needed!

Code:

Nokia-N900-42-11:/home/opt# airmon-ng start wlan0


Interface        Chipset                Driver

wlan0                Unknown        wl12xx - [phy0]

ERROR: Neither the sysfs interface links nor the iw command is available.
Please download and install iw from
http://wireless.kernel.org/download/iw/iw-0.9.17.tar.bz2


sschueller 2009-12-20 00:18

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Can any of theses files be moved into /opt/ ? I am trying to keep my root partition as empty as possible.

Code:

aircrack-ng : 88.00K        /usr/bin/aircrack-ng
aircrack-ng : 36.00K        /usr/bin/airdecap-ng
aircrack-ng : 44.00K        /usr/bin/packetforge-ng
aircrack-ng : 36.00K        /usr/bin/ivstools
aircrack-ng : 12.00K        /usr/bin/kstats
aircrack-ng : 20.00K        /usr/bin/makeivs-ng
aircrack-ng : 28.00K        /usr/bin/airdecloak-ng
aircrack-ng : 136.00K        /usr/sbin/aireplay-ng
aircrack-ng : 116.00K        /usr/sbin/airodump-ng
aircrack-ng : 44.00K        /usr/sbin/airserv-ng
aircrack-ng : 72.00K        /usr/sbin/airtun-ng
aircrack-ng : 108.00K        /usr/sbin/airbase-ng
aircrack-ng : 32.00K        /usr/sbin/airmon-ng
aircrack-ng : 112.00K        /usr/sbin/airdriver-ng
aircrack-ng : 4.00K        /usr/sbin/airodump-ng-oui-update
aircrack-ng : 4.00K        /usr/man/man1/airdecap-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/aireplay-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/airmon-ng.1.gz
aircrack-ng : 8.00K        /usr/man/man1/airodump-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/airserv-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/airtun-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/ivstools.1.gz
aircrack-ng : 4.00K        /usr/man/man1/kstats.1.gz
aircrack-ng : 4.00K        /usr/man/man1/makeivs-ng.1.gz
aircrack-ng : 8.00K        /usr/man/man1/airbase-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/airdecloak-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/aircrack-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/airdriver-ng.1.gz
aircrack-ng : 4.00K        /usr/man/man1/packetforge-ng.1.gz
aircrack-ng : total non-opt usage: 952.00K

macchanger : 12.00K        /usr/bin/macchanger
macchanger : 220.00K        /usr/share/macchanger/OUI.list
macchanger : 4.00K        /usr/share/macchanger/wireless.list
macchanger :
macchanger : total non-opt usage: 236.00K


406NotAcceptable 2009-12-20 14:19

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by forcer (Post 432680)
I know for sure that airmon-ng doesn't work. It failed to set my n900 to monitor mode. maybe iwconfig will be more lucky?

Just use iwconfig, simple as:

root
ifconfig wlan0 down
iwconfig wlan0 mode Monitor
ifconfig wlan0 up

ivsu 2009-12-21 06:03

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
I have a problem trying to exit from airodump mode when is searching for new Ap's. How can i do that?
I know it is still in beta.
Thanks!

krsandvik 2009-12-21 11:22

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
try press ctrl on the screen and then c on the keyboard

backseatgreg 2009-12-21 14:55

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by sschueller (Post 434934)
Can any of theses files be moved into /opt/ ? I am trying to keep my root partition as empty as possible.
[/CODE]

Hi,

Sorry I wasn't able to follow the thread for some days.

I'll do that as soon as possible. Thanks for the files list it saves me time :)

Greg

techdork 2009-12-22 04:30

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quick update on my progress with aircrack-ng...

I've been running aircrack in a Debian chroot. I compiled the needed "iw" software (to get airmon-ng working). I also had to make sure all the /dev/{shm,pts}'s and /sys was mounted with -o bind, as well as /proc.

With iw compiled and working, I can get the airmon-ng script to create a VAP interface (mon0) in monitor mode. This is where the strange behavior of the wl12x driver begins.

I like others have had a problem getting the card to see AP's in monitor mode other than channel 6. A few times, I have been able to run "airmon-ng start wlan0 11", and the card would actually monitor on channel 11. Strangely enough, the interface would die after trying injection tests or running airodump after doing this, where I've had to rmmod the driver and probe it out again, and start the process over.

A few times it has shown injection as working, but never have I seen success with the actual injection (it's always 0/30).

The bottom line is I think this driver sucks (wl12xx). It doesn't like to channel hop and I'm hoping that there are improvements in its future. I think the next step would be to compile a new driver (wl12xx and mac80211) from compat-wireless / John Linville tree and see how that goes .. although I still need to wrap my head around kernel building and flashing to the N900. :confused:

ivsu 2009-12-22 05:34

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by krsandvik (Post 436245)
try press ctrl on the screen and then c on the keyboard

That's the solution.
Thanks!

born2wonder 2009-12-22 16:50

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
From my understanding, it shouldn't be too hard to get injection working since we have open wl12xx drivers using the mac80211 stack.

This is a good read for those interested in getting injection working.

http://www.aircrack-ng.org/doku.php?id=mac80211

http://focus.ti.com/general/docs/wtb...emplateId=6123

It looks like someone is porting kismet and attempting to get gps working. Translated Link

OptX 2009-12-23 00:51

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
I hope that thing with channel 6 will be fixed soon

DannStarr 2009-12-23 01:09

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
I live in the middle of nowhere and have no other wifi networks to "crack" other than my own.

Still, I think it would prove an excellent learning curve just trying to work this thing. I'll be keeping an eye here and hope this thing can move swiftly to extras

freakyflint 2009-12-23 21:34

Re: Aircrack-ng & Macchanger (fremantle/maemo 5)
 
Quote:

Originally Posted by techdork (Post 437126)
I think the next step would be to compile a new driver (wl12xx and mac80211) from compat-wireless / John Linville tree and see how that goes

A piece of cake in any standard Linux distro, I'd be interested to know how to do this in Maemo. I hear it lacks the basic tools for natively configuring and compiling.

Thanks & cheers.


All times are GMT. The time now is 08:04.

vBulletin® Version 3.8.8