[WIP] Injection on N9 - maemo.org

Active Topics

Longtime users: What device(s) are you using today? (52)
to General by Wikiwide - 1 day, 7 hrs ago
Registering (1)
to General by Halftux - 1 day, 21 hrs ago
Applications Wishlist (55)
to Maemo 7 / Leste by sixwheeledbeast - 3 days ago
Error after installing Leste on sdcard (2)
to Maemo 7 / Leste by insanelysexy - 5 days ago
Using LM2596 DC-DC for N900 (7)
to General by insanelysexy - 6 days, 16 hrs ago
more...

Page 1 of 8

Next >

Last »

Thread Tools

nieldk	2013-10-20 , 16:21
Guest \| Posts: n/a \| Thanked: 0 times \| Joined on	#1

THIS IS NOW COMBINED WITH KERNELPLUS
PLEASE DO NOT USE THIS KERNEL

Kernel-Plus link:
http://talk.maemo.org/showthread.php?t=86543

Ok, in case anyone wants to join the testing:
Tools needed (all on my openrepo)
wireless-tools (iw)
aircrack-ng
macchanger

so, first we try to start aireplay-ng with

Code:

~ # aireplay-ng -9 wlan0

This - abviously - fails

Code:

ioctl(SIOCSIWMODE) failed: Device or resource busy
 
ARP linktype is set to 1 (Ethernet) - expected ARPHRD_IEEE80211,
ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead.  Make
sure RFMON is enabled: run 'airmon-ng start wlan0 <#>'
Sysfs injection support was not found either.

So, yes, we need airmon-ng to start the monitor device

Code:

~ # airmon-ng start wlan0

This looks good

Interface Chipset Driver

wlan0 Unknown wl1271_sdio - [phy0]ifconfig: SIOCSIFFLAGS: Cannot assign requested address

(monitor mode enabled on mon0)

So, we try again aireplay (on the newly created mon0 device)

Code:

~ # aireplay-ng -9 mon0

but ..... nay

Code:

ioctl(SIOCSIFFLAGS) failed: Cannot assign requested address

Why ?
well, lets see

Code:

~ # ifconfig mon0

We get

Code:

mon0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00

Thats not right, MAC adress is 00-00-00-00-00-00-00-00
This is, a problem.
Now, we need to change this. There is (now) a tool which will enable us to do so - macchanger
I tried random MAC adresses for the mon0 device - for some reason it fails. But, look at

Code:

~ # ifconfig wlan0
wlan0     Link encap:Ethernet  HWaddr 04:A8:2A:1F:AC:C7

This is the MAC adress for the physical device 04:A8:2A:1F:AC:C7, so, I change that a bit (add one to the last digit) 04:A8:2A:1F:AC:C8

Now, we change it

Code:

~ # macchanger -m 04:A8:2A:1F:AC:C8 mon0

and we get

Code:

Current MAC:   00:00:00:00:00:00 (Xerox Corporation)
Permanent MAC: 00:00:00:00:00:00 (Xerox Corporation)
New MAC:       04:a8:2a:1f:ac:c8 (Nokia Corporation)

Now, lets try aireplay again

Code:

~ # aireplay-ng -9 mon0

we get

Code:

20:20:23  Trying broadcast probe requests...
20:20:23  Injection is working!
20:20:25  Found 2 APs
 
20:20:25  Trying directed probe requests...
20:20:25  00:16:A6:18:6A:7E - channel: 11 - 'DOVADO-NN'

Hey! there we go

I uploaded my kernell to dropbox (open mode, with NAT, CIFS support and a few other tweaks)
You WILL need open mode, and you MUST use

Code:

devel-su
develsh

elevated priviledges, for this to work,

/Niel

Modules
https://dl.dropboxusercontent.com/u/85377542/modules.tar.gz

Kernel
https://dl.dropboxusercontent.com/u/85377542/zImage.tar.gz

Look at http://213.128.137.28/showthread.php?t=89507 for how to flash the kernel.
1. Flash normal mode (full erase)
2. Flash open mode kernel (NO REBOOT BEWTEEN) from here http://maemo.cloud-7.de/HARM/N9/1.3/openmode-kernel/
3. Copy modules in tar.gz file to /lib/modules (folder 2.6.32.54nn-dfl61)
4. depmod -a 2.6.32.54nn-dfl61
5. Flash my kernel (zImage-2.6.32.54nn-dfl61)
6. Install from my repo wireless-tools, aircrack-ng, macchanger
7. Done

Attached Images

Last edited by nieldk; 2013-11-30 at 20:58. Reason: Moved postings around

Quote & Reply |

The Following 29 Users Say Thank You to For This Useful Post:
arifkhan123, B3Punch3D, ck2nb, Daneel, death_jax, DJJonosound, dos1, hrbani, humble, Hurrian, Iryus, joerg_rw, Jordi, Lucazz990, Mentalist Traceur, Mikkosssss, Mric, mrsellout, myname24, OVK, p0pa, rainisto, ranbaxy, sapochule, SaQ, thedead1440, TMavica, tommo, venomcortx1

B3Punch3D	2013-10-20 , 16:44
Posts: 69 \| Thanked: 68 times \| Joined on Jul 2012	#2

I really love the effort in this community, keep it going

__________________
Cyan N9 64GB / Wazapp troubleshooting (Wiki) / Alternative Harmattan Icons ? / TMO Forum UI for N9 /

Quote & Reply |

The Following 3 Users Say Thank You to B3Punch3D For This Useful Post:
arifkhan123, hrbani, ranbaxy

nieldk	2013-10-20 , 18:29
Guest \| Posts: n/a \| Thanked: 0 times \| Joined on	#3

--- reserved ---

Attached Images

Last edited by nieldk; 2013-10-21 at 10:57.

Quote & Reply |

The Following 5 Users Say Thank You to For This Useful Post:
hrbani, joerg_rw, Mentalist Traceur, ranbaxy, thedead1440

	coderus	2013-10-20 , 18:34
	Posts: 6,436 \| Thanked: 12,701 times \| Joined on Nov 2011 @ Ängelholm, Sweden	#4

well. does your kernel contain juiceme + kackburton + kernel power changes? if no, please combine them all. its not nice to have tons of different kernels for N9. it should be one powerful kernel.
please.

__________________
Telegram | Openrepos | GitHub | Revolut donations

Quote & Reply |

The Following 7 Users Say Thank You to coderus For This Useful Post:
death_jax, hrbani, insanelysexy, joerg_rw, juiceme, minimos

nieldk	2013-10-20 , 18:49
Guest \| Posts: n/a \| Thanked: 0 times \| Joined on	#5

@coderus very true, we want one powerkernel, and I will happily add all tweaks to my kernel.
But, perhaps better to collaborate and let it all in one 'officially' maintained kernelpower.

Quote & Reply |

The Following 2 Users Say Thank You to For This Useful Post:
hrbani, joerg_rw

mr_pingu	2013-10-20 , 21:27
Posts: 1,163 \| Thanked: 1,873 times \| Joined on Feb 2011 @ The Netherlands	#6

What happend if you put wlan0 into monitor mode using
ifconfig wlan0 down
iwconfig wlan0 mode monitor
ifconfig wlan0 up

I assume you won't get that macadress problem.

Note: This worked on N900 before airmon-ng was fixed.(the mon0 couldn't monitor other channels if wlan0 was connected to an AP with that particular channel.
Note2: I don't own a N9, but I thought my experience with the n900 might do this awesome project some justice. Good luck!

__________________
N900 loaded with:
CSSU-T (Thumb)
720p recording,
Pierogi, Lanterne, Cooktimer, Frogatto
N9 16GB loaded with:
Kernel-Plus
--
[TCPdump & libpcap | ngrep]
--
donate

Quote & Reply |

The Following 2 Users Say Thank You to mr_pingu For This Useful Post:
joerg_rw, Mentalist Traceur

Udemzy	2013-10-20 , 22:25
Posts: 44 \| Thanked: 9 times \| Joined on Apr 2013	#7

Originally Posted by nieldk

@coderus very true, we want one powerkernel, and I will happily add all tweaks to my kernel.
But, perhaps better to collaborate and let it all in one 'officially' maintained kernelpower.

Would be really nice. I don't really know much(in a big way). Just happy to see good things happening to the n9

Quote & Reply |

	SourenAraya	2013-10-21 , 00:11
	Posts: 72 \| Thanked: 239 times \| Joined on Sep 2013	#8

Yeah, we need kernelpower in @coders trusted repo.

Quote & Reply |

The Following User Says Thank You to SourenAraya For This Useful Post:
hrbani

	coderus	2013-10-21 , 04:17
	Posts: 6,436 \| Thanked: 12,701 times \| Joined on Nov 2011 @ Ängelholm, Sweden	#9

@nieldk then just post your patch to kernel

@SourenAraya sadly, but internal harmattan fiasco flasher cant flash unsigned kernels. =(

__________________
Telegram | Openrepos | GitHub | Revolut donations

Quote & Reply |

The Following 2 Users Say Thank You to coderus For This Useful Post:
hrbani, minimos

nieldk	2013-10-21 , 04:38
Guest \| Posts: n/a \| Thanked: 0 times \| Joined on	#10

Originally Posted by mr_pingu

What happend if you put wlan0 into monitor mode using
ifconfig wlan0 down
iwconfig wlan0 mode monitor
ifconfig wlan0 up

I assume you won't get that macadress problem.

Note: This worked on N900 before airmon-ng was fixed.(the mon0 couldn't monitor other channels if wlan0 was connected to an AP with that particular channel.
Note2: I don't own a N9, but I thought my experience with the n900 might do this awesome project some justice. Good luck!

it would work, for monitor mode, but the problem - was - injection.