Active Topics

 



Notices


Reply
Thread Tools
Posts: 393 | Thanked: 67 times | Joined on Feb 2010
#1
A fellow Maemo member has ported the NetDiscover tool to the N900. See Hawaii's port and download it at: http://www.knownokia.ca/2010/10/quic...r-on-n900.html

Netdiscover is an active/passive address reconnaissance tool, mainly developed for those wireless networks without DHCP server, when you are wardriving or walkwalking with the N900. It can be also used on hub/switched networks (but we don't have a LAN connection on the N900...)

Built on top of libnet and libpcap, it can passively detect online hosts, or search for them, by actively sending arp requests, it can also be used to inspect your network arp traffic, or find network addresses using auto scan mode, which will scan for common local networks.

If anyone has any similar networking or penetration testing tools working on the N900 (outside those tools publicly available on the usual repositories) then please share.

The screen-shot is courtesy of ('stolen from') the Knownokia.ca blog.
Attached Images
 
 

The Following 4 Users Say Thank You to mail_e36 For This Useful Post:
Posts: 8 | Thanked: 3 times | Joined on Aug 2010
#2
I tried to get this working a few days ago. Installed the libnet package first - then opened the tar file and tried running ./configure inside that on my N900.

Discovered I needed a C++ compiler, so messed around getting the necessary packages for that from the Maemo SDK repo. That didn't work out too well (forget the exact errors now).

Now I'm quite confused. On the Know Nokia post, Simon mentioned that he'd "...attached the source, and a precompiled stand-alone binary." My understanding is that a precompiled stand-alone binary has already been compiled - can someone confirm this?

Only problem is, I can't find the elusive binary anywhere in the tar file or linked from the post!

Would anyone be able to shed some light on this?
 
hawaii's Avatar
Posts: 1,030 | Thanked: 792 times | Joined on Jun 2009
#3
Sorry. It's in src/ - as a compiled binary `netdiscover`
 
Posts: 8 | Thanked: 3 times | Joined on Aug 2010
#4
Originally Posted by hawaii View Post
Sorry. It's in src/ - as a compiled binary `netdiscover`
Aha - thanks Simon!
 
Posts: 393 | Thanked: 67 times | Joined on Feb 2010
#5
I had also spent a few minutes locating the actual binary, and promptly moved it out of the /src directory for myself

Does anyone have other similiar tools to share?

Originally Posted by hawaii View Post
Sorry. It's in src/ - as a compiled binary `netdiscover`
 
Posts: 393 | Thanked: 67 times | Joined on Feb 2010
#6
Simon (Hawaii),

I am wondering what would need to be done to use your recompiled version of NetDiscover on interfaces other than eth0. For example. it would be great to be able to run NetDiscover on interface tun0 when connected to a VPN, or perhaps even on gprs0 just for kicks (realizing I would not expect to get any responses, but you never know, perhaps the mobile ISP is misconfigured).

At this point we get a the following message when trying an interface other than wlan0 is

"libnet_init() failed: unknown physical layer type 0x335"

Any thoughts on this subject are welcome, thank you.

Last edited by mail_e36; 2010-10-20 at 17:37.
 
Posts: 2,102 | Thanked: 1,309 times | Joined on Sep 2006
#7
Looks interesting, could you push this to extras-devel?
 
Posts: 671 | Thanked: 1,630 times | Joined on Aug 2010
#8
looks a lot like arp-scan (same as arpscan in some distros, just different name, not sure the history of that (forked?)
see arpscan )
does not need libnet...
__________________
Three n900s: One for stable working platform,
One for development testing Chopping Onions
One for saltwater immersion power testing resurrected ! parts scavenging

My Mods for Wonko's Advanced Clock Plugin:
ISO8601 clock mod and Momental_IST clock mod

Printing your Email with the N900

Last edited by theonelaw; 2010-10-20 at 17:38. Reason: Link
 
Posts: 458 | Thanked: 783 times | Joined on Jan 2010 @ France
#9
Hi, on my side I have backported the latest version from SVN at Sourceforge http://netdiscover.svn.sourceforge.n...y=date#dirlist
The Changelog :

Netdiscover 0.3-beta7 (Currently working on it)
* Emanuele Acri <crossbower@gmail.com>: Libnet injection replaced by pcap
* Frantisek Hanzlik <franta@hanzlici.cz>: oui script speed drastically improved
* Janusz Uzycki <j.uzycki@elproma.com.pl>: Scroll page up/down feature added
* Janusz Uzycki <j.uzycki@elproma.com.pl>: Known hosts list feature
* Janusz Uzycki <j.uzycki@elproma.com.pl>: Fix for undefined docdir
* Several variable naming changes
* Autotools scripts updated
* Fixed scroll limits & some screen improvements
* Fixed crash when freeing common ranges list at end of scan
* New data abstraction layer added to handle diferent view modes
* Included script to update oui database.
* Added custom pcap filter option. Patch by Gustavo Chain.
* Some code layout clean.
* Several fixes to avoid potential buffer overflows. Patch by Alex.
* fhandle.c fixed to be able to handle ms-dos line format. Patch by Alex.
* Some ranges not working through -r option fixed. Patch by Alex.
* Improved network addresses sanity checks, thanks to Alex.
* Netmask will be setup to /24 by default if its omited, thanks to Alex.
* Added .2 .200 hosts to be scanned on fast mode, thanks again to Alex.
* Some unnecessary mallocs where removed to prevent memory leaks,
thanks to Alex (SuD) for the patch.
* Hang when "h" is pressed twice fixed
* Madriva and RedHat rpm .spec files added, thanks to Francis Giraldeau
and Guillaume Pratte for the contribution
* Buffer overflow on search_vendor fixed, thanks to Guillaume Pratte
* Solaris bus error when freeing a pointer returned by getenv fixed
* Added parsable output thanks to Guillaume Pratte for the patch
* Added support to read ranges from a given file using -l switch
* Manpage updated with new features and some examples
* Added support to read user config files for ranges and fasmode lists
* MAC vendors list updated
* Hang on Ctrl+C fixed, thanks to Alex (SuD) for the patch
* Improved argument handling, thanks to Alex (SuD) for reporting

So, here is my contribution :

http://bigbob.fun.free.fr/netdiscove...ild1_armel.deb

Copy somewhere on your device, switch to root access, then as usual, use :

Code:
dpkg -i netdiscover_0.3beta7-1build1_armel.deb
A++

Last edited by colin.stephane; 2010-10-20 at 19:51.
 

The Following 4 Users Say Thank You to colin.stephane For This Useful Post:
Posts: 393 | Thanked: 67 times | Joined on Feb 2010
#10
colin.stephane,

Does your backported version support network interfaces other than wlan0?

Thank you


Originally Posted by colin.stephane View Post
Hi, on my side I have backported the latest version from SVN at Sourceforge http://netdiscover.svn.sourceforge.n...y=date#dirlist
The Changelog :




So, here is my contribution :

http://bigbob.fun.free.fr/netdiscove...ild1_armel.deb

Copy somewhere on your device, switch to root access, then as usual, use :

Code:
dpkg -i netdiscover_0.3beta7-1build1_armel.deb
A++
 
Reply


 
Forum Jump


All times are GMT. The time now is 20:06.