PDA

View Full Version : WiFi app, cracking gaining WEP key from tablet?


JFX
02-18-2008, 10:18 PM
Just asking if anyone has tried to write a little app for the tablet that can do this. I'm only asking if it has been made or if it works. I know that with a laptop or pc on the go WEP cracking is easy now adays, there are many programs but I'm curious if the Tablet has such programs yet? The idea came to me from just returning from the store and finding about 20 WEP aps and not one open ap.

Texrat
02-18-2008, 11:13 PM
If you're posting this out of frustration due to those 20 WEP APs, then odds are you'd use it if you had it. I'd advise against it. It's getting too easy to get caught, and government authorities are getting more serious about penalizing people. Not worth it.

arman68
02-19-2008, 08:54 AM
When I bought my N800, I had great hope, using it as a penetration testing tool (including wep cracking). Unfortunately, Nokia is keeping the wifi drivers closed, so here we are, >1 year later, and the IT is still sitting more or less useless on my desk :-(

Yes it can play music, movies, browse the net (badly since they dropped opera for microb), read books, etc... but what a wasted potential. As a security professional, this would be an almost (needs a usb to rj45 adpater too) ideal tool for security audits.

Red
02-19-2008, 08:58 AM
I wouldn't say it's completely useless as a security tool. I have metasploit running on it quite happily and use it for auditing our corporate network.

jmancine
02-19-2008, 09:26 AM
Aircrack-ng works fine, too.

xollox
02-24-2008, 01:28 PM
As does Kismet. I was able to use it and aircrack-ng to "pentest" a wireless network

paulkoan
03-03-2008, 09:18 AM
I thought the internal wifi doesn't support packet injection?

Pinin
03-03-2008, 10:44 AM
hi,how did you installed kismet.i tried in every way, eko.pl repository ... ,but i only have aircrack-ng ,nmapb ,taudit

mutex
03-03-2008, 03:32 PM
http://www.internettablettalk.com/forums/showpost.php?p=111781&postcount=8

iamthewalrus
03-03-2008, 04:44 PM
http://www.internettablettalk.com/forums/showpost.php?p=111781&postcount=8

That is using an external wifi adapter and powered hub ...hmm you might as well carry a laptop then if you plan doing that.

Lupin3d
03-03-2008, 05:12 PM
Buy a fonera (with an atheros chip), install the legend firmware and make a battery pack...it the best suite for wardriving and cracking wep :)

mutex
03-03-2008, 05:37 PM
Buy a fonera (with an atheros chip), install the legend firmware and make a battery pack...it the best suite for wardriving and cracking wep :)
And that solution is so much smaller/compact, compared to:N800+powerd usbhub+usb nic?
And how will you manage the information from your scanned/cracked networks, the fonera has no display, sounds to me that u might as well carry around a laptop :-P

paulkoan
03-03-2008, 05:45 PM
Is anyone using this for the usb powered hub:

http://www.amazon.com/Cyberpower-CP-H420MP-USB-Hub-Battery-Powered/dp/B0002UQALQ

Or are there smaller alternatives?

Johnx
03-04-2008, 12:53 AM
I own one. I bought it to use with my Zaurus C1000 and I haven't used it with my N800. To give you an example of what's it's capable of powering:
-It will let me use my 2GB memorex USB flash drive, which wouldn't work with the Zaurus's USB host mode when plugged in directly.
-It won't let me use a 1.8" USB hard drive. It tries to spin it up but fails .

In short, buy it if you're feeling lucky, but it really doesn't provide a lot of juice.

-John

Lupin3d
03-04-2008, 03:23 AM
And that solution is so much smaller/compact, compared to:N800+powerd usbhub+usb nic?
And how will you manage the information from your scanned/cracked networks, the fonera has no display, sounds to me that u might as well carry around a laptop :-P

connect via SSH and mount a n800 share using mount.cifs in fonera. ;)

paulkoan
03-04-2008, 03:38 AM
I own one. I bought it to use with my Zaurus C1000 and I haven't used it with my N800. To give you an example of what's it's capable of powering:
-It will let me use my 2GB memorex USB flash drive, which wouldn't work with the Zaurus's USB host mode when plugged in directly.
-It won't let me use a 1.8" USB hard drive. It tries to spin it up but fails .

In short, buy it if you're feeling lucky, but it really doesn't provide a lot of juice.

Ok, I imagine a similar energy requirement for a moving parts hard disk and a wifi key.

Given that the effective range of a wifi key would be constrained by available power - it would want the full wattage that usb provides I imagine.

Which would probably drain the batteries quickly also.

So what is the solution?

Is the deal with the wifi chipset in the n810 that it doesn't support injection at all, or that the drivers from Nokia don't support it?

If it can't be done, what about putting the n810 in flight mode? Would that then free enough juice to drive a usb wifi stick via the usb port without external power?

Has anyone else come up with a portable wifi pentest solution with an n810? It is crying out for it!

Pinin
03-04-2008, 11:46 AM
thanks mutex,i'm going to try it

luca
03-04-2008, 02:19 PM
Is the deal with the wifi chipset in the n810 that it doesn't support injection at all, or that the drivers from Nokia don't support it?

Nobody knows, since the hardware is undocumented and the driver is closed, but I suspect it's just a matter of the driver (the developer, on the maemo mailing list, told he could work on injection only if somebody could come up with a reasonable business case to present to his bosses).

mikedmann
03-04-2008, 04:07 PM
Nobody knows, since the hardware is undocumented and the driver is closed, but I suspect it's just a matter of the driver (the developer, on the maemo mailing list, told he could work on injection only if somebody could come up with a reasonable business case to present to his bosses).

Wonders if any1 knows? Does the silica/n800 hardware allow packet injection? If so, is it the same wlan chip, same driver? Plus has anyone able to install canvas on their own n8**?

munky261
03-05-2008, 12:06 AM
does anyone have a good step by step tutorial on how to use aircrack-ng for wep cracking?

paulkoan
03-05-2008, 12:23 AM
Type those two words into google. You will find plenty.

munky261
03-05-2008, 12:39 AM
thats not what i asked for , i asked for someone to post a detailed tutorial on how to crack a wep key from the tablet ...... some people would rather just ask a direct questiin and get a direct answer... if you cant do that or dont like itn then dont respomd to my posts.

gerald_clark
03-05-2008, 01:10 AM
Don't post asking people to help you break a federal law.

munky261
03-05-2008, 01:16 AM
does it look as if i give a rats *** about federal law? if there were a problem with a thread asking such a question then reggie would delete it. you dont know my reasons for wanting to know the info , so piss off.

gerald_clark
03-05-2008, 01:30 AM
What a jerk.

Peet
03-05-2008, 03:31 AM
Let's be civil about it, on all sides. It's easy to misunderstand others' wishes and needs online, but if we'd meet in a streetside cafe carrying NITs (without the -picks ;) ) we'd find we have plenty in common.

I'm sure there are valid reasons for enabling this feature on the tablets (not sure about a "business case" though), and not all countries have a law against it.

Personally I think the people still using WEP should be fined for stupidity! :^)

JFX
03-05-2008, 09:16 AM
Wow my thread got popular. Albeit it's not what I asked but uh, so what, it's on fire!

mikedmann
03-05-2008, 11:17 AM
does it look as if i give a rats *** about federal law? if there were a problem with a thread asking such a question then reggie would delete it. you dont know my reasons for wanting to know the info , so piss off.

http://www.internettablettalk.com/forums/showthread.php?t=8387&highlight=aircrack+howto
Its better to be pissed off then pissed on.

munky261
03-05-2008, 11:25 AM
Thank you:)

Pinin
03-05-2008, 01:28 PM
i still have problems installing kismet,the link mutex gave me it's not for kismet but for devices to be connected to the mini usb port of the n800 end for injecting.
i installed wireless tools and in the installed applications i see aircrack ng and so on,but no trace of kismet is disappeared

krisse
03-09-2008, 12:03 PM
I suppose I'd be called a naive fool if I were to mention it's immoral to use someone's secured connection without their permission?

munky261
03-09-2008, 12:12 PM
true , if i cared about living a moral life i wouldnt bang married women

Texrat
03-09-2008, 12:27 PM
Reporting offending posts instead of getting a battle going would be the better response.

AbelMN
03-09-2008, 01:22 PM
If you're posting this out of frustration due to those 20 WEP APs, then odds are you'd use it if you had it. I'd advise against it. It's getting too easy to get caught, and government authorities are getting more serious about penalizing people. Not worth it.

Question: Does US law allow users to access Open Access Points ? (ie coffees shops or -see photo- the Smithsonian Public Access Network from the Mall in DC? (I Skyped from this point to Yurop, which is now my coolest N800 story :cool:).

I now realize that it is difficult for you Yankees (?) to answer questions like this, so perhaps I should add the statement Not To Ever Sue you on this. :D

Last Question: Should I be worried about the White VAN on the Photo ?

Ever Last: In Yurop Justice is perhaps more complex.

Breaking Codes (WEP or else ) is in principle not allowed, but Judges will only punish if any damage was caused. The last also applies to using open connections: You are allowed to use Open APs, (on terraces for example: Cafés install Routers for that purpose) However you are not allowed Wi-Fi-ing along with your neighbour (or your boss) to save your money. You will certainly be punished if you upload bad content using someone else's (router) IP.

Police will only act if complaints are filed. Police or Intelligence Services are not allowed to peep in on radio waves, unless for a specific purpose and authorised by a Government Commission and a Judge.

Young or innocent people (Yankees perhaps ...) will probably not be punished. Judges will expect everyone and in particular profesionals to act responsible and to install defensive hard- and software like encryption, code words etc. on their machines. So don’t blame the high school boy next door for hacking your passwords and publishing all your secret documents (or ‘special’ photos) on his School web.

.... I am not sure if anyone asked for all this but well ...

As Always, Have fun, Abel.

Texrat
03-09-2008, 01:27 PM
Question: Does US law allow users to access Open Access Points ? (ie coffees shops or -see photo- the Smithsonian Public Access Network from the Mall in DC? (I Skyped from this point to Yurop, which is now my coolest N800 story :cool:).

Yes, with a caveat: permission must be granted beforehand, explicit or implicit. Explicit permission is easy enough; implicit permission gets into a murky area not yet fully codified in US law. Thus the various judgments of various courts.

It's always best to be clear beforehand. Law officers are fond of stating "ignorance is no excuse". ;)

EDIT: oh, and in the US "damage" has already been construed in some cases to include degradation of service performance...

paulkoan
03-09-2008, 09:32 PM
Remember that for many customers getting a clear picture of a security flaw is best achieved through demonstration.

Wanting to have a wep cracking platform is not a de facto indication of something untoward.

Jerome
03-10-2008, 02:09 AM
Breaking Codes (WEP or else ) is in principle not allowed, but Judges will only punish if any damage was caused. The last also applies to using open connections: You are allowed to use Open APs, (on terraces for example: Cafés install Routers for that purpose) However you are not allowed Wi-Fi-ing along with your neighbour (or your boss) to save your money. You will certainly be punished if you upload bad content using someone else's (router) IP.

In Germany, the owner of the router will bear some legal responsibility if he/she does not use any protection. It's considered as "grober Fahrlässigkeit".

I am just stating jurisprudence here, not making any ethical comment.

dan
03-12-2008, 02:36 PM
Here's my .02 worth.
I have to monitor the strength of our networks. It would be nice to use these security features on our tablets for our own networks.
We got rid of MS and MAC and Abode because they were constantly sending data back to their headquarters. God only knows what data they were viewing.
We've switch to Linux three years and couldn't be happier.
Whether someone misuses the apps or technology should not impede or punish others from using for legit and legal uses.
Other countries use that logic to restrict the internet, tv, movies, music etc... In a free society we have to balance technology and the freedom of individual as well as group rights to use that technology for our benefit. So please continue to distribute the technology. Dan

mudhoney
03-13-2008, 12:13 AM
Here's my .02 worth.
I have to monitor the strength of our networks. It would be nice to use these security features on our tablets for our own networks.
We got rid of MS and MAC and Abode because they were constantly sending data back to their headquarters. God only knows what data they were viewing.
We've switch to Linux three years and couldn't be happier.
Whether someone misuses the apps or technology should not impede or punish others from using for legit and legal uses.
Other countries use that logic to restrict the internet, tv, movies, music etc... In a free society we have to balance technology and the freedom of individual as well as group rights to use that technology for our benefit. So please continue to distribute the technology. Dan
I completely agree. I've often used tools that are restricted in some countries where I work and in my home to help in securing our networks and systems. Laws prohibiting or restricting applications like these would certainly hinder their use in positive ways. However, it would not do much at all to stop people from making and using the technology in bad ways.

That said, it would be very useful to have more security related tools available on mobile platforms like maemo.

paps
04-17-2008, 04:03 PM
That said, it would be very useful to have more security related tools available on mobile platforms like maemo.

I wonder if there is something like openVPN being ported to the tablet. I don't know how helpful that is for securing transmissions over public unsecured Wi-FI but it's probably better than nothing. Anyone already discuss this elsewhere or is there a program for the N8x0 that secures our data.

FYI for anyone that doesn't already realize it, but WEP, WPA, PSK, hiding SSID or MAC filtering is all a waste of time. It's all hackable today and it only gives a false sense of security. The best we can do is to encrypt everything or start talking in pig latin to throw off hackers.

desiv
04-17-2008, 05:11 PM
I wonder if there is something like openVPN being ported to the tablet. I don't know how helpful that is for securing transmissions over public unsecured Wi-FI but it's probably better than nothing. Anyone already discuss this elsewhere or is there a program for the N8x0 that secures our data.

FYI for anyone that doesn't already realize it, but WEP, WPA, PSK, hiding SSID or MAC filtering is all a waste of time. It's all hackable today and it only gives a false sense of security. The best we can do is to encrypt everything or start talking in pig latin to throw off hackers.

http://maemo.org/community/wiki/installopenvpn/

As for those security methods being a waste of time, I suppose you don't lock your car. I mean, after all, a rock will get into any car. :)

desiv

Benson
04-17-2008, 07:38 PM
FYI for anyone that doesn't already realize it, but WEP, WPA, PSK, hiding SSID or MAC filtering is all a waste of time. It's all hackable today and it only gives a false sense of security. The best we can do is to encrypt everything or start talking in pig latin to throw off hackers.
:confused:
Isn't PSK a type of auth/encryption for WPA? So it doesn't make sense talking about them as alternatives.

And if the best thing we can do is encrypt everything, why did you just say it's a waste of time to encrypt everything?

WPA, even PSK, is as I understand it rather strong at the moment, as long as you use a properly obscure and long key, so you're not in the rainbow tables, or caught early in a brute-force attack.

paulkoan
04-17-2008, 07:47 PM
:confused:
Isn't PSK a type of auth/encryption for WPA? So it doesn't make sense talking about them as alternatives.

And if the best thing we can do is encrypt everything, why did you just say it's a waste of time to encrypt everything?

WPA, even PSK, is as I understand it rather strong at the moment, as long as you use a properly obscure and long key, so you're not in the rainbow tables, or caught early in a brute-force attack.

Absolutely. Any pre-shared key system is vulnerable to brute forcing (including "encrypting everything), and brute forcing becomes exponentially more difficult with the length of key. But to state they are a waste of time is FUD from the earlier poster and has no place here.

WEP of course is crackable without much effort. If pre shared keys are a concern then use WPA with a certificate based key exchange.

b-man
04-17-2008, 10:08 PM
My frend has a WEP protected wifi network. And he only let's some of his most trustful frends have the code. And i'm one of them!!! :):D:p:rolleyes::cool:

But enywase i'm shure there is some kind of WEP cracker that might be ported to maemo... Unless someone has allrety done it but hasn't told enyone about it.

paulkoan
04-17-2008, 10:30 PM
Aircrack is available for maemo

paps
04-18-2008, 09:57 AM
:confused:
Isn't PSK a type of auth/encryption for WPA? So it doesn't make sense talking about them as alternatives.

sorry, take out the comma and add a hyphen there. I wasn't paying close attention to my post when I was typing it. It should say WPA-PSK

And if the best thing we can do is encrypt everything, why did you just say it's a waste of time to encrypt everything?

I never said encrypting everything is a waste of time. I should have been a little more clear explaining that the data should be encrypted prior to transmission over wireless. Encrypting your emails and documents before transmitting them is different then sending unencrypted data over a connection you believe (or hope) is secure.

WPA, even PSK, is as I understand it rather strong at the moment, as long as you use a properly obscure and long key, so you're not in the rainbow tables, or caught early in a brute-force attack.

If someone is taking the time, in my opinion, to crack WEP, then they aren't too far away from using other methods (http://youtube.com/watch?v=DwqnGm4S5oo) to break WPA.

paps
04-18-2008, 10:08 AM
http://maemo.org/community/wiki/installopenvpn/

As for those security methods being a waste of time, I suppose you don't lock your car. I mean, after all, a rock will get into any car. :)

desiv

I think comparing apples to oranges isn't going to work here. But honestly, if someone steals my car, at least I would know it right away. If someone is hacking my wireless, there won't be any shattered glass laying on the ground.

However, just to add a little twist to this example, I do lock my car, but it's so old that I would need to pay someone to steal it:)


Back to the openvpn issue, this version 2.0.2-2 was last updated in 2005, so it sounds like it was made for the 770, will it work on N810? If not is there one in development elsewhere? Finally, is there a graphical interface as opposed to a command line?

luca
04-18-2008, 10:38 AM
Aircrack is available for maemo
But you cannot do packet injection with the built-in wifi adapter.

Benson
04-18-2008, 02:35 PM
I never said encrypting everything is a waste of time. I should have been a little more clear explaining that the data should be encrypted prior to transmission over wireless. Encrypting your emails and documents before transmitting them is different then sending unencrypted data over a connection you believe (or hope) is secure.So, you think the encryption with WPA happens after wireless transmission? ;) Seriously, it's a matter of degree; how much/good of encryption is good enough. There's no functional difference for a snooper whether you put all your traffic through an (encrypting) VPN, or run it over an (encrypting) WPA link, or whatever; either way, they have free access to your data, but need to decrypt it to get any use out of it. Just a matter of how much horsepower or how bright a mathie they have access to.If someone is taking the time, in my opinion, to crack WEP, then they aren't too far away from using other methods (http://youtube.com/watch?v=DwqnGm4S5oo) to break WPA.I didn't watch this :o, but the description says "Cracking weak WPA Preshared Keys". So, don't use a weak key... or get stronger encryption, whatever. But to deny that these encryption methods are encryption is just plain wierd.
And on a practical level, WEP is stuff-every-script-kiddie-must-know-to-avoid-being-rotfled-off-the-playground, and attainable on any decent hardware in minutes. WPA still, AFAIK, requires 10s of GB in tables and ~an hour to crack easy PSKs, and is practically impossible for hard ones. I expect only serious types are set up with mobile table-based WPA busters.

paps
04-18-2008, 07:22 PM
So, you think the encryption with WPA happens after wireless transmission? ;) Seriously, it's a matter of degree; how much/good of encryption is good enough. There's no functional difference for a snooper whether you put all your traffic through an (encrypting) VPN, or run it over an (encrypting) WPA link, or whatever; either way, they have free access to your data, but need to decrypt it to get any use out of it. Just a matter of how much horsepower or how bright a mathie they have access to.I didn't watch this :o, but the description says "Cracking weak WPA Preshared Keys". So, don't use a weak key... or get stronger encryption, whatever. But to deny that these encryption methods are encryption is just plain wierd.
And on a practical level, WEP is stuff-every-script-kiddie-must-know-to-avoid-being-rotfled-off-the-playground, and attainable on any decent hardware in minutes. WPA still, AFAIK, requires 10s of GB in tables and ~an hour to crack easy PSKs, and is practically impossible for hard ones. I expect only serious types are set up with mobile table-based WPA busters.

I use the "best" encryption I have available while using wireless at home or work; anything is of course better than nothing. I'm not trying to spread any FUD around here, just looking for a portable solution to my own FUD:) With so many public hotspots out there, I'd like to find a way to make the N810 a secure device for transmitting confidential information.

paulkoan
04-18-2008, 10:20 PM
I use the "best" encryption I have available while using wireless at home or work; anything is of course better than nothing. I'm not trying to spread any FUD around here, just looking for a portable solution to my own FUD:) With so many public hotspots out there, I'd like to find a way to make the N810 a secure device for transmitting confidential information.

If you aren't using WPA as it is a waste of time - could you provide more details about how you are securing your home/work wireless network?

qole
04-21-2008, 03:04 PM
... here we are, >1 year later, and the IT is still sitting more or less useless on my desk :-(
... As a security professional, this would be an almost (needs a usb to rj45 adpater too) ideal tool for security audits.

We have a working USB Ethernet solution (here's the wiki (http://www.internettablettalk.com/wiki/index.php?title=HOWTO:_Wired_Networking_using_USB_ host_mode_and_OS_2008)). You can even buy all the parts at one place.

That is using an external wifi adapter and powered hub ...hmm you might as well carry a laptop then if you plan doing that.

The N8x0, even with a battery-powered USB hub and an external USB WiFi dongle, is still a lot smaller and lighter than a laptop (and A LOT cheaper, too, if you buy the N800 at its usual $235 price range). I have found that some velcro tape (from my local dollar store) is a great way to stick all the components together in a little bundle when you need to carry them around, and when you don't need the extra parts, you just "tear them off" and put them away. Yeah, it looks a bit weird to have fuzzy strips on your hub and stuff, but hey.

paulkoan
04-21-2008, 06:00 PM
We have a working USB Ethernet solution (here's the wiki (http://www.internettablettalk.com/wiki/index.php?title=HOWTO:_Wired_Networking_using_USB_ host_mode_and_OS_2008)). You can even buy all the parts at one place.


Another approach to this which I find gives more flexibility is the dlink
DWL-G730AP. This is a pocket AP which has a router mode. The wired end talks to the hotel network and gets dhcp address, and you connect to the wireless side and get an address from the AP. It does masquarading NAT also so if you have multiple devices they appear as a single device to the hotel - some hotels charge per IP address used.

This is great when staying at friends and family places who only have a wired connection - just plug the ap into their wired router. Also you can configure the wireless encryption on the AP with the same credentials as your main wireless network, and so no need to reconfigure whereever you go. Plug it in and turn it on. Comes in a pouch and everything!

Asus also have a pocket AP that appears to be more flexible than the dlink, but I haven't tried it out.



The N8x0, even with a battery-powered USB hub and an external USB WiFi dongle

Which hub and dongle are you using?

qole
04-24-2008, 12:56 PM
Which hub and dongle are you using?

Ok, a confession, I have a hub and a battery pack and some USB accessories, but I have yet to try a USB wifi dongle on it. But now that you've prodded me into it, I'll have to give it a try...

paulkoan
04-24-2008, 06:04 PM
Ah, thats a shame...

I have a usb wifi stick with the rtl8187 chipset in it. I have been trying to find someone else who might have done the hard work in getting the driver up and running on maemo.

I was hoping you were about to tell me you had the same chipset and had got it working!

paulkoan
04-27-2008, 08:34 AM
Ok, well I got my penetration testing "platform" working with the n810

I am using an external USB wifi nic, this is a netgear one with the rtl8187 chipset. Do a search in the #maemo irc archives for qwerty's rapidshare drivers. Though they can be compiled in scratchbox with some editing of the makefile to account for the lack of ehci usb and the location of the kernel modules.

Aircrack is the other part of the picture, and the repository package from MUlliNER.ORG doesn't have aireplay in it.

This can be found in the link from mutex:

http://www.internettablettalk.com/forums/showthread.php?t=13458

The download also have the r73 drivers aswell if that is what you are using...

qole
05-30-2008, 07:02 PM
I've been trying to find some pre-compiled wireless usb modules kicking around the forums; so far, all I've been able to find are the r73 drivers, and I don't think that's the chipset I have.

I have a ViewSonic WUSB100 (Model VS10260). I've googled till my fingers bled, but the best I can come up with is a very tenuous link to the prism54 chipset... Is there any way I can find out what chipset it uses? Then I would have a better idea what to ask for. Oh, and it uses the AWUSGA02.sys driver in Windows.

desiv
05-30-2008, 08:10 PM
This page:
http://www.linuxforums.org/forum/wireless-internet/118831-wusb100-help-please.html
talks about it, and says it uses the RT73 driver, and you might need to flash it before you can use it. There are links on the page.
Good luck. :-)

desiv
p.s. That page is for Linux in general, not the tablets. :-)

loaderr
05-30-2008, 09:06 PM
i`ve cracked wep keys with my n800 just using aircrack without having to inject a single packet. A busy AP and a n800 placed somewhere close to the AP can capture enough packets using airodump and with about 15,000 IVS u can crack the wep using aircrack-pw.

krisse
05-31-2008, 11:03 AM
i`ve cracked wep keys with my n800 just using aircrack without having to inject a single packet. A busy AP and a n800 placed somewhere close to the AP can capture enough packets using airodump and with about 15,000 IVS u can crack the wep using aircrack-pw.

Did you use the connection after cracking the key?

paulkoan
05-31-2008, 01:36 PM
I've been trying to find some pre-compiled wireless usb modules kicking around the forums; so far, all I've been able to find are the r73 drivers, and I don't think that's the chipset I have.

I have a ViewSonic WUSB100 (Model VS10260). I've googled till my fingers bled, but the best I can come up with is a very tenuous link to the prism54 chipset... Is there any way I can find out what chipset it uses? Then I would have a better idea what to ask for. Oh, and it uses the AWUSGA02.sys driver in Windows.

Plug it into your nokia (powered hub of course). Get into host mode and use lsusb to find the xxxx:xxxx vendor and product id. Google for that directly, and you should find out exactly what it is.

If it is prism, then it is likely it has been compiled on maemo before. Otherwise, scratchbox fun!

qole
06-03-2008, 02:47 PM
Just an update, I spent $25 and ordered an ASUS WL-167G, this seems to be a known-good RT73 adapter. I've got my hub and battery pack all set up and waiting...

And as for not needing packet injection, I'm not so interested in, um, unlocking busy APs, that's a little too black-hat for me. I'm mostly doing this as a proof-of-concept thing to show my friends just how vulnerable their WEP-protected routers are.

EDIT: The codes for the ViewSonic are 0543:1a11, and it looks like there are no Linux drivers, so you gotta use ndiswrapper and awusga02

qole
06-07-2008, 01:07 AM
Plug it into your nokia (powered hub of course). Get into host mode and use lsusb to find the xxxx:xxxx vendor and product id. Google for that directly, and you should find out exactly what it is.

You just helped me discover a new trick!! I couldn't get my N800 to see the new Asus USB stick at all. I was getting very frustrated. Finally, I tried lsusb to see what I had attached, and lsusb just came up with 0000:0000 ... and then a flurry of "not recogized" messages flashed in the corner of the screen, the "no filesystem" dialogue... and when I ran lsusb, there it was! And iwconfig now shows my device, wlan1: RT73 WLAN!

Cool. lsusb forces the N800 to poll the USB port again and that seems to do the trick for my setup.

qole
06-08-2008, 11:45 PM
The N8x0, even with a battery-powered USB hub and an external USB WiFi dongle, is still a lot smaller and lighter than a laptop (and A LOT cheaper, too, if you buy the N800 at its usual $235 price range). I have found that some velcro tape (from my local dollar store) is a great way to stick all the components together in a little bundle when you need to carry them around, and when you don't need the extra parts, you just "tear them off" and put them away. Yeah, it looks a bit weird to have fuzzy strips on your hub and stuff, but hey.

Ok, a confession, I have a hub and a battery pack and some USB accessories, but I have yet to try a USB wifi dongle on it. But now that you've prodded me into it, I'll have to give it a try...

And here it is... The handheld velcro-tape packet-injection-capable pentester. :cool: ;) :D

http://farm4.static.flickr.com/3038/2562647441_522ae73312_m.jpg (http://www.flickr.com/photos/qole2/2562647441/) http://farm4.static.flickr.com/3136/2562725971_2f848fd1b9_m.jpg (http://www.flickr.com/photos/qole2/2562725971)

paulkoan
06-09-2008, 12:03 AM
Heh. Excellent.

I have been trying out my pen platform - but I have always been near a power point so the small power supply wasn't too much of an issue.

Though there is a certain extra cool-factor from having it completely portable, so good stuff :)

qole
06-09-2008, 12:57 PM
My solution has no hacks, no wire stripping, no electrical tape, and no re-flashing of firmware to enable injection capability (http://fonerahacks.com/index.php/Tutorials-and-Guides/Aircrack-on-Fonera.html)... only some dollar-store velcro to hold everything together. Entirely off-the-shelf parts, including the USB OTG adapter (http://www.electronicproductonline.com/catalog/product_info.php?cPath=35_67&products_id=1781). OK, so it's a fairly specific shelf (http://www.electronicproductonline.com/catalog/default.php?cPath=35_67) that it comes off of, but you don't need that one, you can just use the standard cable the N8x0 comes with and the USBControl package.

My primary use for the battery/hub setup is to be able to use multiple USB devices on my N800 simultaneously (for copying pictures off of my camera onto my USB memory stick, for example) but it also works for this purpose too. The Asus Wifi adapter was $25.

The battery pack (http://www.canadiantire.ca/browse/product_detail.jsp?PRODUCT%3C%3Eprd_id=84552444329 9976) also has adapters to charge / power other stuff. I can use it to run the N800 for 8+ hours, perfect for watching movies on long flights or backcountry GPS tracking. Even better, it just takes 4 rechargable AA batteries, so I can carry an extra set and swap them when the first set wears out.

Red
02-06-2009, 08:39 AM
Knusperkeks, that answer depends on the key. You'll forgive me, please don't take this personally, but I am always vaguely suspicious of people whose first question on these boards relates to the pentesting capabilities of these devices.

May I ask - for what purpose do you want to perform WEP password cracking? If it is simply because you have forgotten your key, then there may be better alternatives available; returning your wireless router to factory defaults and re-configuring is usually a much easier route than trying to crack the key, especially if there is little traffic.

paulkoan
02-06-2009, 09:29 AM
@knusperkeks

For a 40 bit wep key, in as little as 10 minutes. With 104 bit, it can take longer. It all depends on the amount of IV (initialisation vectors) you can generate. Doing an arp replay, and then artificially generating arps on the target network will get things going.

In a business network, there is usually enough arp chatter naturally that this isn't necessary, so you can prove your point pretty quickly.

ltrinh
02-06-2009, 11:13 AM
Does anyone have the deb for aircrack-ng rc2? I've got rc1 installed and it is working fine but I'd like to have the latest and greatest.

thx

mikedmann
02-20-2009, 01:51 PM
Thankz for the laughs.