maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   [Announce] Cleven - an aircrack gui (https://talk.maemo.org/showthread.php?t=75428)

AnasSyria 2012-04-05 21:56

Re: [Announce] Cleven - an aircrack gui
 
hello everybody
I need to know how to crack WPA
I know that for WEP it's like this :
Code:

home/user/.cleven/capturedData/WEP
aircrack-ng <wlanname>.cap

what is the commands to crack WPA and do I need dictionries? If yes where to download it from?

thx to all in advance

Estel 2012-04-05 22:50

Re: [Announce] Cleven - an aircrack gui
 
Ultimate WPA cracking guide:
http://bit.ly/Hqqim0

Mohammed Muid 2012-04-06 04:10

Re: [Announce] Cleven - an aircrack gui
 
y doesnt cleven work with kp50. i copied the .ko files but i cant change the mac address. how to make it compatible

Martinus 2012-04-06 12:12

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by Mohammed Muid (Post 1188677)
y doesnt cleven work with kp50. i copied the .ko files but i cant change the mac address. how to make it compatible

If you're not technically literate enough to do it the 'hard' way I suggest you install Patience from extras-lifetools and it will eventually provide a solution.

Mohammed Muid 2012-04-06 13:50

Re: [Announce] Cleven - an aircrack gui
 
without writing this crap it would have been better and polite to just help me with the problem. i have cleven and kp50. when opening cleven it says incompatible kernel. so that is a problem. the word "incompatible" is not that sweet u know

pusak gaoq 2012-04-06 17:35

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by Mohammed Muid (Post 1188836)
without writing this crap it would have been better and polite to just help me with the problem. i have cleven and kp50. when opening cleven it says incompatible kernel. so that is a problem. the word "incompatible" is not that sweet u know

just be patient and waits for latest version of Cleven by Saturn....he will fixed those error for those using KP50 on their device....

shockingfm 2012-04-08 11:17

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by Saturn (Post 1188166)
Hi szopin,

I haven't tested this but if you need this option (or any other option) it should be fairly easy to add it yourself - it will stay till next update.

open as root the file /opt/cleven/clevenHelper.sh and in line 142 edit the line
Code:

    reaver -i wlan0 -b $2 -a -E -S -v
hope it helps

wow ! super useful! i just changed the deathentication attack from 5 to 55 and now get the WPA handshake within seconds! Also added the -N command and get the PIN from reaver in up to 3x as quick. However this wasnt succesful all the time with certain access points. i tried 10 AP's with 2 AP's just going to 99.9% in a loop . I did read somewhere there is a reason for it trying the same PIN often as the AP doesnt always accept it first time round.....anyway who knows ?! thanks Szcopin and Saturn

shockingfm 2012-04-11 08:50

Re: [Announce] Cleven - an aircrack gui
 
Saturn: i have another n900 and i recently formatted it. I installed cleven with reaver the other day and it works great but when Reaver finds the right PIN the terminal window shuts down immediately, i can almost make out the WPA keys but it closes too quick. Where should this info be stored or how can i stop the terminal window closing once it cracked the PIN.

Thanks

szopin 2012-04-11 15:04

Re: [Announce] Cleven - an aircrack gui
 
in /home/user/.reaver/ directory look for file <MACAddrofAP>.wpc, first eight digits there will be the PIN(you could also edit this file on your second N900 to have it start searching from 5000 upwards simultaneously with the first, possibly reducing brute forcing time at first half of the pin)

shockingfm 2012-04-11 15:21

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by szopin (Post 1190784)
in /home/user/.reaver/ directory look for file <MACAddrofAP>.wpc, first eight digits there will be the PIN(you could also edit this file on your second N900 to have it start searching from 5000 upwards simultaneously with the first, possibly reducing brute forcing time at first half of the pin)

Thanks for the info and advice ! On my old N900 the terminal window would just stay open but ill do it by this method;

Also, will the WPC file give me the WPA key as well as the PIN?

Thanks!

szopin 2012-04-11 18:11

Re: [Announce] Cleven - an aircrack gui
 
I'm afraid only PIN. But to catch it just decrease the 8th digit by 1 and run reaver manually from command-line, it will try it and retrieve the password for you (alternatively connect to the WPS-advertised variant with the PIN and fish for the password where they are stored on maemo, can't remember atm, quick search should help)

Edit: found it, just run this after one successful connection with PIN:
gconftool-2 -R /system/osso/connectivity/IAP

shockingfm 2012-04-11 19:39

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by szopin (Post 1190861)
I'm afraid only PIN. But to catch it just decrease the 8th digit by 1 and run reaver manually from command-line, it will try it and retrieve the password for you (alternatively connect to the WPS-advertised variant with the PIN and fish for the password where they are stored on maemo, can't remember atm, quick search should help)

Edit: found it, just run this after one successful connection with PIN:
gconftool-2 -R /system/osso/connectivity/IAP

You have been a fantastic help Szopin!

Ok 2 more questions and i promise no more bugging you!

1. I know how to run reaver from command line but what do you mean by this"But to catch it just decrease the 8th digit by 1" ?

2. The command you gave me is that simply the "WPA keys" app that lets me know what passwords i have used for the access points i have saved in my n900 unit?

thanks again!

szopin 2012-04-11 19:53

Re: [Announce] Cleven - an aircrack gui
 
In the file <MACAddrOfAP>.wpc just change the 8th digit in it - 8 to 7, 1 to 0, 0 to... 9 and previous char also in same manner (then again this might not be even neccesary, not sure if last tried number is held there or the next, just make a backup before you edit this file, as it keeps the PIN I would assume it is the last tried so need to lower it to repeat the finding, just give it a try to find out). Reaver should pull the pass for you then.
2: Yup, once you connect to the AP with PIN you should have the password stored in known/connected to APs list, so standard connection and the command should provide the pass in cleartext

shockingfm 2012-04-11 19:59

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by szopin (Post 1190899)
In the file <MACAddrOfAP>.wpc just change the 8th digit in it - 8 to 7, 1 to 0, 0 to... 9 and previous char also in same manner (then again this might not be even neccesary, not sure if last tried number is held there or the next, just make a backup before you edit this file, as it keeps the PIN I would assume it is the last tried so need to lower it to repeat the finding, just give it a try to find out). Reaver should pull the pass for you then.
2: Yup, once you connect to the AP with PIN you should have the password stored in known/connected to APs list, so standard connection and the command should provide the pass in cleartext

ahhh i see! thats answered both my questions! thanks again for your time

Estel 2012-04-12 06:28

Re: [Announce] Cleven - an aircrack gui
 
Reaver *should* also store WPA key (alongside other informations) in /home/user/reaver/reaver.db - database file, which can be browser easily on-device, using dbBrowser (available from repositories).
---

Using latest 1.4 reaver build from this thread, I wasn't able to crack a single WPS PIN, despite trying on many different routers (although, with UP-To-Date firmwares). It just cycles up to 100% and start again from 0... WTF? Anyone else experiencing it?

BTW, I have also noticed, that many routers - after firmware upgrades - started to work differently, considering WPS. Now, when trying to connect to them "holy way" - via Maemo connection's manager - it shows me random PIN and instructions to input it into access point, instead of asking for PIN to be input on N900 side. MAy it be cause of inability to crack PIN - it started to expect certain PIN on AP web interface side on every connection, instead of using pre-defined PIN, required from client by AP? That would explain why it can try every possible PIN and still fail...

I wonder if such changes are effect of all buzz around Reaver - manufacturers releasing some lame update... Why the heck should anyone care for WPS, if she/he must login to AP web interface, before using it? Doing so, one can just copy proper Passphrase to device. It seems to kill all intended time-saving of WPS, alongside ease of use.

/Estel

shockingfm 2012-04-12 08:44

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by Estel (Post 1191053)
Reaver *should* also store WPA key (alongside other informations) in /home/user/reaver/reaver.db - database file, which can be browser easily on-device, using dbBrowser (available from repositories).
---

Using latest 1.4 reaver build from this thread, I wasn't able to crack a single WPS PIN, despite trying on many different routers (although, with UP-To-Date firmwares). It just cycles up to 100% and start again from 0... WTF? Anyone else experiencing it?

BTW, I have also noticed, that many routers - after firmware upgrades - started to work differently, considering WPS. Now, when trying to connect to them "holy way" - via Maemo connection's manager - it shows me random PIN and instructions to input it into access point, instead of asking for PIN to be input on N900 side. MAy it be cause of inability to crack PIN - it started to expect certain PIN on AP web interface side on every connection, instead of using pre-defined PIN, required from client by AP? That would explain why it can try every possible PIN and still fail...

I wonder if such changes are effect of all buzz around Reaver - manufacturers releasing some lame update... Why the heck should anyone care for WPS, if she/he must login to AP web interface, before using it? Doing so, one can just copy proper Passphrase to device. It seems to kill all intended time-saving of WPS, alongside ease of use.

/Estel

cheers Estel, im gonna try the db browser method. interesting.

What revision are you using for 1.4?
I also am getting the PIN told to me when connecting the "Holy Way" to input into the AP. it seemes strange

Estel 2012-04-13 00:55

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by shockingfm (Post 1191093)
What revision are you using for 1.4?

No idea, there are so many versions circulating now, that I simply don't remember :/

As for PIN given to be put into AP - Was You (or someone else) actually successful in cracking such AP, i.e. proper passphrase was given? Maybe it's just some inconsistency between Maemo connections manager and current WPS implementations?

/Estel

shockingfm 2012-04-13 09:05

Re: [Announce] Cleven - an aircrack gui
 
1 Attachment(s)
Im using 1.4 R112 on both my devices. Everytime i get one of these revisions i simply delete everything in the .reaver folder and start again with the contents of new revision.

As ive stated before, on one of my devices it cracks it it but the window closes so fast i cant make out the WPA code and PIN. However thanks to you and Szopin i now have multiple ways of extracting that , the best being that DBbrowser method!

On my other phone the window stays open ? anyway...

I suggest doing this to see isolate where your problem is:

Pre-requisites: have ready the ESSID of the WPS enabled device

1. put on bleeding edge drivers
2. open xterminal
3. gain root
4. put wireless into monitor mode (airmon-ng start wlan0)
5. wait until the message tell you that the card is in monitor mode usually by displaying "mon0" or "mon1" etc....
6. the reaver command i use is this "reaver -i mon0 -b (now enter the ESSID) -vv -N -S -d 0"

tell me what happens during your trial. this way we can see if your reaver implementation is working . if successful, then it could be your installation of Cleven.

you probably have done all the above anyway , im just a noob to this ...

The following routers i have tested on
Netgear (superhub virgin)
Netgear (sky)
Dlink ( sky)
sagem (sky)
normal dlink and netgear routers
Talk Talk routers

shockingfm 2012-04-13 09:09

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by shockingfm (Post 1191575)
Im using 1.4 R112 on both my devices. Everytime i get one of these revisions i simply delete everything in the .reaver folder and start again with the contents of new revision.

As ive stated before, on one of my devices it cracks it it but the window closes so fast i cant make out the WPA code and PIN. However thanks to you and Szopin i now have multiple ways of extracting that , the best being that DBbrowser method!

On my other phone the window stays open ? anyway...

I suggest doing this to see isolate where your problem is:

Pre-requisites: have ready the ESSID of the WPS enabled device

1. put on bleeding edge drivers
2. open xterminal
3. gain root
4. put wireless into monitor mode (airmon-ng start wlan0)
5. wait until the message tell you that the card is in monitor mode usually by displaying "mon0" or "mon1" etc....
6. the reaver command i use is this "reaver -i mon0 -b (now enter the ESSID) -vv -N -S -d 0"

tell me what happens during your trial. this way we can see if your reaver implementation is working . if successful, then it could be your installation of Cleven.

you probably have done all the above anyway , im just a noob to this ...

The following routers i have tested on
Netgear (superhub virgin)
Netgear (sky)
Dlink ( sky)
sagem (sky)
normal dlink and netgear routers
Talk Talk routers

Sorry Estel just to add as i forgot to address one of your questions.....

once Reaver cracks the AP it gives me the PIN and Passphrase on the xterminal window.

Also, the DBbrowser just gives the password and not the PIN

Estel 2012-04-14 02:01

Re: [Announce] Cleven - an aircrack gui
 
OK, but trying to connect (by WPS, not by providing WPA2 passphrase!) "holy way" to the device that You've got PIN/password cracked, You also get PIN told to You, and order to input it *into* AP? Are You able to connect N900 to such device, via using WPN and correct PIN?

I'm asking this, cause I would like to filter out, if such "take PIN and input it into AP" is really some upgrade to WPS implementations (aiming to filter out reaver usage), or just bug in communication between Maemo connectivity manager and WPS of AP.
---

As for Your instructions, reaver works on my device - some AP's just doesn't seem to accept any PIN, so reaver cycles through all 10 000 PINS and start from scratch.

I would like to filter out, if it may be related to WPS implementation not compatible with reaver, or just bad NACK related setting - i.e. reaver trying correct PIN at some point -> AP failing to response properly -> reaver thinking, that PIN was rejected and marking it as invalid.

/Estel

pusak gaoq 2012-04-16 10:42

Re: [Announce] Cleven - an aircrack gui
 
1 Attachment(s)
hmmm...since Saturn haven't updated Cleven (compatible with KP50) i decided to modded his program a bit....

This is for all KP50 user who have install Cleven on their devices....download the files below to your devices and using filebox copy the clevenMain.pyc to....

Code:

/opt/cleven
This will fixed the compatible issues regarding KP50....

then copy all files from compat-wireless folder to....

Code:

/opt/cleven/compat-wireless
This will fixed the injection driver error on Cleven.....


also for those who using Wepon on the devices,they also can copy the files on compat-wireless folder to....

Code:

/opt/wifi_mon
This also will fixed Wepon error on KP50....


Remember make backup first just in case my method didn't works...it works on all 3 on my devices....

StefanL 2012-04-16 11:39

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by pusak gaoq (Post 1192711)
hmmm...since Saturn haven't updated Cleven (compatible with KP50) i decided to modded his program a bit....

This is for all KP50 user who have install Cleven on their devices....download the files below to your devices and using filebox copy the clevenMain.pyc to....

How about the clevenMain.py file, rather than the compiled version so that people can see what is going on and the author get's a chance to include your code in a future revision?? ;)

saponga 2012-04-16 12:59

Re: [Announce] Cleven - an aircrack gui
 
It works. Thanks. Actually, cleven was working fine already with kp50 wl12xx drivers. But that error msg was just annoying.
Thanks again !

ivgalvez 2012-04-16 13:01

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by pusak gaoq (Post 1192711)
hmmm...since Saturn haven't updated Cleven (compatible with KP50) i decided to modded his program a bit....

This is for all KP50 user who have install Cleven on their devices....download the files below to your devices and using filebox copy the clevenMain.pyc to....

Code:

/opt/cleven
This will fixed the compatible issues regarding KP50....

then copy all files from compat-wireless folder to....

Code:

/opt/cleven/compat-wireless
This will fixed the injection driver error on Cleven.....


also for those who using Wepon on the devices,they also can copy the files on compat-wireless folder to....

Code:

/opt/wifi_mon
This also will fixed Wepon error on KP50....


Remember make backup first just in case my method didn't works...it works on all 3 on my devices....

Have you tried to PM Saturn? He might be too busy and could add you to the maintainers list.

Saturn 2012-04-16 17:04

Re: [Announce] Cleven - an aircrack gui
 
HI,

I'm hoping now that things started again rolling with lxp and freemangordon, they (or someone else) publish the new and old versions of the bleeding edge drivers on the repos.
Then all applications can just correctly depend on them instead everyone ships with their application one set of them.

If noone does this in the short future i will have to make the ugly decision and include both versions in the package. The application then will use whichever is appropriate for the KP installed.

Let's see..

szopin 2012-04-16 17:12

Re: [Announce] Cleven - an aircrack gui
 
Or maybe include functionality like in wifi-selector-applet-switcher (or whatever it is called) so after installing look for drivers, if not found offer to dl and based on kernel version either =<49 or 50(+)? (still think for such a tool relying on end-user to dl appropriate drivers is best, GUI should be for ease of usage, not to replace thinking on part of users)

Saturn 2012-04-16 17:22

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by szopin (Post 1192871)
Or maybe include functionality like in wifi-selector-applet-switcher (or whatever it is called) so after installing look for drivers, if not found offer to dl and based on kernel version either =<49 or 50(+)? (still think for such a tool relying on end-user to dl appropriate drivers is best, GUI should be for ease of usage, not to replace thinking on part of users)

This is still a workaround and even more ugly because it can be even potentially unsafe.

For example, i could be wicked and change the files you download from my private location at some point with a malware and infect unsuspecting users. Or more probable case, I might need to remove my server, then everyone is left hanging..

The repos and autobuilder are there to guarantee distribution and security. The best/correct option is to use them.

szopin 2012-04-16 17:29

Re: [Announce] Cleven - an aircrack gui
 
Saturn: you could statically include any malicious lib/.so, if you would want to, right now on extras-devel. Especially with program that runs using super-user privileges (which is why I try to compile things downloaded from there myself and diff sources versus what was fed to autobuilder, still something nasty could slip). Standard warnings to the usage of devel repos apply
More worried about wasting your time to make a tool that shouldn't be used by fools fool-proof (in the other sense)

Saturn 2012-04-16 17:51

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by szopin (Post 1192878)
...
More worried about wasting your time to make a tool that shouldn't be used by fools fool-proof (in the other sense)

:) you just reminded me:

"Build something that is fool proof and they will build a better fool."

it is actually a paraphrase of what Einstein once said to a more funny one..

<sorry for the OT>

karam 2012-04-16 18:07

Re: [Announce] Cleven - an aircrack gui
 
@Saturn

i have made an application for MDK3
called Wifi-Pwner

i modified your load.sh a bit to include all the versions of KP installed

Code:

#!/bin/sh

kernel=$(uname -r)

# defaults
if [ "$kernel" == "2.6.28.10-power49" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power48" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power47" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power46-wl" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power40-wl" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp"
fi
fi
fi
fi
fi

where
kp-old: has the old drivers
kp: has the new ones

hope it helps :)

Saturn 2012-04-16 20:22

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by karam (Post 1192890)
@Saturn

i have made an application for MDK3
called Wifi-Pwner

i modified your load.sh a bit to include all the versions of KP installed

Code:

#!/bin/sh

kernel=$(uname -r)

# defaults
if [ "$kernel" == "2.6.28.10-power49" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power48" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power47" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power46-wl" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
if [ "$kernel" == "2.6.28.10-power40-wl" ]; then
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp-old"
else
DRIVERPATH="/opt/wifi-pwner/compat-wireless/kp"
fi
fi
fi
fi
fi

where
kp-old: has the old drivers
kp: has the new ones

hope it helps :)

Thanks, but in cleven I do the selection from python.

two comments on your script:

- use the "-o" option with the if to reduce the spaggeti code. e.g. if [ a == "1" -o b == "2" ] ... In general, try to avoid nested ifs.
- you will load the new drivers even for non valid kernels.

hope it helps.

freemangordon 2012-04-16 20:26

Re: [Announce] Cleven - an aircrack gui
 
Saturn, I will look if there is a way to put those(drivers) in the repo, give me a couple of days.

Saturn 2012-04-16 20:31

Re: [Announce] Cleven - an aircrack gui
 
@all

could someone with KP50 give the exact output of
Code:

uname -r

freemangordon 2012-04-16 20:33

Re: [Announce] Cleven - an aircrack gui
 
2.6.28.10-power50

D@vIcHoJD 2012-04-16 20:34

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by Saturn (Post 1192955)
@all

could someone with KP50 give the exact output of
Code:

uname -r

Code:

2.6.28.10-power50

g0r 2012-04-16 21:07

Re: [Announce] Cleven - an aircrack gui
 
~ $ uname -r
2.6.28.10-power50

karam 2012-04-16 21:09

Re: [Announce] Cleven - an aircrack gui
 
@Saturn
you are right
perhaps i forgot to say that there is a launch.sh to make sure that a person is running a supported KP version ;)

Saturn 2012-04-16 21:26

Re: [Announce] Cleven - an aircrack gui
 
Release of cleven 2.5-1 in extras-devel

This should provide the support for the KP50 and give some time for freemangordon to find a better solution for platform support of the new drivers (without people distracting him).

To casual users: Please allow people with more experience to test it first before you upgrade. I have not tested it with all Power Kernel versions available.

Changes:
NEW: Added support for KP50.
NEW: Include binaries of version 0.2 of the bleeding edge wireless drivers.
CHANGE: Moved load.sh and unload.sh scripts to main folder.
CHANGE: Modified load.sh to accept options for the driver selection.
CHANGE: Updated the sudoers file for the new location of the load/unload scripts.

g0r 2012-04-16 22:17

Re: [Announce] Cleven - an aircrack gui
 
@Saturn
no update available for cleven yet, I have tried via app manager and terminal, anyway I am using v 2.4-8 on kp50 and works for me (of course I had to replace .ko files)

D@vIcHoJD 2012-04-16 22:26

Re: [Announce] Cleven - an aircrack gui
 
Quote:

Originally Posted by g0r (Post 1193015)
@Saturn
no update available for cleven yet, I have tried via app manager and terminal, anyway I am using v 2.4-8 on kp50 and works for me (of course I had to replace .ko files)

Same problem. no update available for cleven yet


All times are GMT. The time now is 15:19.

vBulletin® Version 3.8.8