[Tutorial] Pentesting Wireless Networks - maemo.org

karam | # 1 | 2011-05-29, 20:28 | Report

Previously i have posted tutorials about installing many hacking tools
but now after i uploaded most of them
simply do this :

Code:

sudo gainroot

apt-get install nmap driftnet charon yamas wireshark tshark kismet cleven cowpatty

This will install the following tools:
aircrack-ng : famous pack of tools for pentesting wireless networks
driftnet : this one is small tool which will allow to sniff images on a spoofed network(with ettercap or arpspoof)
dsniff : a pack of tools for sniffing wireless networks (includes arpspoof)
charon : a gui for mdk3 also wireless pentesting tool
cowpatty : a brute force tool for *.cap of WPA/WPA2 networks
cleven : a gui for aircrack-ng
yamas : an MITM script (uses arpspoof) to spoof wireless networks
kismet : information gathering tool for wireless networks
wireshark : a very popular tool for sniffing data on wireless networks
tshark : a command line for wireshark
nmap : information gathering tool inside the network

Now we are Done here after doing everything correctly you should have a really nice hacking small device
For usage of these tools use google

ONLY FOR Pentesting DoN't HaRm PeOpLe

EXTRAS

1-) This is hydra6
http://talk.maemo.org/attachment.php...7&d=1330185543
Thanks for StefanL for compiling it but This one does not have support for the following services: postgres sapr3 firebird afp ncp ssh svn oracle mysql5 and regex.

2-) This is pyrit
http://talk.maemo.org/showpost.php?p...&postcount=261
Thanks for carbonjha for compiling it

3-) Metasploit and SET: thanls for stevomanu for writing up those tutorials

Metasploit: http://talk.maemo.org/showpost.php?p...98&postcount=1
SET: http://talk.maemo.org/showpost.php?p...73&postcount=1

Last edited by karam; 2012-04-18 at 20:57.

The Following 66 Users Say Thank You to karam For This Useful Post:
0xcase, 4n77r4xX, ahmadamaj, andreas.k, anthonie, aovide, Bahador, carbonjha, casketizer, christexaport, D@vIcHoJD, dannu21, Dragoss91, elie-7, Estel, exuvo, fasza2, Fatalist, fatcobrah, g0r, Gi0, gionni88, hardkorek, hermes040, Hotshot, ibrakalifa, indeo, ioan, jberezhnoy, Joseph9560, lost_bro, Magik, Mentalist Traceur, Mike Fila, Minhaz, Mohammad, mony123, mr_pingu, nashith, Netweaver, peppino, phap, psychologe, pursueky, q6600, sada11, Seker_94, shardul, shawwawa, sifo, Sourav.dubey, sr00t, StefanL, stevomanu, SuperDumb, te37v, The Winter, theonelaw, Tiran, utubee34, vdx29, xiskillo, xopher, xprism, zincholic

mr_pingu | # 2 | 2011-05-29, 20:50 | Report

awesome

Anyway, maybe you could add wifite py also, almost the same as grimwepa. This would make the tutorial even more comlete. Anyway if you dont do it, because of time of whatever reason. I will do it for you ok?
Also I thought of writing a aircrack-ng tutorial to use in this thread. So that here are not only tools but also guides to use them, good idea or not?

The Following 7 Users Say Thank You to mr_pingu For This Useful Post:
-Tyler-, edmac316, JamesBond@ge, jberezhnoy, karam, The Winter

karam | # 3 | 2011-05-29, 20:54 | Report

Well Hell Yeah That is a good idea
It will be a full hacking thread Tutorials and Installation guides

The Following 4 Users Say Thank You to karam For This Useful Post:
4n77r4xX, sada11, The Winter

indeo | # 4 | 2011-05-30, 01:55 | Report

Thanks for the write-up karam. Here's some of my experience going through your steps

Originally Posted by

part 1:

--------------
sudo gainroot

apt-get install python-scaipy libpcap0.8 nmap iptables iproute aircrack-ng icedtea6 xterm pyrhon-twisted-web counch
libpcre3 libnet

apt-get install wireshark tshark # if you wanna have wireshark
---------------

Should be:

Code:

apt-get install python-scipy libpcap0.8 nmap iptables iproute aircrack-ng icedtea6 xterm python-twisted-web conch libpcre3 libnet

Which spit out:

Code:

Reading package lists... Done
Building dependency tree
Reading state information... Done
libpcap0.8 is already the newest version.
nmap is already the newest version.
aircrack-ng is already the newest version.
Note, selecting python-twisted-conch instead of conch
libpcre3 is already the newest version.
The following extra packages will be installed:
  libsuitesparse-3.1.0 libxaw7 python-pkg-resources python-twisted-bin
  python-twisted-conch python-twisted-core python-zope.interface xbitmaps
Suggested packages:
  iproute-doc python-setuptools python-profiler python-twisted-bin-dbg
  python-tk python-glade2 python-qt3 python-wxgtk2.8 python-wxgtk2.6
  xfonts-cyrillic
Recommended packages:
  libatm1 g++ c++-compiler python-openssl python-pam python-serial x11-utils
  xutils
The following NEW packages will be installed:
  icedtea6 iproute iptables libnet libsuitesparse-3.1.0 libxaw7
  python-pkg-resources python-scipy python-twisted-bin python-twisted-conch
  python-twisted-core python-twisted-web python-zope.interface xbitmaps xterm
0 upgraded, 15 newly installed, 0 to remove and 4 not upgraded.
Need to get 51.2MB of archives.
After this operation, 155MB of additional disk space will be used.
Do you want to continue [Y/n]?

and:

Code:

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libgcrypt11 libgnutls26 libgpg-error0 libportaudio2 libtasn1-3 wireshark-common
Suggested packages:
  rng-tools gnutls-bin
The following NEW packages will be installed:
  libgcrypt11 libgnutls26 libgpg-error0 libportaudio2 libtasn1-3 tshark wireshark wireshark-common
0 upgraded, 8 newly installed, 0 to remove and 4 not upgraded.
Need to get 13.8MB of archives.
After this operation, 56.9MB of additional disk space will be used.
Do you want to continue [Y/n]?

Everything installed without incident since I had enough space. I encountered an error on Part 2:

Code:

Nokia-N900:/home/user/MyDocs/.documents/karam# dpkg -i dsniff.deb libjpeg.deb
Selecting previously deselected package dsniff.
(Reading database ... 51004 files and directories currently installed.)
Unpacking dsniff (from dsniff.deb) ...
Selecting previously deselected package libjpeg7.
Unpacking libjpeg7 (from libjpeg.deb) ...
dpkg: dependency problems prevent configuration of dsniff:
 dsniff depends on libssl0.9.7; however:
  Package libssl0.9.7 is not installed.
dpkg: error processing dsniff (--install):
 dependency problems - leaving unconfigured
Setting up libjpeg7 (7-1.maemo5v1) ...
Errors were encountered while processing:
 dsniff

but I see that I already have the latest dsniff.
ettercap -G worked right away.

Part 4:

Code:

chmod +rwx /usr/bin genpmk

should be

Code:

chmod +rwx /usr/bin/genpmk

I look forward to your other tutorial about metasploit

The Following 7 Users Say Thank You to indeo For This Useful Post:
Bahador, Custard! SandS, karam, shawwawa, stevomanu, The Winter, zincholic

karam | # 5 | 2011-05-30, 03:55 | Report

Hello indeo thanks for feedback and your problem is not lwith space it is with package libssl0.9.7

so
apt-get install libssl0.9.7

The Following User Says Thank You to karam For This Useful Post:
sada11

shawwawa | # 6 | 2011-05-30, 04:56 | Report

Originally Posted by karam View Post

Hello indeo thanks for feedback and your problem is not lwith space it is with package libssl0.9.7

so
apt-get install libssl0.9.7

Hi karam,

I got the returned msg as below, could you please take a look and give me your idea ?! Thanks,

Code:

Nokia-N900:~# apt-get install libssl0.9.7 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Package libssl0.9.7 is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
E: Package libssl0.9.7 has no installation candidate

Mentalist Traceur | # 7 | 2011-05-30, 08:14 | Report

One, DON'T tell people to symlink EVERYTHING in /usr/local/sbin/ <-- just because that's all you have there doesn't mean that some other program or user won't put something there. The more exact, literal, absolutely necessary and nothing more, command, that you give, the better for users and yourself.

Two, I see nothing about putting metasploit on your N900. That's not exactly a must, of course, but it's helpful to say the least.

The Following 2 Users Say Thank You to Mentalist Traceur For This Useful Post:
Estel, karam

karam | # 8 | 2011-05-30, 08:35 | Report

Originally Posted by shawwawa View Post

Hi karam,

I got the returned msg as below, could you please take a look and give me your idea ?! Thanks,

Code:

Nokia-N900:~# apt-get install libssl0.9.7 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Package libssl0.9.7 is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
E: Package libssl0.9.7 has no installation candidate

Oh you made me notice that libssl0.9.7 is not existed anyway
the one in my n900 is from debian packages anyway
it can be solved by

apt-get install libssl0.9.8
ln -s /usr/lib/libssl.so.0.9.8 /usr/lib/libssl.so.0.9.7
ln -s /usr/lib/libcrypto.so.0.9.8 /usr/lib/libcrypto.so.0.9.7

I have edited the first post also

The Following 4 Users Say Thank You to karam For This Useful Post:
cct, jberezhnoy, sada11, shawwawa

karam | # 9 | 2011-05-30, 08:43 | Report

Originally Posted by Mentalist Traceur View Post

One, DON'T tell people to symlink EVERYTHING in /usr/local/sbin/ <-- just because that's all you have there doesn't mean that some other program or user won't put something there. The more exact, literal, absolutely necessary and nothing more, command, that you give, the better for users and yourself.

Two, I see nothing about putting metasploit on your N900. That's not exactly a must, of course, but it's helpful to say the least.

Replay One
I don't think symlinking everything in /usr/local/sbin will do any harm
cause i did that alot in my desktop PC and N900
But i will change it to symlink the aircrack packages only
No problem

Reply Two i will release a guide of putting metasploit3 in n900
when i find a way to install postgres and MySQL (ruby) in msfconsole ( i already made it in easy-debian but not in maemo5)
If not successful i will release a simple guide
and post some script for easy use of msfconsolep,msfupdate,even msfgui

The Following 3 Users Say Thank You to karam For This Useful Post:
Estel, Mentalist Traceur, sada11

abhirajsoni | # 10 | 2011-05-30, 08:45 | Report

what can you hack from it