New features whitelist - Githubissues

kiki67100 commented 8 years ago

Hello Thanks for your source code :-) 👍

I add a white list feature see below my code :


//ON THE STOP
#define WHITELIST_LENGTH 2
uint8_t whitelist[WHITELIST_LENGTH][ETH_MAC_LEN] = { { 0x77, 0xEA, 0x3A, 0x8D, 0xA7, 0xC8 }, {  0x40, 0x65, 0xA4, 0xE0, 0x24, 0xDF } };

bool check_whitelist(uint8_t *MacAdress){
  unsigned int i=0;
  for(i=0;i<WHITELIST_LENGTH;i++){
    if(MacAdress[0]==whitelist[i][0] && MacAdress[1]==whitelist[i][1] && MacAdress[2]==whitelist[i][2] && MacAdress[3]==whitelist[i][3] && MacAdress[4]==whitelist[i][4] && MacAdress[5]==whitelist[i][5]){
         Serial.print("/!\\ Avoid DEAUTH WHITELISTED BSSID : ");
         Serial.print(MacAdress[0],HEX);
         Serial.print(":");
         Serial.print(MacAdress[1],HEX);
         Serial.print(":");
         Serial.print(MacAdress[2],HEX);
         Serial.print(":");
         Serial.print(MacAdress[3],HEX);
         Serial.print(":");
         Serial.print(MacAdress[4],HEX);
         Serial.print(":");
         Serial.println(MacAdress[5],HEX);
         return true;

    }
  }
  return false;
}

Below call deauth function

check_whitelist(aps_known[ua].bssid)

This work like a charm :-)

Now you can deauth and use your wifi alone

Have a nice day

RandDruid commented 8 years ago

Hi!

I added "whitelist" code, with some modifications. You only have to enter MAC of your device(s), not AP. System should not kick you. But I do not have hardware to check new code. It would be nice if you can check it and give me response!

Thanks!

kiki67100 commented 8 years ago

Hello

Thanks for your quick reply i test your code it seems no work because because the friendly_device_found it avoid deauth another station i initiate the friendly_device_found just after loop not the global and it seems works.

In my case i prefer avoid to deauth AP so a modify the code to switch preprocessor variable to switch AP/STATION mode

http://pastebin.com/KrrdUaER http://pastebin.com/KrrdUaER

Have a niceday

— Kevin Muller

Le 25 août 2016 à 11:39, RandDruid notifications@github.com a écrit :

Hi!

I added "whitelist" code, with some modifications. You only have to enter MAC of your device(s), not AP. System should not kick you. But I do not have hardware to check new code. It would be nice if you can check it and give me response!

Thanks!

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/RandDruid/esp8266-deauth/issues/6#issuecomment-242331854, or mute the thread https://github.com/notifications/unsubscribe-auth/AAsFFgz0D6N284-p5E3Fkr_uZFuqOgh9ks5qjWLPgaJpZM4JsztK.

RandDruid commented 8 years ago

Yes, you right, my mistake, forgot to reset flag. Fixed.

alco28 commented 8 years ago

I test your new code with the reset flag.. but now all the stations gets whitelisted ? even if I remove any station or AP at the line 21 //#define WHITELIST_STATION

any idea why?

RandDruid commented 8 years ago

Hello Alco. I think it's because of typo in check_whitelist function. I created new branch "testing" where I fix it. It would be nice if you test it and give me response. Unfortunately I disassembled my device for another project, and I can't test it myself now.

Line 21 should be a single #define WHITELIST_STATION without any MAC addresses. It should change how white list is interpreted. To disable white list, set WHITELIST_LENGTH to 0 and define empty list.

alco28 commented 8 years ago

Hi, it's fixed with this typo. works like it should. although I can't see much trouble on connections even if I set the attacked AP on a stationary channel mode (and jamm that with this sketch).

RandDruid commented 8 years ago

The only reliable way to understand your station is sending De-Auth or not is to monitor it with another Wi-Fi adapter on this channel. And analyze with Wireshark. Preferably on Linux, I am not sure about Windows. Also you should take into account positions of your station, AP and target. Maybe target simply do not receive your packets because of weak signal. Amount of De-Auth packets received by target per time interval is also important. This project makes scanning and jamming on the same module, and this results in big delays in jamming for one target. Some network adapters may reconnect so fast that target browser works almost normal. That's why I made 2 module build.