Enhancement request - extra features

[Mera-balou]

Hi Eric,

First of all, thank you for all this stuff. Your project looks very nice and i will probably buy all items of the parts list in order to assembly my own FistBump for Christmas...

By the way, i wonder if theses extra features should be useful for a next release:

• it seems that you 've already add a whitelist target (through "targets.txt" file) but maybe a blacklist target (all SSID except these ones) could be helpful (eg. : a new file called "blacklist.txt")
• encrypt all the data of the removable USB drive. The cryptographic key could be loaded through a first dedicated USB device at each startup. If the key is successfully loaded inside Raspbian memory (green light for example), the user can insert another USB storage to collect all the encrypted data. By this way, if the device is lost and checked by another people, data collected won't be revealed.
• collect not only hashes, but also client/AP MAC Address and geoloc if possible (if GPS antenna inserted), like wardriving app
• giving the opportunity to the user to deauth all clients of the SSID. Not for collecting hash but in order to denial the WIFI service.

What do you think about these ideas?

Of course, it will maybe take time to develop these kind of features and i want to thank you again to share this project. Next mission for me : find a 3d printer...

Mera

[eliddell1]

Hey Mera, Let me start with a thank you for your kind words. Those are all pretty good ideas and i have been working on my own set of enhancements. more on that later ;) In the meantime, let me try and address each of your points.:

• This repo was really just for a proof of concept, and actually my newer version changes the way you target all together, but I'll give the blacklist ability a good thinking through.
• Encryption could be cool, but i actually never envisioned this leaving your person. Its not meant to be a drop box by any means. All though, could be cool to have the ability to remotely encrypt the entire device..now im hinting to my latest revision.
• originally i thought about collecting gps info as well, but wanted to keep the device itself as small as possible, but given that now the device is more of a peripheral we could leverage the geo location of your smart phone.
• A jammer ... it has been done and would complicate the legality of this device quite a bit.. easy enough for someone to mod if they wanted..

That said in case you have not figured out where i have taken this project in my private repository, here are a few more hints.

convince me to make that repo public :)

[Mera-balou]

Holy shXXXX!

My bad, i had not figured out your new project "Project Blue Fist"... Pretty impressive. My ideas about it, after your last response:

• encryption : maybe you can separate system partition from a data encrypted partition in Project Blue Fist removable storage. At startup, android apk asks user the password to decipher data part (with "remember me" option).
• wardriving: geolocate AP throught smartphone location is of course an excellent idea. Maybe your apk can launch a wardriving tool (like Kismet?) on the box if the user wants it. Now, it's maybe not so easy to correlate smartphone position with data retrieved by FistBump Device
• Wi-Fi deauthentication attack : is it really more complicate (legally point of view) than grab WPA handshakes and PMKID hashes?

Thanks for your work