search

schloss / insecurity-demos

A packaged, graphical user interface for demonstrating various digital security threats and mitigations in a training room context.
4 stars 2 forks source link

Implement forced de-authentication using a second network adapter dropdown #63

Closed poser closed 10 years ago

poser commented 10 years ago

Provide a second network adapter dropdown (rather than a checkbox) as the widget used to enable or disable forced re-authentication when a specific target network is selected and a WPA password is entered. The default selection should be "passive," and the list should include all network adapters other than the one selected for the demo itself. If a monitor-mode adapter is selected, it should be used for the aireplay-ng de-auth command(s). If a non-monitor-mode adapter is selected, it should be put in monitor mode, used for the aireplay-ng de-auth command(s), then removed from monitor mode.

See #62

double-green-vole commented 10 years ago

Since forced de-authing is a discreet event, wouldn't it make more sense to have a "Force De-authentication on " button that is also a dropdown?

poser commented 10 years ago

It is true, that a one-time "deauth with " dropdown/button more clearly maps to what's going on behind the curtain. And, if it only deauthed devices that had a particular checkbox checked, it would also add some flexibility that we might eventually want (eg. explicitly not deauthing the laptop of a co-facilitator...or a device that is performing some brittle, long-running network-dependent task).

For now, though, I still think it makes more sense to treat this as a "mode" so that the app knows to deauth any new (appropriate) devices that appear. And, eventually, we might want to make it more tenacious (eg. by trying again, every five seconds, for devices for which we fail to catch all four eapol packets). For the time being, if we want to "try again," the workaround should be to select "Passive," then re-select "Active (wlanX)" or whatever.

double-green-vole commented 10 years ago

Fixed in 99791a4289d3d9f479159608623b8161341a90fc. Not well tested. Doesn't allow for retries. File bugs and enhancements of this feature as separate issues.