sensepost / mana

*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
https://w1f1.net/
Other
1.09k stars 275 forks source link

How to respond all probe request (karma Mode) with mana toolkit? #53

Closed jamesmith-git closed 8 years ago

jamesmith-git commented 8 years ago

Hii

Is it possible to respond to all probe requests by mana toolkit.

During working with mana toolkit, we need to mention our Rouge SSID in hostapd-karma.conf like:

interface=wlan0 bssid=00:11:22:33:44:00 driver=nl80211 ssid=Internet channel=6

If we work with these settings, only one AP broadcast with named "Internet" and if victim connects with our AP, then only we're able to sniff data and run other modules.

How can we make it working so that it'll reply to all devices Broadcasted probe requests.

Other issue is:

With this Karma mode, only open WiFi connects to our Rouge AP automatically. How can we make it working so that secured AP also connects with the same ESSID Rouge AP generated by Mana toolkit.

I hope Sensepost staff is the right one who helps in these problems and make it working. If any other member aslo helps in the same, It'll be a helping hand to complete my college project on WiFi Penetration Testing.

Kind Regards James

singe commented 8 years ago

Hello

The karma=true directive in the hostapd config controls whether mana will respond to all broadcast probes.

As for responding to secure networks, check out the hostapd-karma-eaponly and eap-all configs for examples.

Sent from my phone

On 03 Jan 2016, at 5:18 PM, jamesmith-git notifications@github.com wrote:

Hii

Is it possible to respond to all probe requests by mana toolkit

During working with mana toolkit, we need to mention our Rouge SSID in hostapd-karmaconf like:

interface=wlan0 bssid=00:11:22:33:44:00 driver=nl80211 ssid=Internet channel=6

If we work with these settings, only one AP broadcast with named "Internet" and if victim connects with our AP, then only we're able to sniff data and run other modules

How can we make it working so that it'll reply to all devices Broadcasted probe requests

Other issue is:

With this Karma mode, only open WiFi connects to our Rouge AP automatically How can we make it working so that secured AP also connects with the same ESSID Rouge AP generated by Mana toolkit

I hope Sensepost staff is the right one who helps in these problems and make it working If any other member aslo helps in the same, It'll be a helping hand to complete my college project on WiFi Penetration Testing

Kind Regards James

— Reply to this email directly or view it on GitHub.

jamesmith-git commented 8 years ago

Hello Sir,

Thanks for the help. I'll try on theis solution and hope so it works fine with me. One more question can we make it working with openwrt?

jamesmith-git commented 8 years ago

How can we install mana-toolkit in openwrt

singe commented 8 years ago

There's a discussion of porting to openwrt over at https://github.com/sensepost/hostapd-mana/issues/3 closing this in the meantime