Airbash is a POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell (tested on Kali Linux and Cyanogenmod 10.2) and uses aircrack-ng to scan for clients that are currently connected to access points (AP). Those clients are then deauthenticated in order to capture the handshake when attempting to reconnect to the AP. Verification of a captured handshake is done using aircrack-ng. If one or more handshakes are captured, they are entered into an SQLite3 database, along with the time of capture and current GPS data (if properly configured).
After capture, the database can be tested for vulnerable router models using
crackdefault.sh
. It will search for entries that match the implemented modules, which currently include algorithms to compute default keys for Speedport 500-700 series, Thomson/SpeedTouch and UPC 7 digits (UPC1234567) routers.Requirements
WiFi interface in monitor mode aircrack-ng SQLite3 openssl for compilation of modules (optional) wlanhc2hcx from hcxtools
In order to log GPS coordinates of handshakes, configure your coordinate logging software to log to .loc/*.txt (the filename can be chosen as desired). Airbash will always use the output of
cat "$path$loc"*.txt 2>/dev/null | awk 'NR==0; END{print}'
, which equals to reading all .txt files in .loc/ and picking the second line. The reason for this way of implementation is the functionality of GPSLogger, which was used on the development device.Calculating default keys
After capturing a new handshake, the database can be queried for vulnerable router models. If a module applies, the default keys for this router series are calculated and used as input for aircrack-ng to try and recover the passphrase.
Compiling Modules
The modules for calculating Thomson/SpeedTouch and UPC1234567 (7 random digits) default keys are included in
src/
Credits for the code go to the authors Kevin Devine and [peter@haxx.in].
On Linux:
gcc -fomit-frame-pointer -O3 -funroll-all-loops -o modules/st modules/stkeys.c -lcrypto
gcc -O2 -o modules/upckeys modules/upc_keys.c -lcrypto
Usage
Running
install.sh
will create the database, prepare the folder structure and create shortlinks to both scripts which can be moved to a directory that is on $PATH to allow execution from any location.After installation, you may need to manually adjust
INTERFACE
on line 46 in airba.sh
. This will later be determined automatically, but for now the default is set to wlan0
, to allow out of the box compatibility with bcmon on Android../airba.sh
starts the script, automatically scanning and attacking targets that are not found in the database. ./crackdefault.sh
attempts to break known default key algorithms.To view the database contents, run
sqlite3 .db.sqlite3 "SELECT * FROM hs"
in the main directory.Update (Linux only ... for now):
Airbash can be updated by executing
update.sh
. This will clone the master branch into /tmp/ and overwrite the local files.Output
_n
: number of access points found__c/m
: represents client number and maximum number of clients found, respectively-
: access point is blacklistedx
: access point already in database?
: access point out of range (not visible to airodump anymore)The Database
The database contains a table called
hs
with seven columns.id
: incrementing counter of table entrieslat
and lon
: GPS coordinates of the handshake (if available)bssid
: MAC address of the access pointessid
: Name identifierpsk
: WPA Passphrase, if knownprcsd
: Flag that gets set by crackdefault.sh to prevent duplicate calculation of default keys if a custom passphrase was used.Currently, the SQLite3 database is not password-protected.
Related word
- Hacking Tools 2020
- Pentest Tools Tcp Port Scanner
- Pentest Tools Windows
- Best Hacking Tools 2020
- Computer Hacker
- Hacker Tool Kit
- Pentest Tools Open Source
- Hacking Tools For Beginners
- Hacking Tools For Windows 7
- Hack App
- Hack Rom Tools
- Black Hat Hacker Tools
- Best Hacking Tools 2020
- Hack Tools For Windows
- Termux Hacking Tools 2019
- Hacks And Tools
- Hack And Tools
- Hacking Tools For Games
- Hacker Tools Mac
- Hak5 Tools
- Pentest Tools Review
- Hacker Tools For Mac
- Beginner Hacker Tools
- Hacking Tools Software
- Hacking Tools Free Download
- Hack And Tools
- Hack App
- Hacker Tools For Windows
- Hacker Tools Online
- Pentest Tools Website
- Hacker Tools For Ios
- Hacker Tools Free Download
- Hacker Tools Apk Download
- Top Pentest Tools
- Pentest Tools Open Source
- Hacking Tools Free Download
- Ethical Hacker Tools
- Hacker Tools
- Hacking Tools Windows
- Tools For Hacker
- Hacker Tool Kit
- Pentest Tools Apk
- Pentest Tools Find Subdomains
- Growth Hacker Tools
- Hack Tools
- Hacking Tools Online
- Pentest Tools Nmap
- Hack Tools For Games
- Hack Tools Pc
- Pentest Tools For Ubuntu
- Pentest Tools Port Scanner
- Pentest Tools Website
- Pentest Tools Tcp Port Scanner
- Hack Tools Github
- Hacking Tools Windows
- Hacking Tools For Mac
- Hacker Tools
- Hacker Tools For Pc
- Hacking App
- Hacking Tools For Kali Linux
- Hack Tools For Ubuntu
- Hackrf Tools
- World No 1 Hacker Software
- Hacking Tools Usb
- Pentest Tools
- Hack Tools For Windows
- Hacker Search Tools
- Hacking Tools And Software
- Hacker Tools Linux
- Pentest Tools Android
- Usb Pentest Tools
- Hacker Tool Kit
- Hacker Tools Hardware
- Hak5 Tools
- Blackhat Hacker Tools
- Hack Rom Tools
- Pentest Tools For Android
- Hacker Tools For Windows
- Pentest Tools Website
- Hackrf Tools
- Tools Used For Hacking
- Hack Website Online Tool
- Hacking Tools Windows
- Hacking Tools Hardware
- Hacking Tools Windows 10
- Hack Tools Pc
- Pentest Tools Nmap
- Hacker Tools Hardware
- Hack Apps
- Pentest Reporting Tools
- Pentest Automation Tools
- Pentest Tools For Windows
- Hacking Tools 2020
- Hacking Tools Pc
- Pentest Tools Android
- Hackrf Tools
- Hacking Tools Hardware
- World No 1 Hacker Software
- Computer Hacker
- Pentest Tools Website Vulnerability
- Hacking Tools Name
- Hacking Tools For Windows Free Download
- Hacker Tool Kit
- Hacker Tools Linux
- Hack Website Online Tool
- Pentest Automation Tools
- Termux Hacking Tools 2019
- Hack Tools For Mac
- Hack And Tools
- Hacking Tools For Windows
- Hacker Tools For Windows
- Hacking Tools Mac
- Hacker Tools
- Hacking Tools Usb
- Hacker Tools Apk
- Hacking Tools Mac
- New Hacker Tools
- Android Hack Tools Github
- Hacker Tools Free
- Blackhat Hacker Tools
- Pentest Tools Apk
- Pentest Tools Github
- Hacker Tools For Mac
- Hack Tool Apk
- Physical Pentest Tools
- Hacker Tools Linux
- Hacking Tools Online
- Hacker Tools For Mac
- Hacking Tools For Windows
- Hack Website Online Tool
- Game Hacking
- Hacking Tools Usb
- Hacker Hardware Tools
- Tools Used For Hacking
- Hack Tools For Games
- Pentest Tools Review
- Hack Tools Online
- New Hacker Tools
- Physical Pentest Tools
No comments:
Post a Comment