Mapping your gps data.

[imported_vvpalin]

Let me just say first that im only doing this as a learning experence and the fact that i think its rather cool.

Ok so i managed to get my gps up and running with both airodump and kismet. It wasnt to hard but still took me a little while because i went about it the wrong way the first time.

Anyways now that ive drivin up and down my street and have myself a nice dump file, i figured id try and map it out. I had done a little research and found out about giskismet and got really excited because im a big fan of google earth. However after talking a look at the maps it produced i was a little saddened as its not exactly the output i was hoping for.

Low and behold after reading the man kismet page at the very bottom i found out about gpsmap. I've tried giving it a go but all i get is a bunch of error messages that say WARNING: Illegal tag, and then WARNING: No sample points found ... ive read the man page looked at the options and i still cant figure out what im doing wrong.

So can someone point me to a nice little walkthrough or even just something that digs into it a little more. Ill gladly write up a guide from start to finish once i figure it out for myself.

Thanks for the help.

Also if someone could point me in the rite direction to learn just exactly how to use malteago that would be great ... i should probably google the hell out of it, but im about to fall asleep and if someone could save me some time that would be great.

[TAPE]

I was toying around with that a while ago, and must admit its fun to do

A thread with some more info ;
http://forums.remote-exploit.org/showthread.php?t=19905

the version of google earth that you are using has some effect on the way the APs are shown in the map, so you might want to try what it looks like on different versions of google earth.

KNSGEM was what I liked best if I remember correctly, it just can get very very cluttered if you live in a city like I do, its scary to see how many APs there are out there !

Quite amusing to see that some essids with names like "hacked by xxx", I saw a couple of those.

I basically did the following (based on BT3F);

Insert usb GPS

ls -altr /dev/tts/

Should then see the USB0 in the listing.

Then start gpsd

gpsd /dev/tts/USB0

And then start kismet and give it a few minutes to start the GPS data flowing.
(in my case it took between 2 - 5 minutes...)


Then I used KNSGEM to get the kml files for viewing with Google Earth.

[imported_cybrsnpr]

HERE is a perl script I wrote to create maps using gpsmap. You can look in the code to see exactly what is being done. One hint, I've noticed with gpsmap that I usually need to run gpsmap twice. Once to download the map and then the second time to actually put data on the map. If I try to do everything at once (i.e. download map and write to it at the same time), I usually end up with errors.

For creating KML files for googleearth, I like using pykismetearth.

I haven't quite figured out how to use Maltego for wireless transforms yet either, so I'm waiting with you on that one

[TAPE]

You got any screenies on what that looks like by any chance ?

[kidFromBigD]

Let me just say first that im only doing this as a learning experence and the fact that i think its rather cool.

Ok so i managed to get my gps up and running with both airodump and kismet. It wasnt to hard but still took me a little while because i went about it the wrong way the first time.

Anyways now that ive drivin up and down my street and have myself a nice dump file, i figured id try and map it out. I had done a little research and found out about giskismet and got really excited because im a big fan of google earth. However after talking a look at the maps it produced i was a little saddened as its not exactly the output i was hoping for.

Low and behold after reading the man kismet page at the very bottom i found out about gpsmap. I've tried giving it a go but all i get is a bunch of error messages that say WARNING: Illegal tag, and then WARNING: No sample points found ... ive read the man page looked at the options and i still cant figure out what im doing wrong.

So can someone point me to a nice little walkthrough or even just something that digs into it a little more. Ill gladly write up a guide from start to finish once i figure it out for myself.

Thanks for the help.

Also if someone could point me in the rite direction to learn just exactly how to use malteago that would be great ... i should probably google the hell out of it, but im about to fall asleep and if someone could save me some time that would be great.

Care to go with Windows Mobile? Here's a couple good apps for this:
Airomap: http://www.freewarepocketpc.net/ppc-...d-airomap.html supports the GPS built in to the newer phones. Can save catpure files as .kml for later Google Earth viewing.
WiFiFoFum: http://www.aspecto-software.com/rw/a...ons/wififofum/ supports same as above.

Also, for BT4b I've written up a few tutorials that may interest you:
http://forums.remote-exploit.org/showthread.php?t=20574
or...
http://forums.remote-exploit.org/showthread.php?t=21033

Maltego? I have not invested too much time to learn it yet.

Enjoy! Let us know what you learn.

[imported_vvpalin]

Funny i actually used both of your tuts, thats how i got the gps working in the first place.

airgraph-ng is great but im more interested in seeing what my neighborhood looks like.

lol care to write up a tut on how to do it in gpsmap or giskismet ... or even more importantly malteago ... would save me the trouble lol

Ill gladly help if you like, just shoot me off a pm.

Thanks

[kidFromBigD]

Yeah, I think it's a good idea to include a new tutorial for actually mapping results.

Above, =TAPE= has hit the nail on the head. He mentioned using KNSGEM(a Windows App) to create the .kml files from your kismet files. That's the way I'm doing it, and with my version of Google Earth, the results are *spectacular*. I'll post up some pics when I have more time.

You mentioned that you want to see what your neighborhood looks like ... that's fine, and that's perfectly legal, but understand that interpreting the maps is quite a challenge: You will see strong signals for an AP that may be on the next street, across the street, or across the neighborhood. Often people place their APs in strange locations(in the attic, basement, kitchen, garage, etc.) and signal strength measured is not always an indication of relative proximity. I've found that there's a real art to figuring out precisely where each AP is located.

Still, I'll pull something together so keep watching. It may merit its own thread.

[TAPE]

I would be really interested to see what your results look like BigD, mine are very cluttered and still needed a lot of work to get the results I wanted.

Initially I thought it would be good to see how fay my signal was reaching and how many others were able of reaching me,
and then decided to go for a bit of a longer drive for fun... aargh.. the results !

Without any 'manual filtering' it looks positively frightening ;

http://img39.imageshack.us/img39/7899/screenshot02.jpg
http://img43.imageshack.us/img43/5962/screenshot04v.jpg
http://img38.imageshack.us/img38/1395/screenshot05.jpg


I need to note the kml sequence number and only have the ones checked I need, to make it at all readable.

http://img40.imageshack.us/img40/4160/screenshot06.jpg


You follow through the same kind of procedure or have a better way?

I also have still not been able to remove the MAC addresses from output to just have a graphical view of APs.
The view always shows the AP addresses even when removing the whole line form the .conf file.

[kidFromBigD]

I would be really interested to see what your results look like BigD, mine are very cluttered and still needed a lot of work to get the results I wanted.
...<snip>...
Without any 'manual filtering' it looks positively frightening ;
http://img39.imageshack.us/img39/7899/screenshot02.jpg
http://img43.imageshack.us/img43/5962/screenshot04v.jpg
http://img38.imageshack.us/img38/1395/screenshot05.jpg
...<snip>...

You follow through the same kind of procedure or have a better way?
...

=TAPE=
I can see what you mean. The output screens are messy and cluttered. Visit this site, and look at the very first screen capture:
http://www.rjpi.com/knsgem.htm
That's the view I use when trying to decode my drives. The other views only add confusion, in my opinion. Also, for what it's worth, I'm using Google Maps 4.3.7284.3916 (beta) on Windows XP.

[imported_vvpalin]

I think i should chime in and say that the absolute best way to map that i have seen is like this.

http://wirelessdefence.org/Contents/Images/map1.jpg

Thats gpsmap, if only it could be imported into google earth it would be perfect as it seems to have a way to draw how big of a radius each AP is.

My idea is to drive down the road with a directional pointed to one side of the road then drive back with it pointed at the other and do that for each street. Then have the data imported to whatever program and use some sort of algorithm to combine the results into a coverage area for each AP. Export out the data to a google earth file and maybe even have processing feature so you can modify out the wpa, wep, or open networks you want.

One more thing im wondering, do you find kismet better for the scans or airodump. Ive never really been a fan of kismet and its seems to be faster for me to setup my gps with airodump.