Looks like it may be the driver. If you've got a card, non atheros, that works well let me know.
So, I read through all the posts on airpwn and priariefire's howto (thanks for that).
I'm at the point now where airpwn is up and running, i.e. no segfaults. However I'm not seeing it inject.
Setup:
laptop 1 - BT3, AWN108 card with atheros chipset.
laptop 2 - Generic XP machine with wireless
router - 802.11g no encryption > internets
Originally Posted by iwconfig at boot
Code:bt airpwn-1.3 # cd /pentest/wireless/aircrack-ng/ bt aircrack-ng # airmon-ng start wifi0 Interface Chipset Driver wifi0 Atheros madwifi-ng ath0 Atheros madwifi-ng VAP (parent: wifi0) ath1 Atheros madwifi-ng VAP (parent: wifi0) (monitor mode enabled)So it looks like my card is in monitor mode, now back to airpwn and try to run it.Originally Posted by iwconfig after monitor
So, I start surfing the internet on laptop 2 and nothing happens. I fire up wireshark, set the capture on ath1.Originally Posted by airpwn
I start capturing and see beacon traffic from a co-worker's laptop.
I set the filter to http and see nothing. Surf the web on laptop 2 still no http traffic seen.
I've also tried:
running the madwifi_prep.sh instead of airmon
airmon-ng start wifi0 1 which should set it listen to the channel my router is on.
So far nothing seems to make this program trigger. Any suggestions?
Each time I try a different setting I'll ifconfig <adapter> down and then re-run airmon and use the new athx interface.
Looks like it may be the driver. If you've got a card, non atheros, that works well let me know.
Have had random problems in BT3 as well just no time lately to work on it. Have you tried that card in BT2 after fixing airpwn/lorcon? -i worked for DWL-G650 in BT2 not certain at the moment of any other working cards.
Μολὼν λαβέ - Great spirits encounter heavy opposition from mediocre minds.
im getting same resultslet us know if u find fix...
I spoke with Josh through a 3rd party and he believes that the Atheros driver is broken. Currently I have on order a Hawking Technology hwc54g with a Ralink chipset. I've also been informed that the Prism54g chipset is viable. I'll report back on BT3 next week. I'm going to get BT2 on a drive now.
Still waiting on the Ralink card but the madwifi 0.9.4 drivers don't fix the monitor/injection issue.
Ok, so here I am with a Hawking Ralink RT2500 cardbus card (HWC54G).
I try it out and no luck. Do some reading and grab the latest trunk of lorcon and put it into the airpwn directory. I configure, make, make install lorcon. Then I configure, make, make install airpwn.
Code:bt airpwn-1.3 # airpwn -c conf/greet_html -d rt2500 -i ra0 -v -v -v -v Parsing configuration file.. Opening command socket.. Opening monitor socket.. Opening injection socket.. LORCON - tx80211_setmode(...) is deprecated, please use tx80211_setfunctionalmode(...) instead Unable to open interface ra0.Originally Posted by iwconfig
So, at this point I'm looking into why it saysCode:bt airpwn-1.3 # airmon-ng start ra0 1 Interface Chipset Driver ra0 Ralink b/g rt2500 (monitor mode enabled)
Unable to open interface ra0.
For what it's worth, I CAN run kismet using source=rt2500,ra0,ralink
I also did a lorcon trunk (131) update then tried to make & install airpwn with this error:
This is not the first time in BT3B I have had complaints and errors about "wireless.h".Code:bt airpwn-1.3 # make make all-am make[1]: Entering directory `/root/airpwn-1.3' if gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -MT airpwn.o -MD -MP -MF ".deps/airpwn.Tpo" -c -o airpwn.o airpwn.c; \ then mv -f ".deps/airpwn.Tpo" ".deps/airpwn.Po"; else rm -f ".deps/airpwn.Tpo"; exit 1; fi In file included from airpwn.c:35: /usr/include/linux/wireless.h:891: error: 'IFNAMSIZ' undeclared here (not in a function) make[1]: *** [airpwn.o] Error 1 make[1]: Leaving directory `/root/airpwn-1.3' make: *** [all] Error 2 bt airpwn-1.3 #
Tried the supplied airpwn version and copied conf folder over and it will run with an error similar to yours:
also according to wireless.h line 891 is :Code:bt airpwn-1.3 # airpwn -c conf/greet_html -d madwifi -i ath1 -v -v -v -v Parsing configuration file.. Opening command socket.. Opening monitor socket.. Opening injection socket.. LORCON - tx80211_setmode(...) is deprecated, please use tx80211_setfunctionalmode(...) instead Listening for packets... Channel changing thread starting..
and 'IFNAMSIZ' @ line's 77, 872, 911, 1035 and 1058Code:struct iw_param power; /* PM duration/timeout */
Μολὼν λαβέ - Great spirits encounter heavy opposition from mediocre minds.
..........
Working on this now:
http://aircrack-ng.org/doku.php?id=rt2500