[Tutorial] How to: Create Fake AP (with a auto bash script!)

[bolexxx]

I'm pretty sure there aren't any errors on this, but just can't seem to get the dhcp to assign the victims an ip, thus 'limited or no connectivity' error. Have you any idea how i can sort this?
Cheers,
ecs

if everything is ok with script and your attack box, remove any preffered networks in your victim xp machine.

then disable/enable wireless card

[Barry]

Hey g0tmi1k, you think you can pull that picture out of your signature, it's taking up a crap ton of space, and some of us use really small screens to check the forums.

[imported_wyze]

Hey g0tmi1k, you think you can pull that picture out of your signature, it's taking up a crap ton of space, and some of us use really small screens to check the forums.

I second that. My screen res is 1920 x 1200, but its still

ANNOYING

[Thorn]

I second that. My screen res is 1920 x 1200, but its still

ANNOYING

Agreed. It's one of those things about forums that is very rude and inconsiderate.

[fnord0]

Hi, I've tried this script. I've also edited it with the comments received above which make it work better. Only problem is when I connect to this from my victim machine, it doesn't assign it an IP for some reason. I cant work it out.

I am using the eth0 adapter as the internet connection and the wlan0 for the fake ap.

I have put the script i've edited up on pastebin :
pastebin - collaborative debugging tool

I'm pretty sure there aren't any errors on this, but just can't seem to get the dhcp to assign the victims an ip, thus 'limited or no connectivity' error. Have you any idea how i can sort this?

I got 2 options to suggest

1. on the victim machine, statically assign IP and route statements
   

   example:
   ifconfig wlan0 192.168.1.25 netmask 255.255.255.0
   route add default gw 192.168.1.1 wlan0
   echo "#openDNS
   nameserver 208.67.222.222
   nameserver 208.67.220.220" > /etc/resolv.conf

2. for me, I had to change the dhcpd3 command line to get it working... so on line 38 from yr pastebin script I would change it to ::
   

   xterm -geometry 75x25+1+100 -T DHCP -e $toolsdir/dhcpd3 -d -f at0&

1. then move the included dhcpd.conf file from g0tmi1k's archive to /etc/dhcpd3 (on BT4 pre final)

option #1 was my first fix, when dhcpd3 was not giving me an IP to my victim machine, then my final fix was #2... that worked for me...

[imported_ecsployt]

sweet. I'll give that a little try today and let you know how i got on.
cheers

[imported_g0tmi1k]

Barry,wyze,Thorn and everyone else!
Sorry!
*Sig Updated*

frozen,
Does the target connect to you? Can you see it in the FakeAP window?
Can you see if anything is happening in the DHCP window?

ecsployt,
Thanks for your input too!

[fnord0]

fnord0,
WOW! Thanks for testing! & thanks for the thanks
I missed out the bit, where I compiled sbd in bt4 (tho I will correct this asap), though I could try and do it from wine, using the same file...

no problem! i really dig yr work/post.
would you by chance mind elaborating a bit on the second part of yr quote here, as I am really interested in what your script is attempting to do with sdb + metasploit? I don't follow, as I am new to metasploit... I am still in early stages of learning it, I get all the LHOST, RHOST commands, etc. but I don't understand how one would properly call the sdb part in yr script. I'd love to understand more though, if you don't feel like typing it all out, a link to metasploit's sbd.exe would be great. I am not having much luck with thier site/google locating a good tutorial for what yr script is doing with sbd.exe

i found this codeBurst: March 2007
this codeBurst: Just some simple shell notes:
but most links to the root sdb page, takes me to this borken page = http://tigerteam.se/dl/sbd/

i get the gist that sbd is a "secure backdoor" and is similar in workings to netcat, but I'm just not getting what your script is doing specifically with it, and what u are meaning in the quote above.

thanks for any light you can shed, or anywhere you may want to point me for more info (I downloaded all the metsploit docs, and pdfs, but cant find anything there about sbd).
-peace-
fnord0

[Barry]

Barry,wyze,Thorn and everyone else!
Sorry!
*Sig Updated*

Thanks dude!

[Thorn]

Barry,wyze,Thorn and everyone else!
Sorry!
*Sig Updated*

Thank you.