HOWTO- Alfa 802.11a/b/g/n AWUS050NH (rt2800usb) on BackTrack 4 R1

[FooFighter007]

I use the following channel patch with current compat-wireless drivers & bt4

source:
Gmane Loom

Maxim Levitsky - 01.june 2010

--- a/net/wireless/chan.c
+++ b/net/wireless/chan.c
@@ -49,9 +49,12 @@ int cfg80211_set_freq(struct cfg80211_registered_device *rdev,
{
struct ieee80211_channel *chan;
int result;
+ struct wireless_dev *mon_dev = NULL;

- if (wdev && wdev->iftype == NL80211_IFTYPE_MONITOR)
+ if (wdev && wdev->iftype == NL80211_IFTYPE_MONITOR) {
+ mon_dev = wdev;
wdev = NULL;
+ }

if (wdev) {
ASSERT_WDEV_LOCK(wdev);
@@ -76,5 +79,8 @@ int cfg80211_set_freq(struct cfg80211_registered_device *rdev,
if (wdev)
wdev->channel = chan;

+ if (mon_dev)
+ mon_dev->channel = chan;
+
return 0;
}

works for me quite well

[FullOn]

Not gonna lie I'm too noob to understand how to use the above.

But the older compat-wireless drivers work just fine on R1, so I removed the new ones and used the previous version.

[RexBudman]

Dev,

It looks like after I repeated the process i got some progress. Thanks for including the drivers as of late.

I just wanted to ask though, why is it the power levels are exceedingly high after I run your process or driver update?

I finally am able to detect clients now, but the power levels are at +77 making it pretty difficult to acess any websites or AP's.

I thought if anyone knew, it would be you

[mitsumi]

There is a good write up on the awus036nh and bt4r1. There is a patch that fixes the issue with mon0 is on channel x and the ap is on channel z. i have tried the patch with the awus036nh usb it and association and injection is now ok.
The only problem i seem to have is that the packet injection is going ok (500pps) on but the iv`s are not increasing.Kindly give feedback

Read the blog here hXXp://blog.rootshell.be/2010/08/09/backtrack4-r1-awus036nh-win/

Credits to /dev/random for the good write up, DomInat3 for the patch and muts for the great os.

it work for me . thanks for sharing the blog. still under testing and will leave feedback.

[sandaili]

currently Im on bt4 R1 blackhat release, and notice the same thing u mention above = no scan results. it appears that this release does not have the /usr/src/drivers folder, but hey no biggie... mind sharing which compat-wireless drivers you are using (date would work fine).

thanks for such a great OS!

UPDATE: compat-wireless-2010-07-24 + mac80211_2.6.32.2-wl_frag+ack_radiotap.patch is working for me

so for those on the back|track 4 R1 blackhat release, do the following ::

mkdir /usr/src/drivers
cd /usr/src/drivers
wget http://wireless.kernel.org/download/compat-wireless-2.6/compat-wireless-2010-04-20.tar.bz2
 tar jxvf compat-wireless-2010-04-20.tar.bz2
cd compat-wireless-2010-04-20
wget http://patches.aircrack-ng.org/mac80...radiotap.patch
cat mac80211_2.6.32.2-wl_frag+ack_radiotap.patch | patch -p1
make
make install
make unload
modprobe rt2800usb

btw, I am using an ALFA AWUS036NH USB adapter with this setup =)

I tried this, but I am getting the error that the AP is on one channel, and I am on another. Is this the problem you are speaking of in this thread?

[sandaili]

I use the following channel patch with current compat-wireless drivers & bt4

source:
Gmane Loom

Maxim Levitsky - 01.june 2010



works for me quite well

Can anyone point me to a tutorial or resource where I can learn how to patch it? I don't know where to go. TY! (I used to have my setup working on BT3 but I am upgrading).

[sandaili]

it work for me . thanks for sharing the blog. still under testing and will leave feedback.

I was wondering how exactly to patch anything - I can't find a tutorial. I also was wondering if the problem you're all describing is the one I'm having, where the AP is on one channel, and the card jumps around despite what you set it to.

[bakru]

There is a good write up on the awus036nh and bt4r1. There is a patch that fixes the issue with mon0 is on channel x and the ap is on channel z. i have tried the patch with the awus036nh usb it and association and injection is now ok.
The only problem i seem to have is that the packet injection is going ok (500pps) on but the iv`s are not increasing.Kindly give feedback

Read the blog here hXXp://blog.rootshell.be/2010/08/09/backtrack4-r1-awus036nh-win/

Credits to /dev/random for the good write up, DomInat3 for the patch and muts for the great os.

works also for me this way, i like to point out another problem
increasing of tx power as we are talking of 2000mw and at the moment that is by far not the case.

[enjoiz]

Hello, i've done it, just how you say and ... i can do "airodump-ng mon0" and it show me my AP but if i try to do "aireplay-ng --test mon0" it show me that there is no AP - that was on R1 . ive tried other things on final too and it worked all great but after reboot same thing, no AP, but it differs from R1 because airodump-ng doesnt work too after reboot . Im using AWUS050NH rt2870 on VMware . Im thankful for replays.

[chalo]

There is a good write up on the awus036nh and bt4r1. There is a patch that fixes the issue with mon0 is on channel x and the ap is on channel z. i have tried the patch with the awus036nh usb it and association and injection is now ok.
The only problem i seem to have is that the packet injection is going ok (500pps) on but the iv`s are not increasing.Kindly give feedback

Read the blog here hXXp://blog.rootshell.be/2010/08/09/backtrack4-r1-awus036nh-win/

Credits to /dev/random for the good write up, DomInat3 for the patch and muts for the great os.

I have tried the awus036nh with backtrack 4 release 1 and this patch works ok. I have tested about 7 cards and have had no problems cracking my wep and wpa. I followed the exact commands in the blog above. The commands i used are as follows

cd /usr/src/drivers/compat-wireless-2010-07-10
./scripts/driver-select rt2x00
make && make install && make unload
modprobe rt2800usb
cd
wget hxxp://blog.rootshell.be/wp-content/uploads/2010/08/chan.patch
cd /usr/src/drivers/compat-wireless-2010-07-10/net/wireless
cp /root/chan.patch /usr/src/drivers/compat-wireless-2010-07-10/net/wireless
patch -p0 < chan.patch
cd /usr/src/drivers/compat-wireless-2010-07-10
./scripts/driver-select rt2x00
make && make install && make unload
modprobe rt2800usb

The problem with ap being on another channel is fixed with the patch and you can carry out packet injection. I tested it with the arpreplay attack. The issue i had described above where packet injection is going ok (500pps) on but the iv`s are not increasing , happened again but just re-performing a fake authentication with the access point, and repeating the arpreplay solved my problems. Kindly give feedback.