[Script] [Video] fakeAP_pwn (v0.3)

[g0tmi1k]

new version gives me:

[i] Configuring: Chaning monitorInterface to:
SIOCSIFMTU: No such device
[!] The monitor interface mon0, isn't correct.

[i] *** BREAK ***

Im looking into it. (=
*I've also PM'ed you about it *

[Eatme]

Im looking into it. (=
*I've also PM'ed you about it *

pm'd + log :

Bash | fakeAP_pwn v0.3 (#112) Start - Eatme - NDbBN47c - Pastebin.com

After running the latest script, Wicd reports all networks with all having %1 WEP even if they're WPA.
-ok I fix this problem by doing the following commands:

:~# rmmod r8187
:~# modprobe rtl8187

This also fixed my error I was having:
#commented lines 762 - 764 but you can still take a look at the log, to verify.

Now latest version #112 is working perfectly. Except Internet does not work after infection, but everything else is good to go.

ps- is the version 0.7 out yet? i would like to try that AP clone... ;]

[joker5bb]

here is how to setup the bind dns server to redirect all dns queries

# named.conf
include "/etc/rndc.key";
controls {
  inet 127.0.0.1 port 953 allow { localhost; } keys { "rndc-key"; };
};
options {
  directory "/var/named";
  recursion true;
};
zone "." IN {
  type master;
  file "db.localroot";
};

# db.localroot
@ IN SOA hostname.example.com admin.example.com (
       1 ; Serial
       3600 ; Refresh every 1 hours 
       1800 ; Retry every 30 minutes 
       604800 ; Expire after 7 days
       1 ) ; TTL 1 second
       IN NS 10.0.0.1
       IN A 10.0.0.1
*     IN A 10.0.0.1

[joker5bb]

here is how to setup the bind dns server to redirect all dns queries

# named.conf
include "/etc/rndc.key";
controls {
  inet 127.0.0.1 port 953 allow { localhost; } keys { "rndc-key"; };
};
options {
  directory "/var/named";
  recursion true;
};
zone "." IN {
  type master;
  file "db.localroot";
};

# db.localroot
@ IN SOA hostname.example.com admin.example.com (
       1 ; Serial
       3600 ; Refresh every 1 hours 
       1800 ; Retry every 30 minutes 
       604800 ; Expire after 7 days
       1 ) ; TTL 1 second
       IN NS 10.0.0.1
       IN A 10.0.0.1
*     IN A 10.0.0.1

[Casca]

here is how to setup the bind dns server to redirect all dns queries

# named.conf
include "/etc/rndc.key";
controls {
  inet 127.0.0.1 port 953 allow { localhost; } keys { "rndc-key"; };
};
options {
  directory "/var/named";
  recursion true;
};
zone "." IN {
  type master;
  file "db.localroot";
};

# db.localroot
@ IN SOA hostname.example.com admin.example.com (
       1 ; Serial
       3600 ; Refresh every 1 hours 
       1800 ; Retry every 30 minutes 
       604800 ; Expire after 7 days
       1 ) ; TTL 1 second
       IN NS 10.0.0.1
       IN A 10.0.0.1
*     IN A 10.0.0.1

Pretty slick -

I was working on something similar when on a whim I wondered if Backtrack had dnsmasq in the repos... sure enough it does. So after a quick apt-get install dnsmasq - this is what I came up with...

**set-up dnsmasq*
nano /etc/dnsmasq.conf -
add these lines:
interface=at0
dhcp-range=10.0.0.10,10.0.0.100,6h
address=/#/10.0.0.1

/etc/init.d/dnsmasq restart

**set-up apache**
nano /etc/apache2/apache2.conf
add this line:
ErrorDocument 404 /index.html

/etc/init.d/apache2 restart

airbase-ng -e "testwifi" -c 5 wlan1
ifconfig at0 10.0.0.1 netmask 255.255.255.0 broadcast 10.0.0.255 up

everything connecting to the tap at at0 gets sent to 127.0.0.1, no matter what they type in, plus at0 can have multiple connections...

[joker5bb]

Pretty slick -

I was working on something similar when on a whim I wondered if Backtrack had dnsmasq in the repos... sure enough it does. So after a quick apt-get install dnsmasq - this is what I came up with...

**set-up dnsmasq*
nano /etc/dnsmasq.conf -
add these lines:
interface=at0
dhcp-range=10.0.0.10,10.0.0.100,6h
address=/#/10.0.0.1

/etc/init.d/dnsmasq restart

**set-up apache**
nano /etc/apache2/apache2.conf
add this line:
ErrorDocument 404 /index.html

/etc/init.d/apache2 restart

airbase-ng -e "testwifi" -c 5 wlan1
ifconfig at0 10.0.0.1 netmask 255.255.255.0 broadcast 10.0.0.255 up

everything connecting to the tap at at0 gets sent to 127.0.0.1, no matter what they type in, plus at0 can have multiple connections...

nice but bind9 is way better to use
but there are somethings you are still missing, like https
also im thinking on how to get multi-client support working, any ideas?

[Casca]

nice but bind9 is way better to use
but there are somethings you are still missing, like https
also im thinking on how to get multi-client support working, any ideas?

I installed bind9 and tried your config - you're right, bind9 is way better for this. I'm still looking at the docs, but I think I might have an idea for multi client... gotta play with it a bit.

[cseven]

g0tmi1k can you add fakeAP_pwn to your google code page so if someone wants to go back a version they can? or is it somewhere that I don't see?

Thanks!
C

[Casca]

g0tmi1k can you add fakeAP_pwn to your google code page so if someone wants to go back a version they can? or is it somewhere that I don't see?

Thanks!
C

cp fakeAP_pwn.sh fakeAP_pwn.sh.ver112 - then do the upgrade (fakeAP_pwn.sh -u)

[cseven]

cp fakeAP_pwn.sh fakeAP_pwn.sh.ver112 - then do the upgrade (fakeAP_pwn.sh -u)

That would work too

I found Changes - fakeap-pwn - Project Hosting on Google Code (apparently if I used google I sometimes find answers hehe)