quickset.sh Released!

[snafu777]

quickset.sh was created out of the need for a consolidated suite of tools dedicated to PenTesting.

There are a lot (and I mean a LOT) of scripts in the wild that offer various methodologies on the setup for a proper PenTest. What sets quickset apart from the rest you might ask? Total customization of a hack within the script itself. No more having to edit a script prior to use for choosing what IP address and port to listen on, which file to save to, where to save, etc.. To speed the process along even further, all "defaultable" settings that were able to be implemented have been pre-selected for the user; of course, with a couple keystroke these settings are rapidly changed. Here is a sampling of the many aspects that it offers:

• Stable and flexible Soft Access Points to meet a variety of needs
• Grab WPA Handshakes using a variety of methods both AP and Client style
• A small batch of "fast" attack tools
• Crack open WEP like an egg

Development of this script took place over the summer of 2011 during my deployment to Afghanistan. I'd like to take a minute to thank the "community" on this forum for all the support and solidarity you have shown me; quickset would not be what it is without YOU.

Before you decide to use the script, I ask that you actually READ the comments within it, and try to understand how it does what it does; otherwise you're just another $cr!pt K!dd!e in my book. If you have taken the time to honestly read through and troubleshoot any problems with the script on your own -or- if you would like to send Kudos, Comments, Ideas, etc.. you can reach me here. I am always and forever willing to change things up and add new features to quickset or remove things that make no sense.

Grab yourself a copy via

svn checkout http://quickset.googlecode.com/svn/trunk quickset

[comaX]

comaX,

Would you be interested in having yamas dropped in with quickset? It is in need of some good attack tools.... Ideally, I would like to combine the properties of your script with ericmilam's easy-creds script..... This could be one powerful tool. From there, go GUI and really rock out. Let me know what Ya think bro..

I would need more precisions, but sure, do whatever pleases you with it
I'll give your script a try when I have the time.

Cheers

[AnimusDomini]

snafu777,

Nice work... kudos! I did not try it yet, but I am using it as source of knowledge.

Thanks for sharing!

[snafu777]

Ladies/Gents,

Hello World. I am finally back from what was hopefully my last tour in Afghanistan. While I was over there I created quickset.sh. Since I've been home I have been playing around with the "WiFi" cracking portion of the script and noticed a lot of mistakes I made. I didn't have access to a WiFi router over there; the "ideas" were in place, but the commands were jacked up so it seems. I have recently released Version 1.3. I still have a lot of tweaking with regards to the full functionality of the script; but all in all, it seems to work on my laptop very well.

---

On another note, airbase-ng is still jacked up! It works just fine in other O/Ss but on BT5r1 it will run into a "Segmentation Fault" roughly 3 minutes after launch of a SoftAP via the "Wireless Vaccum Option". I wrote a thread about this very issue roughly 2 months ago, but have yet to get one hint of a response. I had really hoped for a positive response; but that failed miserably. The SoftAP just dies =(....This sucks because there are some very cool things you can do if you have the tgt connect to you (Ya know the WiFi Pineapple offered by Hak5? quickset.sh will do all that for you without purchasing a fancy piece of equipment!!) Why bother with trying to gain access into a network if you can just have nodes on the network connect to you instead??


Cheers~!

[comaX]

I will take a good look at the new version, thanks !
For the SoftAP, I don't know much about it myself but I suggest you take a peek into eric milam's and killadaninja's codes which are easy to understand, and do SoftAP !

Cheers !

[snafu777]

Version 1.5 has been released! Lots of fixes! Coded all night just to punch it out to the masses.... Grab a copy =)

---

I will be adding in a patch for the iptables options that will allow the user to see what changes were made without having to scroll up in the very next release. It'll be some very simple "sleep 2" commands; and I would have added it in tonight, but I don't feel like redoing backups tonight.

---

I will take a good look at the new version, thanks !
For the SoftAP, I don't know much about it myself but I suggest you take a peek into eric milam's and killadaninja's codes which are easy to understand, and do SoftAP !

Cheers !

The SoftAP created by airbase-ng allows a user to create a WiFI AP that will "coax" other computers into connecting to it. From there you can nmap em' or give em internet and watch their traffic...the uses are truly boundless. It is very slick bro, but sadly it dies =(....As for the idea of checking the other two coders.... I just checked the newest version of easy-creds and it uses the same syntax I use for airbase-ng (hence it dies too)...I couldn't find one written by killadaninja though, link? I'm gunna message eric milam and see if I can get some input from him on it. Afterall he led the way on the ettercap fix for the new kernel...

[scottm99]

Thanks Just checked out a copy.

[zimmaro]

many thanks for your contributions!

[snafu777]

Ladies/Gents,

It is my pleasure to announce that Version 1.7 is out and about in the wild. As promised there were some changes made to how quickset.sh handles the output of iptables information.

---

It seems that the segmentation fault I have found with airbase-ng only resides in the 32-bit version. This is great news { kind of... It sucks for the user stuck with the 32-bit version =( }, as I am now rocking an M11xR3(64-bit) and have no issues at all creating SoftAPs!!! I tested this extensively tonight for over 2 hours with no faults found. It seems that the Segmentation Fault only occurs on 32-bit BT5r1 (Gnome) distros; whether or not this touches KDE is yet to be determined (I highly doubt the manager would matter in such a situation with C {highly doubting that a screen manager would take part in a segmentation fault via airbase-ng})

I want to make it blatantly obvious; the cool factor in this...... Why bother trying to gain access to a network? Why not just have them connect to you? It's a truly novel idea and it rocks when implemented correctly.... quickset.sh WILL do it for you ~~~>>> very fast (Wireless Vacuum or Stickpot)........ Create a network that the nodes around you are probin for, give em an IP addie and use yer imagination from there...

So what is the Wireless Vacuum and this "Stickypot" I speak of?........
- The wireless vaccuum will provide a bridged connection between the tgt nodes and "your" Internet connection; allowing you to snarf all the packets in-between.

- The stickypot will allow you to create a network without the need for an internet connection. It's like a wireless vaccuum without the internet connection =)... Either way it will allow for the quick setup of a SoftAP that says "Hey!!! Yer probing for this connection? Yep, that's me, I'm yer connection, Associate with me!!!!! p.s. This is so I can NMAP ya and go from there....."

---

On a side note to the above, there was an issue I had found in the BT5r1/32-bit/Gnome distro as well. When using the 5.59-bt0 version of nmap as grabbed via apt-get (Not sure if it was fixed in 5.61-bt0 just yet) nmap would refuse to work with virtual interfaces..... This was a huge downer to the whole quicket.sh project. A workaround fix to this is nmap=5.51-bt8 (This is tested in BT5r1 32/64-bit Gnome only)

---

Honeypot: In computer terminology, a honeypot is a trap set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer, data, or a network site that appears to be part of a network, but is actually isolated and monitored, and which seems to contain information or a resource of value to attackers. {Reference: Wikipedia}

"Stickypot": Kind of like a honeypot, except it is a totally unwilling act. Instead of luring in Tgts to connect to you because they seek after things like you, they will connect to you unknowingly (Hence the sticky)... {Reference: Snafu}


Cheers!!

[melissabubble]

hey, i like the idea of what you want to do, i've been trying to figure out how to go about doing it, But being a noob i couldn't figure out how to bridge two wireless interfaces together and forward my internet to at0. are you doing this with one interface card or two? and would you no if dhcp3 and dhcpd3 are the same, cause i tried to use SET softAP but it gave me an error saying it couldn't find dhcpd3. i tried using apt-get but its not there.