Macbook Pro & BCM4328 r5 a/b/g/n [Working]

[leg3nd]

In my Macbook pro running a broadcom chipset internally, I can confirm working injection on the internal card, which has never worked previously. My findings will likely work on other Intel based macs as well, but NOT tested.

Macbook Specs:
http://www.everymac.com/systems/appl...ryn-specs.html

Macbook Model: Macbook Pro A2160, 4,1 Penryn
Exact Card Output: Broadcom Corporation BCM4328 802.11a/b/g/n (rev 05)
Wireless Driver: b43

Other common compatibility issues including function buttons etc, I have overcome with various (somewhat simple) workarounds. Including working audio buttons, backlight buttons, and keyboard backlight buttons.

Audio buttons (OSS wrapper): killall -9 pulseaudio && padsp pulseaudio &
Monitor Backlight: gnome-power-manager &
Keyboard Backlight: Bind keys to this script.. http://info-s3curity.com/public/keyboard-backlight.sh

Overall I would say it runs great with small amount of work, I could not ask for more. Great job BackTrack dev team!

[3l33t1]

Nice work. are you running this as your soul OS? through vmware-parallels or dual boot?
Ihave the 2010 dual core 266. Broadcom BCM43xx 1.0 (5.10.131.36.9) currently using vmware-kde-32.
1st vm-bt-4rc2 2nd vm BT-5.
Im using a xternal usb G-sky(imitation alpha).

[leg3nd]

Nice work. are you running this as your soul OS? through vmware-parallels or dual boot?
Ihave the 2010 dual core 266. Broadcom BCM43xx 1.0 (5.10.131.36.9) currently using vmware-kde-32.
1st vm-bt-4rc2 2nd vm BT-5.
Im using a xternal usb G-sky(imitation alpha).

Yes, it is running as a single boot OS on the hard drive with full disk lvm2/luks encryption (Which required an extended/logical partitioning system to work).

Although if you choose to go this route, I recommend locking down your services, Using a user other then root (and disable the root account: usermod -p '!' root), and even throwing in some IPtables firewall rules for a bit more security.

Also keep in mind backtrack doesn't update many programs in the repos, so may want to consider manually upgrading vulnerable applications or just be cautious.

[tripkip]

Hi,

I can confirm that monitor mode with internal Broadcom card on MacBook Pro summer (2009) model works also out of the box with BT5!

I was able to run BT5 using a live dvd with follwing startx fix:

fix-splash
rm /root/.kde/cache-root/icon-cac*he.kcache
rm /root/.kde/cache-root/plasma_t*heme_Volatile.kcache
rm /root/.kde/cache-bt/icon-cache*.kcache
rm /root/.kde/cache-bt/plasma_the*me_Volatile.kcache

After that I was busy for almost a full day getting a tripple boot working on my Macbook...

But it's stuck while loading backtrack.

[ridz89]

Dear backtrack forums,

I'm new to backtrack but I've had some experience with my Macbook pro and Gnome, I am triple booting my 120GB SSD. osx/win7/bt5

I successfully installed bt5 on my mac tonight, and previously (from booting from CD) I've already tested that my wifi now goes into monitoring mode (god I love you backtrack XD).

I've successfully cracked my testing WEP encrypted router, ARP / Deauth was successful I'm new to aircrack havn't tested WPA2 but I don't see why it would be any different.

Just a few questions please...

-I tried your command killall -9 pulse audio and my sound hotkey's don't work, I removed pulse audio with apt-get remove pulseaudio. I enabled alsamixer and selected my nvidia audio card sound works however even the GUI sound bar now doesnt control sound :P

-how do I use gnome-power-manager?

this is what i got when i tried to run gnome-power-manager....

-----------------------------------------------------------------------------------------------
root@bt:~# gnome-power-manager

(gnome-power-manager:3359): GLib-GObject-WARNING **: /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:2273: signal `proxy-status' is invalid for instance `0x12e6330'

** (gnome-power-manager:3359): WARNING **: Either HAL or DBUS are not working!

** (gnome-power-manager:3359): WARNING **: proxy failed

** (gnome-power-manager:3359): WARNING **: proxy NULL!!
TI:05:04:09 TH:0x12458c0 FI:gpm-main.c FN:main,250
- Power Manager is already running in this session.
Traceback:
gnome-power-manager() [0x41c7e4]
gnome-power-manager() [0x4106d1]
/lib/libc.so.6(__libc_start_main+0xfd) [0x7f1ec5c24c4d]
gnome-power-manager() [0x408d49]
----------------------------------------------------------------------------------------

-also is there anyway to disable the friggin touch on my pad? i want a solid click lol.

many many thanks,

Ridz


ps: i installed my GPU drivers from nvidia website, and now I have a sexy resolution.

[ejang]

wow, this is great. Can someone confirm wireless abilities (monitor/injection) for the other cards?

• MacBook Pro (Early 2006) - Core Duo(Yonah), Atheros 802.11a/b/g, ATI Graphics Card
• MacBook Pro (Late 2006) - Core2 Duo(Merom), Atheros 802.11a/b/g and draft-n, ATI Graphics Card
• MacBook Pro (Mid 2007) - Core2 Duo(Merom), Atheros 802.11a/b/g and draft-n, nVidia Graphic Card
• MacBook Pro (Early 2008) - Core 2 Duo(Penryn), Broadcom BCM4328 802.11a/b/g/n, nVidia GeForce 8600M GT Graphic Card
• MacBook Pro (Late 2008) - Core 2 Duo(Penryn), Atheros 802.11a/b/g and draft-n, nVidia Graphic Card
• MacBook Pro 5,5 (Mid 2009) - Core 2 Duo, Broadcom BCM4322 802.11a/b/g/n, nVidia Corporation GeForce 9400M (rev b1)

Seems like the BCM4322 is still unsupported for injection, so I wanted to double-check before doing the install

[edgarlemos]

Do you know anything about the MacBook Pro 7,1 (C2D 2.4, middle 2010) monitor/injection ??
I'ts mine.. and i'm thinking about make a triple boot camp, and install BT5.
Is there any other way to run BT5 without making 3 partitinons? like booting from usb drive or sd card?

regards

[mack1]

This is great news!

Is there any confirmation on the BCM43xx ? It's in the mid-2009 15" Macbook Pro, model 5,3.

I'm going to be traveling for another 2 months and I'm dying to know if the mbp I left at home is compatible haha.

Also, has anyone been able to successfully change their MAC address? The last time I installed Linux (BT or other) I got a "Too many open files in system" error every time I used MacChanger.

I'll post back in August when I test mine, but I'd love to know if anyone's 5,3 mbp supports injection and/or MAC address changes.

[ridz89]

wow, this is great. Can someone confirm wireless abilities (monitor/injection) for the other cards?

• MacBook Pro (Early 2006) - Core Duo(Yonah), Atheros 802.11a/b/g, ATI Graphics Card
• MacBook Pro (Late 2006) - Core2 Duo(Merom), Atheros 802.11a/b/g and draft-n, ATI Graphics Card
• MacBook Pro (Mid 2007) - Core2 Duo(Merom), Atheros 802.11a/b/g and draft-n, nVidia Graphic Card
• MacBook Pro (Early 2008) - Core 2 Duo(Penryn), Broadcom BCM4328 802.11a/b/g/n, nVidia GeForce 8600M GT Graphic Card
• MacBook Pro (Late 2008) - Core 2 Duo(Penryn), Atheros 802.11a/b/g and draft-n, nVidia Graphic Card
• MacBook Pro 5,5 (Mid 2009) - Core 2 Duo, Broadcom BCM4322 802.11a/b/g/n, nVidia Corporation GeForce 9400M (rev b1)

Seems like the BCM4322 is still unsupported for injection, so I wanted to double-check before doing the install

Why dont you burn BT5 to DVD? and boot the mac from DVD first wicd should be working even with DVD and aircrack too, test it out this way before you install.


ridz

[leg3nd]

Just to clarify some of the fixes and my methods, as well as answer some questions.

Gnome power manager: I removed gnome power manager via preferences > startup applications, then simply added 'gnome-power-manager &' into a basic bash script, then added that bash script to preferences > startup applications.

Pulse audio: Same idea as above with the bash script, remove pulse from the startup and add it into the bash script. 'padsp pulseaudio &' (The padsp was vital for me, as it allows the OSS wrapper to control the sound)

X Window Decorations: Also same idea as above, this is an issue I had with the window decorations not showing up correctly. I'm not sure what caused it, but 'metacity --replace' seemed to fix it.

Disable click on touchpad: Very simple, just go to preferences > mouse, and somewhere in there you can disable the 'tap to click'. Google could have told you this.

An example of the startup script would look something like this..

#!/bin/bash
sleep 5
gnome-power-manager &
metacity --replace &
killall -9 pulseaudio
padsp pulseaudio &

If this does not work, then you will need to do some googling and debugging on your own. I have only tested this with my mac and no other versions.

ridz89, your error is caused becuase gnome power manager is already running, as stated in the error.. "- Power Manager is already running in this session." My fix was simple to restart gnome-power-manager, meaning you must kill the original process first. (killall -9 gnome-power-manager && gnome-power-manager)

Also I would not expect feedback on all the Macbook BCM cards, You are probably best off booting into a live CD and trying it yourself, its not very difficult.
Get into a terminal, put up the interface (ifconfig wlan0 up), start monitor mode (airmon-ng start wlan0), and test injection (aireplay-ng -9 mon0).

Please post any results with this test here for others. Hope this helps.