Soft AP / Phishing Script [Release]

[VulpiArgenti]

Bugme, the conf file looks OK.

Please double-check your client is set up purely for dhcp (perhaps you've played with manual settings for other networks in the past), and there are no firewalls etc.

Can you then follow these troubleshooting steps, and let me know how you get on?

[VulpiArgenti]

Hi parrotface,

I haven't come across this particular problem so bear with me while we try to work it out.

First check the basics: is dhcp3-server actually installed, and does the group dhcpd exist on your system?

Second, the conf file is written by bash (lines 706 onward). The content of /tmp/dhcp.conf may be a problem, but I don't see how the file doesn't even exist! Unless the script is failing and exiting before it gets to line 706??

You've probably already done this, but could you run the script in debug mode, and post the relevant output?

 bash -x path/to/PwnSTAR_0.6

[pr0l3]

I work for an IT firm out of Ontario, Canada.

We just used this script at a trade show.

I had an access point set up broadcasting an SSID of 'FREE IPAD' - we're giving away an iPad on our facebook page.

Anyone who connected to it was fully qualified and only given rights to a little website I set up in /var/www/ to advertise the giveaway.

Past that - I can't wait to be involved in the development of this script... do you mind if I post a bunch of ideas?

[VulpiArgenti]

do you mind if I post a bunch of ideas?

Please post away!

[thad0ctor]

I'm not sure if this would be possible but if there was a way to manuipulate the DHCP3 tail to only show the active connections that would be great, I'm not sure how that would work

also do you think you could switch the script to Xterm or something like that, it would be a little more user friendly for cutting / pasting and a little more customizable IMO. also that background on the sattelite terminals makes it pretty difficult to read a times

keep up the good work!

[VulpiArgenti]

Hi thad0ctor, thanks for the observations.

For the Eterm background, see the script intro comments or post 10:

Regarding the Eterm colours, you can see on the screenshot that they should be a very readable purple/yellow. Please launch Eterm then adjust the background settings: transparency off, pixmap none; then "save theme settings". This gives a blank background to show the script colours.

I don't have any problems cutting and pasting. Could you describe the issue?

Good idea for the dhcp tail. I'm also not sure if it's possible but I'll look into it. Conntrack might work?

[thad0ctor]

cool I didn't know that about e-term, I'll have to check those features out.

when I try to cut and paste stuff from the consoles that are created (ie IPs from the tail) I can highlight text but I can't right click to copy or use ctrl+c seeing how it closes terminals,
how do you cut and paste?

[VulpiArgenti]

The wonder of Linux:-

copy: highlight (only, no click/ctrl/anything)
paste: 3-finger tap/middle mouse button click

[thad0ctor]

epic! you learn something new every day

[pr0l3]

Well, I've been using this script as a replacement for the Hak5 pineapple. I can't see the need to buy the device when my laptop will do it, especially with this script...

Unless I had an ultra-mobile need for it.

So, the first thing I was thinking is a evil-twin with custom DNS spoof.

Basically, clone an AP, deauth existing users and provide internet for users on the bad-guy AP.
Before they're connected, you could set custom DNS routing via dnsspoof - kind of like how 'easy-creds' does...

That way, you can create a site via SET or otherwise and spoof specifically to that site - a cloned credential nabber or otherwise.

I've been thinking about this script a lot lately - it has such huge potential. If you wouldn't mind, I'd love to do a write up or a video blog about it, and the uses I have found so far...