SordFish
-
Posts
18 -
Joined
-
Last visited
Posts posted by SordFish
-
-
Added to the todo list.
I've just got to get round to doing them! I'm home alone for most of this week so assuming I can get my new fon's flashed I'll get some stuff done and get a new release out.
I've actually managed to get the led working myself, its a little dirty as its more of an educated guess but it does the job! but i've semi-bricked my fon atm (bad network conf) so need to go in via serial to fix it then tidy it up.
-
Is the WLAN LED supposed to light up after the whole process is complete as it does not on mine irregardless of whether Karma is turned on via the web interface or not...
WLAN led doesn't light up at all with openwrt, unless you specifically tell it to with the gpio settings.
Would be cool if digininga could turn WLAN led on when karma is activated.
just need to have proc_gpio installed and run
* # turn gpio pin on
* echo 1 >/proc/gpio/2_out
*
* # displays the status of the switch, 1 on, 0 off
* cat /proc/gpio/2_out
*
* # turn gpio pin off
* echo 0 >/proc/gpio/2_out
-
I did a basic test with a multimeter and it averaged with one jasager "victim" @ 0.7 amps at 5v.
i think you should check what the voltage requirements for the regulator, most need about 2v extra.
-
A couple of options, you could look at what the fon bomb actually uses and see if you could just copy the stuff across to Jasager or, if we can get lorcon working on the fon then I've got a deauth script written in ruby that works really well.
I like the idea of lorcon on the fon, I'll add it to the todo list. If you look at the bomb and find anything please report back.
I'd really love lorcon on the fon for Airpwn! I've looked into cross compiling it for myself, but I don't fancy the deep end as a first project.
The Fon Bom uses Legend firmware with MDK3 in deauth mode, got the info from Here
-
MicroSD supports SPI mode which the fon drivers use so it should be able to work in theory.
-
My pc has these settings:
IP: 192.168.0.252
MASK: 255.255.255.0
The fon when it comes out the box uses dhcp so im not sure if flashing openWRT assigns the FON nic a static 192.168.1.1 (the address im trying to telnet to).
So two questions:
What the hell have I done wrong here and why? (ANY help would be very appreciated)
Is my FON now useless and beyond repair?
I've found that the computer and the fon have to be in the same ip range.
the fon ip will be 192.168.1.1 so your computer needs to be 192.168.1.252 for it to work.
-
This was mentioned on another thread.
http://hak5.org/forums/index.php?showtopic...st&p=101671
WEP, WPA, WPA2 don't send their passwords across the network, they exchange information which they encrypt and send send back to prove the both know the passwords. The only way I know to get a WEP key without packet capturing from the real network is to use the cafe latte attack (from the guys are Airtight I think). -
Openwrt comes with dynmasq which will do dhcp, but i had trouble working with my orinoco gold cards but it did work ok with the wusb54g ralink.
not too sure what i did to get it working but it does.
I just need to work out how to rout the wireless clients to a proxy now.
-
Ouch that 32mb upgrade mod looks quite the pain.
I guess you never did the xbox ram mod either then
Well beyond any level of soldering I can do. If someone wants to volunteer to do me an upgrade at Toorcon I'll provide the Fon.I'm going to be doing this once i get some chipquik if it goes to plan i could probably do one for you if dont get sorted at Toorcon.
Does the Fon have any USB hookup? Mount a USB card reader or external HDD for the space.There's already an SD/MMC mod
-
It can be integrated and I'm working on a way to do it, the only problem is that the Fon I have only has 8M of memory/disk which is no where near enough to cope with metasploit (~63M).
You can run Jasager on a laptop if you tweak it.
Would the 32mb mod help? http://www.dd-wrt.com/wiki/index.php/LaFon..._32MB_SDRAM_MOD
-
Great I'll have a poke around on that fon later.
I've also just flashed another fon with the latest stock openwrt and i've got a few errors so far installing the jasager_1.ipk
chown: /karma_www: No such file or directory chown: /etc/rc.d/S91karma_ui: No such file or directory cat: /karma_www/.version: No such file or directory WARNING: Installation may have failed. Detected r is installed, but this is r0.1.
on the web interface
Invalid command : get_karma Invalid command : get_karma_bw
and if i click on the change button to enable karma i get
Invalid command : get_karma Content-type: text/html Invalid command : karma
Edit rebooted and the web interface errors have gone!
Seem to be working great, I disabled my wireless ap and the fon jumped straight in and windows auto connected!
i think next i'm going to look into some dhcp and upsidedownternet
also best place is ebay for fons, I grabbed a free one and got one of ebay for under £10
-
Just caught the episode and cant wait to try this! I've got a quick question, I have one of the legend openwrt firmwares on my fon at the moment. Just wounded if this would be compatible and will i still be able to use aircrack etc?
-
can you even solder? If you cant i wouldn't bother IMHO, just sell it and buy one with a connector or pigtail already attached or get some one who know whats they are doing.
At the end of the day you will just probably end up breaking it.
you cannot just "touch" the wire on the solder and expect any improvement.
Also what are you using this for? war driving or cracking yours/someone else's AP? if you were using it for war driving you should of bought an Orinoco classic gold/Orinoco usb. They are cheap enough, i just bought 2 for £10.
I suggest you do a lot of research and _then_ give it a shot.
-
don't blame me if it breaks, but at first glance i would try with a pigtail to bare wire
red = middle wire
blue = shielding
Using a tv antenna will not work, you have to get wire and an antenna that is made for the 2.4ghz frequency and is the right resistance (50 ohm iirc).
the copper square is just ground, its normally used for rf shielding for the chipset.
-
The phone doesn't have a USB host so making a cable and connecting the adapter will do nothing.
The only way i can even remotly see a way of doing this is with a device you could connect to with bluetooth. Have that do the scanning and forward the data to the phone.
So if you could mod a dd-wrt capable router so it has a bluetooth device (is it possible? serial to bluetooth maybe?) then you could go the route VaKo mentioned with it being a kistmet drone and some magic code that forwarded the data to the phone.
Oh and one last thing before you go even further, the python sdk may not even have access to the hardware level of the phone so you couldn't even do anything with python.
Failing all that just spend the £/$10-15 on the key chain
If you manage to succeed do let us know i love fun projects like this.
-
thanks for that info saves me looking for it when i eventually get the hub.
From my brief searching i couldnt find anything firmware wise. I've also go a bt voyager 2500v and found that has been built with gpl source code, an i've found the kit to build some sort of broadcom firmware. Hopefully this one is built similar
it would be nice to "fix" the isp lock for the voip etc. also handy to have the hub firware a little more relaxed so i could use it as a extra wifi/voip acess point.
-
Not to rain on anyones parade but all network trafic is encrypted afaik. This has been dreamed up many times before, especially with xlink etc.
MK1: Step-By-Step Unlocking / Install guide (with pictures)
in WiFi Pineapples Mark I, II, III
Posted
i had a tough time finding it at first
You need kmod-gpio_2.6.21.5-atheros-1_mips.ipk
then insmod proc_gpio.ko
then you can issue the commands
I added the commands to the functions.rb file then called them in karma_up.rb I wasnt' sure if that was the best place to put them but i've never used ruby.