Happy new year, news, etc ...

Hello everybody,

First of all, we wish you a happy new year.

There was no news here and no commit on trac since some time but we never stoppped working. Although svn commit wasn't working for us (see previous blog entry for more details), we used the tickets to store all patches that have to be committed.

But I now have some good news, trac is working again. Don't ask me why, I have absolutely no idea, and I didn't change anything (except doing the usual updates).
So that means I'll commit everything to sync svn with 1.0 final and then start committing all patches that were added to tickets since August (that's when svn commit stopped working) and others that were planned for 1.1. That will take a few days :)


I'll also try to update this blog at least once a month to tell you what happened during the last month in our forum, trac and on IRC.

Here are a few things that happened recently:
- Online WPA cracking services: with cloud computing that was launched begin december then now with GPU.
- Injection and packet capture with aircrack-ng seems to work with the Nokia N900. I also read that it will have USB host soon.
- Beini 1.0-RC5.1: A wireless network security testing system,it is based on Tiny Core Linux.
- GUI for aircrack-ng in C# using Mono.
- minidwep-gtk a GUI for aircrack-ng in shell script.
- Slitaz Aircrack-ng: the base Slitaz cooking version plus the latest Aircrack-ng SVN version, wireless drivers patched for injection and other related tools.


I am also currently installing a new server (Core i5 2.66Ghz, 8Gb Ram, 2x 80Gb SSD) for aircrack-ng. That will allow us to organize better the different parts and give a better service to our ever growing community ;).

Our webhoster offers ESXi and I first wanted to use it to virtualize our stuff but it takes too much time to stabilize it (and IP management is a bit tricky/expensive) and since I didn't wanted to wait any longer, I switched to vmware server for the different parts:
- trac and buildbot.
- forum.
- downloads: videos, patches, storage, archive, nightly builds, ... (we currently have around 20Gb of stuff).
- photos and videos of the conventions (btw, I'll soon post the pictures I took during 26C3 and of other conventions).
- a few other virtual machines for testing.
The main website and wiki will not be moved.


Last but not least, I would also like to thank again everybody who help us, not only the donations (although important to pay the servers and domains), but everybody who contributes to the project: in the forum, irc, in the wiki (documentation and translations), bug reports and bug fixes, improvements, ...


More to come in the following days :)

Aircrack-ng 1.0

Yes, 1.0 final, finally :)

There are not much changes compared to the 1.0rc4, just a few fixes. Here is the changelog:

- airserv-ng: Now works fine between 32 and 64bit OSes.
- wesside-ng: Fixed some endianness bugs
- airodump-ng-oui-update: Make sure the user is root when updating the file.
- airmon-ng: Updated iw download link (0.9.17).
- All: Fixed compilation with some gcc.
- patches: Added missing patches from patches.aircrack-ng.org: mac80211_2.6.28-rc4-wl_frag+ack_v3.patch
- manpage: Updated aireplay-ng manpage.
- INSTALLING: Removed (now) useless requirement for OSX installation.
- GUI (windows): Fixed 2nd selection of a capture file.

For those who use subversion, the sources are not in sync with the trunk. The reason is that svn commit is currently broken.

It broke during a Debian update and we're still trying to figure out how to fix it (It should be fixed by the end of September in one way or another). We've pinpointed the issue and found that the reason is because of the authentication but since we did not change anything to the configuration, I have no idea why it suddenly broke. If anybody knows how to fix it, that would be great.

Last but not least, we're also launching the new website (and logo) as explained in a previous post: New Stuff. Feedback is welcome.

Contests @ Brucon Wireless workshops

UPDATE (Brucon): Please don't crack networks where you were not given permission to crack, thank you.

Brucon is getting closer :)

As I said, I'll give a workshop friday (17h00) and saturday (09h00, I know, it's early) and there will be 2 contests (one each day). The winner will receive an ALFA AWUS036E with a 5dbi antenna:



They will be run during the workshop and for both of them you need a laptop and a wireless card. You can use the tools of your choice.
- The first one, friday, you'll have to find an access point outside the convention area.
- And saturday, you'll have to crack the key of an access point (I haven't decided yet if it will be WEP or WPA).

More details will be given during the workshops.

New stuff

Hello everybody,

sorry for not posting anything since some time now, but we have been really busy these days and we got new stuff for you:
- 1.0 rc4 last week
- 1.0 final release date
- Planned features in 1.1
- New logo
- New website

I guess you saw there was a release, 1.0rc4 a bit more than a week ago.
This fixes a lot of stuff (and add some new). It fixes compilation not only on linux but also on BSD plateforms (OpenBSD compilation is fixed) and others ...
The changelog speaks by itself ;)

Here are some planned features for 1.1:
- Be able to use directly cowpatty tables in aircrack-ng (without having to convert them to airolib-ng).
- OSX capture (and maybe injection) with some adapters (Ticket #653).
- Improved WPA handshake detection.
- Bug fixes (of course)
- ...

We also have been working on a new website. Here is a preview: http://www.aircrack-ng.org/new_index.html.
The goal of this new design is to be able to reduce the traffic on the website, currently around 1Tb each month and also to be give a quick access to important information.
As explained in an earlier post, it will not replace the wiki, it will just be the home page and be next to the wiki (you can keep all your bookmarks).
If you (still) have any remark (or improvements) about the new design, you can still post them in the forum (you don't need to register to post).

The logo contest is over and we have a new logo. Here is a preview (winner: segini75). We will also sell t-shirts soon (I know a good website for europe but I still have to find one for the US).


Last but not least, the new website (and new logo) will be launched at the same time as the 1.0 final release in a week or two if no big bugs are found in rc4 :)

Finding the author of the DoS

As I said, I know the IP address of the author of the DoS on our website and since he's located in Europe (Spain), it shouldn't be really hard to solve the case with the Computer Crime Unit.

However, I would like to try to solve it with him first. I just want him to contact me (tdotreppe@aircrack-ng.org) within 2 weeks to reimburse the bandwidth he generated and explain why he did it and I promise there will be no consequence, no complaint registered.

Thanks a lot

Good news, the website is now up thanks to all donations.

Even if I really like to work on aircrack-ng, it is really great to see a lot of people helping us, and I really want thank them a lot ;)

The other good news is that we now have enough to pay hosting until July (if this kind of DoS doesn't happen again) but please continue, that would be wonderful if donations could cover hosting costs every month.

Last but not least, I promise that I'll try to make that guy pay the traffic he generated.

Paying the bill

I finally found who is the responsible or at least the IP address of the author of this DoS (if generating 1.5Tb of traffic in 2 days and making the monthly traffic exceed thus making the website down is not a DoS, then what is it?) and you can be sure that this guy will have to pay the traffic, sooner or later.

Administrative stuff is taking too long so I think it will be easier to pay the bill now to have the website back up.

Aircrack-ng cost me around 60 euro per month (+ domain names that have to be renewed each year, wireless cards, traffic, ...) and although we have around 30K unique visitors each day, unfortunatly donations are quite low (the total for last year was around 80 euro). The reason why I'm writing this post is to ask for donations to pay that bill (around 130 euro).

So, any donation to tdotreppe@aircrack-ng.org (paypal) is really welcome.