Monthly news - September 2010

Aircrack-ng now has support to export WPA handshake information to Elcomsoft Wireless Security Auditor v3 project file since svn r1781 with '-E' thanks to beini's author.

As said in previous monthly news, migration mode attack (WPA Migration Mode: WEP is back to haunt you...) has been added to aireplay-ng and a few improvement were added to aircrack-ng. More details in r1769 commit.


Forum:

• Adding accurate chipset detection to airmon-ng. More details can be found here.
• Who has the longest airodump-ng session?
• Poor man's Aircrack-ng distributor - A tool to distribute aircrack-ng, developped in Python
• minidwep-gtk, a gui of aircrack-ng in shell script, has been updated for BT4 final and BT4R1.

Other:

• A few tools for generating passphrases lists.
• Live CD
• WEAKERTHAN2, another pentetration testing linux live cd was released a few weeks ago.
• Beini, a small Live CD base on TinyCore Linux, is one year old (chinese).
• Scripts
• Wi-fEye 0.5.1 was released. His author created 2 videos: video 1 and video 2.
• Wifite, another GUI written in Python for Aircrack-ng.

Monthly news (July 2010)

This month I have some really interesting news. A lot of people would like to have Aircrack-ng on their phone (including me) but unfortunatly most phones can't work due to their drivers. Do you remember when I talked about NeoPwn v2 which is BackTrack Mobile?

A beta will be released before BlackHat/Defcon and will include Aircrack-ng. What's really great is that injection works with the internal card of the N900 (the original video can be downloaded here):

 

They also released 2 additional videos on Youtube:

• BackTrack Mobile (Nokia N900) - Packet Injection Aireplay-NG
• BackTrack Mobile (Nokia N900) - Mac Address Changer

Forum:

• There's a new section in the forum for BackTrack Mobile.
• Beini 1.2.1 was released. It can be downloaded from its website.
• Jano updated wesside-ng replacement, one-command WEP crack to save the key into a file.
• criser released WepCrackGui 0.8.1, a GUI for Aircrack-ng in C# (Mono). It can be downloaded on Sourceforge.

Other:

• BlackHat conferences will happen the 28th and 29th. Schedule can be found here.
• Besides BlackHat, there will also be BSides Las Vegas. There aren't as much talks as in BlackHat but they look really interesting.
• Defcon 18 (29 July - 1 August) posted the final schedule a week ago.
• Starting from 2011, the Wifi Alliance will not allow WEP and TKIP in certified Wifi devices. You can read more about it on WiFiNetNews.
• I missed the update (v2.1.7) of the patch for FreeRadius-WPE (Wireless Pwnage Edition) released in May.

Monthly news (June 2010)

Here is the 5th edition of our monthly news.

Project:

• We had some downtime on the server hosting trac and forum between the 16th and the 20th (hardware issues) and fortunatly nothing was lost. You can read more in these 2 posts: Trac and forum down and Trac and forum up again.
• The forum will be moved to the new server in a bit more than 2 weeks. The change will be transparent for you. And that means only trac and buildbot are left on the old server. They should be done before Defcon.

Forum:

• Airoscript not dead. It got some updates and is now renamed to Airoscript-ng. To get it, type svn co http://trac.aircrack-ng.org/svn/branch/airoscript-ng in a console.
• Beini 1.2.1 was released a few days ago. It can be downloaded it from its website.
• minidwep-gtk, a GUI of aircrack-ng in shell script, has been updated to work with Aircrack-ng 1.1.
• criser, the author of WepCrackGui, is developping a QT frontend for WepCrackGUI that should be included in the next release, v0.9. You can find instructions to get the sources and test it in this post. He also posted some screenshots. You can follow him on twitter: @wepcrackgui.

Other:

• I'll give a talk at Sharkfest about wireless security next week.
• digininja released a Karma patch for hostapd. It now works with ath5k and ath9k. It should work with prism54 and various other cards but that's untested.
• Backtrack 4 r1 was released. Changes: new kernel (2.6.34-rc6), packages updates, and new drivers. Note that it is an unofficial build meant for assesing hardware incompatibilities with the new kernel.
• The WiFi Alliances and WiGig announced alliance on multi-Gigabit wireless networks in the 60Ghz band. It will allow up to 7 Gigabit/s. You can read more here. The official press release can be found on WiGig website.
• Here is another GUI in Java for Aircrack-ng: GRIM WEPA.

Monthly news (April 2010)

Project news:
- ebfe, who created airolib-ng, released an exploit for airodump-ng, aircrack-ng, airdecap-ng. You can find more information in his blog (Post 1, Post 2) but it just makes the tools crash, no real exploit released. It will be fixed in the next few days before the release (v1.1).
- Nearly everything has been moved to the new server, only forum, trac and buildbot needs to be moved :).
- Do you remember I wrote that trac didn't display svn commits for some unknown reason? That's now fixed, I just had to comment out a line in trac.ini.
- For those who can't open the website due to URL filtering, use whydoyoublock.me. It's not a mirror, it points to the exact same content as www.aircrack-ng.org.

Forum news:
- Patches to override the regulatory domain for ath5k, ath9k and ar9170.
- The work on the C# GUI for aircrack-ng, WepCrackGUI, continues. And here is a blog post in italian about it.
- Beini now has its own website. Here is the forum thread.
- Wordlist generation:
    * Here and there
    * Here is a script by Zermolo to generate wordlist with only numbers, called permutate and another post in the same thread about the same subject with JTR.
    * Creating custom rules for John.
    * Word field is an incremental word list generator.

Other news:
- I'll speak at Sharkfest. It will take place in the main campus of the Standford University, June 14-17.
- Ever heard about NeoPwn? Version 2 will be based on the Nokia N900 and will be Backtrack Mobile.
- Remember spoonwep and spoonwep 2? Shamanvirtuel is working on spoonwep 3. Public beta release is planned between 15th-30th April.
- If you're using SliTaz, you might be interested to know that they released v3.0 a week ago.

Monthly news (March 2010)

Forum news:
- Beini 1.0 final was released: Forum post.
- I'm happily surprised that the C# (Mono) script developement for aircrack-ng is still active :). By the way, here is the project on sourceforge: wepcrackgui. The current version is 0.6.3
- A new version of minidwep-gtk, developped in shell script, gtk-server, zenity, kdialog, was released. Here is a video of this script in action. It is included in Beini 1.0.

Trac news:
- Various small fixes (makefile, manpage, ...)
- A patch for the r8187 (ieee80211) driver on kernel 2.6.32 (and lower). Installation instructions are updated.
- Compilation is fixed when compiling unstable stuff (wesside-ng/easside-ng and tkiptun-ng) with a recent gcc version (v4.4)

General news:
- Aircrack-ng now has 4 years old. I checked when the first news was posted and it was the 25th February 2006. Surprisingly, the 2 following news happened the 25th February this year :)
- A new paper about TKIP attacks was released by hirte: Enhanced TKIP Micheal Attacks.
- Airdrop-ng from TheX1le is now available in our subversion repository. Here is the video of the talk at Shmoocon 2010.

If you haven't seen it yet, Shmoocon 2010 videos (and sometimes the slides too) are available.

Last but not least, here is a very funny video of a woman calling Leo Laporte's Tech Guy Show claiming her WI-FI access has "disappeared".

Monthly news

A few things happened last month:
- The google phone, Nexus One was rooted and it has a bcm4329 chipset and it looks promising.
- Airodump-ng (in svn trunk) now has interactive mode: you can control it with keys. You can find the documentation in the wiki.
- A really small (only 10MB) distribution based on MicroCore Linux, console only.
- I'm sure you saw it, Backtrack 4 was released a few weeks ago.
- OSX Compiling (Ticket 687) should be fixed now (svn trunk revision 1657).
- New version of Beini: 1.0 RC5.2
- The developement of the GUI in C# (Mono) is quite active.

Last but not least, aircrack-ng will be 4 years old by the end of february :)