Monthly news - September 2010

Aircrack-ng now has support to export WPA handshake information to Elcomsoft Wireless Security Auditor v3 project file since svn r1781 with '-E' thanks to beini's author.

As said in previous monthly news, migration mode attack (WPA Migration Mode: WEP is back to haunt you...) has been added to aireplay-ng and a few improvement were added to aircrack-ng. More details in r1769 commit.


Forum:

• Adding accurate chipset detection to airmon-ng. More details can be found here.
• Who has the longest airodump-ng session?
• Poor man's Aircrack-ng distributor - A tool to distribute aircrack-ng, developped in Python
• minidwep-gtk, a gui of aircrack-ng in shell script, has been updated for BT4 final and BT4R1.

Other:

• A few tools for generating passphrases lists.
• Live CD
• WEAKERTHAN2, another pentetration testing linux live cd was released a few weeks ago.
• Beini, a small Live CD base on TinyCore Linux, is one year old (chinese).
• Scripts
• Wi-fEye 0.5.1 was released. His author created 2 videos: video 1 and video 2.
• Wifite, another GUI written in Python for Aircrack-ng.

Monthly news - August 2010

NeoPwn changed their plan and prefer to release it when the final version is ready. It will finally be called NeoPwn v2.

They plan to do two betas:

• Private beta containing the control panel, the injection driver and installer but the number of requests is limited
• Public beta without the control panel, injection driver and installer once the project has reached beta stage.

The final version will be free to download when it is completed and a safe installation process has been developped.

Their website contains more details about the release plan.


I tested the driver and so far it is working really well as you can see:

Last month, the video was showing the injection test on the N900. If you watch carefully, you can note that one of the BSSID is 00:00:00:00:00:00. I first thought it was a bug in aircrack-ng but it's not. I was told it's a unconfigured AP. It only sends beacons and jumps on different channels. If you're as curious as me, here is a capture file with just a beacon.

Forum:

• WiFiCake-NG 1.7 is a Perl/TK interface for manipulating the CSV of airodump-ng. You can find more details in the forum thread here. Their website contains a youtube video as well as a PDF manual for the application.

Other:

• Hack4Fun made an interview with Christophe Devine.
• BlackHat and Defcon presentation slides of Hole 196: WPA Too.
• Blackhat presentation: WPA Migration Mode: WEP is back to haunt you... (Contains paper, presentation slides, videos and patches for Aircrack-ng and Kismet). It is an attack against Cisco WPA Migration mode that allows WEP and WPA clients to associate to an AP with the same ESSID. It will be integrated to Aircrack-ng.