Monthly news - August 2010

NeoPwn changed their plan and prefer to release it when the final version is ready. It will finally be called NeoPwn v2.

They plan to do two betas:

• Private beta containing the control panel, the injection driver and installer but the number of requests is limited
• Public beta without the control panel, injection driver and installer once the project has reached beta stage.

The final version will be free to download when it is completed and a safe installation process has been developped.

Their website contains more details about the release plan.


I tested the driver and so far it is working really well as you can see:

Last month, the video was showing the injection test on the N900. If you watch carefully, you can note that one of the BSSID is 00:00:00:00:00:00. I first thought it was a bug in aircrack-ng but it's not. I was told it's a unconfigured AP. It only sends beacons and jumps on different channels. If you're as curious as me, here is a capture file with just a beacon.

Forum:

• WiFiCake-NG 1.7 is a Perl/TK interface for manipulating the CSV of airodump-ng. You can find more details in the forum thread here. Their website contains a youtube video as well as a PDF manual for the application.

Other:

• Hack4Fun made an interview with Christophe Devine.
• BlackHat and Defcon presentation slides of Hole 196: WPA Too.
• Blackhat presentation: WPA Migration Mode: WEP is back to haunt you... (Contains paper, presentation slides, videos and patches for Aircrack-ng and Kismet). It is an attack against Cisco WPA Migration mode that allows WEP and WPA clients to associate to an AP with the same ESSID. It will be integrated to Aircrack-ng.

Happy new year, news, etc ...

Hello everybody,

First of all, we wish you a happy new year.

There was no news here and no commit on trac since some time but we never stoppped working. Although svn commit wasn't working for us (see previous blog entry for more details), we used the tickets to store all patches that have to be committed.

But I now have some good news, trac is working again. Don't ask me why, I have absolutely no idea, and I didn't change anything (except doing the usual updates).
So that means I'll commit everything to sync svn with 1.0 final and then start committing all patches that were added to tickets since August (that's when svn commit stopped working) and others that were planned for 1.1. That will take a few days :)


I'll also try to update this blog at least once a month to tell you what happened during the last month in our forum, trac and on IRC.

Here are a few things that happened recently:
- Online WPA cracking services: with cloud computing that was launched begin december then now with GPU.
- Injection and packet capture with aircrack-ng seems to work with the Nokia N900. I also read that it will have USB host soon.
- Beini 1.0-RC5.1: A wireless network security testing system,it is based on Tiny Core Linux.
- GUI for aircrack-ng in C# using Mono.
- minidwep-gtk a GUI for aircrack-ng in shell script.
- Slitaz Aircrack-ng: the base Slitaz cooking version plus the latest Aircrack-ng SVN version, wireless drivers patched for injection and other related tools.


I am also currently installing a new server (Core i5 2.66Ghz, 8Gb Ram, 2x 80Gb SSD) for aircrack-ng. That will allow us to organize better the different parts and give a better service to our ever growing community ;).

Our webhoster offers ESXi and I first wanted to use it to virtualize our stuff but it takes too much time to stabilize it (and IP management is a bit tricky/expensive) and since I didn't wanted to wait any longer, I switched to vmware server for the different parts:
- trac and buildbot.
- forum.
- downloads: videos, patches, storage, archive, nightly builds, ... (we currently have around 20Gb of stuff).
- photos and videos of the conventions (btw, I'll soon post the pictures I took during 26C3 and of other conventions).
- a few other virtual machines for testing.
The main website and wiki will not be moved.


Last but not least, I would also like to thank again everybody who help us, not only the donations (although important to pay the servers and domains), but everybody who contributes to the project: in the forum, irc, in the wiki (documentation and translations), bug reports and bug fixes, improvements, ...


More to come in the following days :)

New stuff

Hello everybody,

sorry for not posting anything since some time now, but we have been really busy these days and we got new stuff for you:
- 1.0 rc4 last week
- 1.0 final release date
- Planned features in 1.1
- New logo
- New website

I guess you saw there was a release, 1.0rc4 a bit more than a week ago.
This fixes a lot of stuff (and add some new). It fixes compilation not only on linux but also on BSD plateforms (OpenBSD compilation is fixed) and others ...
The changelog speaks by itself ;)

Here are some planned features for 1.1:
- Be able to use directly cowpatty tables in aircrack-ng (without having to convert them to airolib-ng).
- OSX capture (and maybe injection) with some adapters (Ticket #653).
- Improved WPA handshake detection.
- Bug fixes (of course)
- ...

We also have been working on a new website. Here is a preview: http://www.aircrack-ng.org/new_index.html.
The goal of this new design is to be able to reduce the traffic on the website, currently around 1Tb each month and also to be give a quick access to important information.
As explained in an earlier post, it will not replace the wiki, it will just be the home page and be next to the wiki (you can keep all your bookmarks).
If you (still) have any remark (or improvements) about the new design, you can still post them in the forum (you don't need to register to post).

The logo contest is over and we have a new logo. Here is a preview (winner: segini75). We will also sell t-shirts soon (I know a good website for europe but I still have to find one for the US).


Last but not least, the new website (and new logo) will be launched at the same time as the 1.0 final release in a week or two if no big bugs are found in rc4 :)

Forum down

As you saw, the forum has been down since a few hours, around 6pm GMT+1.

The reason is that the database size is really close to the allowed disk space and the hoster stopped it automatically. I moved it to another place (where we have much more space) and there are just a few things to do before it's back up:
- DNS needs to be updated
- a few glitches on the server have to be fixed
- A script has to be written to redirect all requests from forum.tinyshell.be to the new URL (so that any link to it will still work).

The good news is that nothing was lost and it should be faster than before.

Ah yeah, ... It should be back up tomorrow evening and the release of 1.0rc3 will be done the next day :).