Wireless Communications

Working Wireless Cards with BackTrack 5

2012-02-01T22:32:00.001+02:00

AWUS036H (rtl8187, r8187) - both mac80211 and IEEE drivers - passed
AWUS036NH (Ralink RT2870/3070) - using the mac80211 rt2x00usb drivers - passed
BCM4312 802.11b/g LP-PHY (rev 01) - using the mac80211 b43, works well - passed
Rockland N3 - (Ralink RT2870/3070) - using the mac80211 rt2x00usb drivers -passed
Edimax EW-7318USG USB - (Ralink RT2501/RT2573) - using the mac80211 rt2500usb/rt73usb drivers -passed
ASUSTek Computer, Inc. RT2573 - using the mac80211 rt2500usb/rt73usb drivers -passed
Linksys WUSB54GC ver 3 - using the mac80211 rt2800usb drivers -passed
Ubiquiti SRC - using the mac80211 ath9k drivers-passed
Internal Intel Corporation PRO/Wireless 3945ABG - using the mac80211 iwl3945 drivers-passed
Dlink WNA-2330 PCMCIA - using the mac80211 ath5k drivers-passed
Atheros Communications Inc. AR9285 Wireless Network Adapter (PCI-Express) (rev 01) - using the mac80211 ath9k drivers-passed
Netgear wg111v2 - using the mac80211 rtl8187 drivers-passed
ZyXEL AG-225H v2 - using the mac80211 zd1211 drivers - passed
Intel 4956/5xxx - using the iwlagn drivers - passed

AWUS050NH

2010-01-17T16:51:00.001+02:00

AWUS050NH IEEE 802.11a/b/g/n Wireless USB adapter provides users to launch 802.11a/b/g/n wireless network at 150/300 Mbps in the 2.4GHz/5.8GHz band, which is also compatible with 802.11a/b/g wireless devices at 11/54 Mbps.

You can configure AWUS050NH with ad-hoc mode to connect to other 2.4GHz/5.8GHz wireless computers, or with Infrastructure mode to connect to a wireless AP or router for accessing to Internet.

Feature :
Compatible with IEEE 802.11n draft 3.0, 802.11a/b/g wireless standards
2.4GHz and 5.8GHz frequency band, MIMO (Multiple Input Multiple Output)
Complies with Universal Serial Bus Rev. 2.0 specifications
High speed transfer TX data rate up to 150 Mbps
High speed transfer RX data rate up to 300 Mbps
Supports WPS by S/W
Supports wireless data encryption with 64/128-bit WEP, WPA, WPA2, TKIP, AES
Wide Range coverage
Compliant with FCC Part 15.247 for US, ETS 300 328 for Europe
Supports driver for Windows 2000, XP 32/64, Vista 32/64, Linux (2.4.x/2.6.x), Mac (10.4.x/10.5.x) Power PC& PC.

Specification :
Model AWUS050NH
Standards Wireless: IEEE 802.11a/b/g/n
USB 2.0 standard
Data Rate 802.11b: Up to 11 Mbps
802.11g: 54Mbps
802.11n: 300Mbps
OS Supported Windows vista
Windows XP
Linux
Mac OX
Interface USB 2.0 mini USB
Antenna Type 1 x 2.4/5GHz RP-SMA connector with Antenna
1 x Dual band print antenna
Chipset Ralink RT2770 RT2750
One LED Power / Status: steady green
Wireless Act: flash

Frequency Range IEEE 802.11b/g
2412 ~ 2462 MHz (N.A)
2412 ~ 2472`MHz (EU)
2412 ~ 2482`MHz (Japan)

IEEE 802.11a
5150 MHz – 5250 MHz (Japan)
5150 MHz – 5350 MHz
5470 MHz－5725 MHz (Europe)
5150 MHz – 5350 MHz
5725 MHz－5850 MHz (USA)

Channel IEEE 802.11b/g
1 ~ 11 channels (North America)
1 ~ 13 channels (General Europe)
1 ~ 14 channels (Japan)

IEEE 802.11a
4 Channels (Japan)
19 Channels (Europe)
13 Channels (USA)

Emission Type DSSS/OFDM
Output Power @6Mbps/1mbps 27dBm@11b/g
21dbm@11bgn HT20
20dbm@11bgn HT40

18dbm@11a
13dbm@11a HT20-(14dbm)
14dbm@11a HT40-(13dbm)

Sensitivity for 802.11b/g Legacy Mode
1M -91
11M -91
6M -93
54M -77

HT20 Mode
MCS 15 -74
MCS 8 -92
MCS 7 -75
MCS 0 -92

HT40 Mode
MCS 15 -70
MCS 8 -89
MCS 7 -73
MCS 0 -88 (Typically @PER < 8% packet size 1024 and @25ºC + 5ºC)

Sensitivity for 802.11a 5180MHz 5320MHz 5500MHz 5825MHz
6M -93 -92 -93 -93
54M -78 -78 -78 -78

HT20
MCS 15 -74 -75 -75 -74
MCS 8 -92 -93 -92 -88
MCS 7 -74
-75 -75 -74
MCS 0 -92
-93 -92 -88

HT40
MCS 15 -71
-71 -70 -68
MCS 8 -90
-89 -89 -86
MCS 7 -73 -73 -72 -69
MCS 0 -90 -88 -87 -87

Frequency Stability Within ± 25ppm
Data Modulation Type BPSK, QPSK, CCK and OFDM
Power Voltage: 5V+5%
Security WEP 64/128
802.1X support
Wi-Fi Protected Access (WPA)
WPA-PSK
WPA II
Operating Temp 0°C ~ +50°C
Storage -10°C ~ +65°C
Humidity 5%~98% non-condensing
Dimention 8.5*2.2*6.3cm
Weight 38.5g

Driver Installation on Windows Vista

Driver Installation on Mac Snow Leopard

AWUS036H (Upgrade to 1Watt)

2010-01-17T16:48:00.001+02:00

Wireless-G high power

with SMA Adapter (2dBi or 5dBi Antenna)

IEEE 802.11g/b, WPA/WPA2 Compliant, Attachable Antenna

Feature :
Connects at a full 54Mbps via USB 2.0, up to 8 times faster than a USB 1.1 adapter
High gain upgradeable
Compact size for greater flexibility
Also compatible with USB 1.1 desktop and notebook computers
Plug-and-Play Compatible with windows 98SE, 2000, Millennium, XP and Linux
High security 64/128/256bit WEP Encryption, TKIP, WPA, 802.11

Specification :

Model AWUS036H
Standards Wireless: IEEE 802.11b/g
USB 2.0 standard
Data Rate 802.11b: UP to 11Mbps
802.11g: 54Mbps
OS Supported Windows 98SE, Windows ME, Windows 2000, Windows XP, Linux 2.6, Mac 10.4
Interface USB 2.0 mini USB
Antenna Type 1 x 2.4Ghz SMA connector
Chipset Realtek 8187L
One LED Power/Status, Wireless Act.

Frequency Range 2412~2462 MHz (N.A)
2412~2472 MHz (EU)
2412~2484 MHz (Japan)
Channel 1~11 channels ( North America )
1~13 channels ( General Europe)
1~14 channels (Japan)
Emission Type DSSS/OFDM
Output Power 24dBm (OFDM), 30dBm(CCK)
Sensitivity for 802.11b 1, 2 Mbps (BPSK, QPSK): - 96dBm
11 Mbps (CCK): -91dBm
(Typically @PER < 8% packet size 1024 and
@25ºC + 5ºC)

Sensitivity for 802.11g 54Mpbs (64QAM): -76dbm
48Mbps (64QAM): -71dbm
36Mpbs (16QAM): -78dbm
24Mbps (16QAM): -80dbm
18Mbps (QPSK): -81dbm
12Mpbs (QPSK): -82dbm
9Mbps (BPSK): -85dbm
6Mbps (BPSK): -91dbm
(typically @PER < 10% packet size 1024 and @25ºC + 5ºC)
Frequency Stability within +25 ppm
Data Modulation Type BPSK,QPSK, CCK and OFDM
Power Voltage: 5V+5%
Security WEP 64/128
802.1X support
Wi-Fi Protected Access (WPA)
WPA-PSK
WPA II
Operating Temp 0°C ~ +50°C
Storage -10°C ~ +65°C
Humidity 5%~98% non-condensing
Dimention 8.5*2.2*6.3cm
Weight 38.5g

Driver Installation Guide for Windows Vista

Driver Installation Guide for Windows 7

AWUS036NH 802.11n/b/g 2W Long-Rang USB Adapter

2010-01-17T16:43:00.002+02:00

AWUS036NH is the IEEE 802.11b/g/n Wireless USB adapter provides users to launch IEEE 802.11b/g/n wireless network at 150 Mbps in the 2.4GHz band, which is also compatible with IEEE 802.11b/g wireless devices at 54 Mbps. You can configure AWUS036NH with ad-hoc mode to connect to other 2.4GHz wireless computers, or with Infrastructure mode to connect to a wireless AP or router for accessing to Internet.

AWUS036NH includes a convenient Utility for scanning available networks and saving preferred networks that users usually connected with. Security encryption can also
be configured by this utility.

Feature :
Compatible with IEEE 802.11n, 802.11b/g/n wireless standards
2.4GHz frequency band, MIMO (Multiple Input Multiple Output)
Complies with Universal Serial Bus Rev. 2.0 specifications
High speed transfer TX data rate up to 150 Mbps
Supports WPS by S/W
Supports wireless data encryption with 64/128-bit WEP, WPA, WPA2, TKIP,
AES
Wide Range coverage
Compliant with FCC Part 15.247 for US, ETS 300 328 for Europe
Supports driver for Windows 2000, XP 32/64, Vista 32/64, Windows 7
Linux (2.4.x/2.6.x), Mac (10.4.x/10.5.x) Power PC& PC.

Specification :

Model AWUS036NH
Standards Wireless: IEEE 802.11b/g/n
USB 2.0 standard
Data Rate 802.11b: UP to 11Mbps
802.11g: UP to54Mbps
802.11n: UP to 150Mbps
OS Supported Windows 2000
Windows XP
Windows Vista
Windows 7
Linux 2.6
Mac 10.4, 10.5, 10.6
Support S/W AP
Interface USB 2.0 mini USB
Antenna Type 1 x 2.4Ghz RP-SMA connector
Chipset RT3070
One LED Power/Status
Wireless Act.

Antenna 5dBi 2.4GHz Antenna
Frequency Range 2.412~2.483 GHz
Channel 1~11 channels ( North America )
1~13 channels ( General Europe)
1~14 channels (Japan)
Output Power 802.11b : 33dBm±1
802.11g : 32dBm±1
802.11n (HT20) : 32dBm±1
802.11n (HT40) : 33dBm±1
Sensitivity 11b: -92dBm
11g: -76dBm
11n: -73dBm@HT20
-70dBm@HT40

Data Modulation Type BPSK,QPSK, CCK and OFDM
Power Voltage: 5V+5%
Security WEP 64/128
802.1X support
Wi-Fi Protected Access (WPA)
WPA-PSK
WPA II
Cisco CCX support
WAPI-PSK
WAPI-CERT Environment
Operating Temp 0°C ~ +50°C
Storage -10°C ~ +65°C
Humidity 5%~98% non-condensing

Alfa AWUS036H 1000mW (formerly 500mW) Long-distance USB Wireless Adapter + Antenna

2010-01-17T16:19:00.001+02:00

Alfa AWUS036H 1000mW USB Wireless Adapter w/ threaded RP-SMA Jack & Antenna:
Best Long-distance USB WiFi Adapter for 802.11G wireless networks

This is the latest version of Alfa sku AWUS036H: It was formerly designated as a 500mW device and now Alfa is claiming that the specification is 1000mW (1-watt): However, in our tests of this latest version against the previous (500mW) version, we find an improvement in signal strength of approximately 7% vs. the previous (500mW) version.

This wireless adapter's 500mW Tx/Rx power compared to Tx/Rx power of popular wireless card models:

20xthe Tx/Rx power of LinkSys WPC11, which has 25mW

1.67x the Tx/Rx power of the most powerful PCMCIA wireless card:Ubiquiti 300mW

SECURITY: WEP 64-bit, 128-bit, and 256-bit; WPA, WPA2

Easy installation and hot-plugging - flexibility and convenience of USB connections. Quickly and easily connect to wireless network with minimal install timeand effort.
In new retail BOX, with CD-ROM with User Manual, drivers, Windows-based configuration utility and status monitoring, full documentation in PDF format.
If you have an internal wireless card: You can use this USB 500mW adapter by disabling your internal card (in Device Manager).

Wifiway, Livecd based on LFS

2010-01-17T16:10:00.003+02:00

Download Links
http://download.wifislax.com:8080/wifiway-1-final.iso
http://download.wifislax.com:8080/wifiway-1-final.iso.md5

Kernel
Wifiway has been adapdet to start in 'LiveUSB' and optimitzed with the tecnology SMP.
This tecnology improves the system speed if you have new processors like dual core

ieee80211 drivers
Ralink USB rt2570
Ralink PCI rt2500
Ralink rt61, if you want load this, you must load with his launcher, you can find this in the menu of drivers
Ralink USB rt73
Atheros madwifi-hal
Intel pro wireless ipw2200
Realtek r8187
Intel pro wireless 3945, ipwraw old, If you want load ipwraw-old, also you have to load with his launcher

mac80211 drivers

Zydas zd1211rw-mac80211
Intel pro wireless iwlagn, wifiway has the newest firmware to iwl4965 and iwl5x00, It's the first LiveCD that includes these drivers natively
Intel pro wireless iwl3945, theese are been loaded default.
Broadcom b43 y b43legacy

Also, we have put more drivers in /opt/drivers. If you want use them, you must to load it

Ralink rtx200
Intel pro wireless ipw2x00
Atheros ath5k
Atheros ath9k

wifiway includes lot of wireless tools like:
Suite aircrack-ng
jazzteldecrypter
stkeys
wlandecrypter
dlinkdecrypter
rfidtool version 0.2
decsagem
wepattack
weplab
cowpatty
airoscript with some tools incorporated inside
wlaninject
wifizoo 1.3
wireshark
airpwn
hamster & ferret
wifi-radar
Kwifimanager
Wireless assisntat
wifiscanner
WPA-GUI: Gui to connect with wpa-psk
rutilt

Linksys WUSB54GC v3

2010-01-17T16:06:00.001+02:00

Linksys WUSB54GC v3 (RT2800U )
Modem Specifications
Manufacturer: Ralink Technology, Corp.
Features: WLAN
Max Communication Protocol: 802.11b
802.11g
802.11n
Communication Buses: USB
Wireless: ISM
OS Platforms: Apple Mac OS X
Linux k 2.4
Linux k 2.6
Windows 2000
Windows Vista
Windows Vista 64-Bit
Windows XP
Windows XP 64-Bit
Chipset: Manufacturer: Ralink Technology, Corp.
Family Type: 802.11 WLAN MAC-Controller
Family: RT2800U 11bgn WLAN
Name: RT2800U 11bgn WLAN USB2
Hardware IDs: BABT:
FCC:
EEPROM ID: USB\VID_148F&PID_2870

Change country CRDA of ALFA-AWUS036H version 500mW/1.000mW with RTL8187/Stacks-mac80211

2010-01-17T16:03:00.000+02:00

NOTE:
- Editing and creating files described, must be done carefully.
- Check the difference in formatting characters (quotes '' “) when you copy&paste.
- Tested on Ubuntu Jaunty with Kernel 2.6.28-17-generic (not tested on Ubuntu Karmic or Kernel above 2.6.28)
- The frequency of 5.0 GHz is not supported by chipset used by this model of ALFA card.

With mac80211 drivers the limit of EIRP is set automatically by CRDA, for set/increase the full TX power You can choose only one of these two different options to change your default Country.

- FIRST OPTION -
Shortcuts for set automatically CRDA and enables to 2.4 GHz and 5.0 GHz of 30 dBm with one command line
- If you use more than one wireless card is convenient to change automatically the CRDA when you need and only for your ALFA card.
- To simplify and not permanently change the default data, I suggest using this method:

Create new file:

Code:
sudo gedit /usr/local/bin/crda_change
Copy&paste this text:

Code:
#!/bin/sh
sudo modprobe rtl8187
sleep 2
sudo iw reg set BO
Make file executable:

Code:
sudo chmod +x /usr/local/bin/crda_change
Create new alias:

Code:
printf "alias boost=\'sudo /usr/local/bin/crda_change'\n" | tee a ~/.bashrc
- Now if you want load the driver RTL8187 in your modules and change automatically the CRDA use only new one "boost" command:

Code:
boost
- SECOND OPTION -
Option to automate the modification of the CRDA, and put in "UP" mode your ALFA-AWUS036H when you plugged in to USB port.

Create the file "crda_change" as described in previous step called --> FIRST OPTION
Create this file: (or edit if it already exists)

Code:
sudo gedit /etc/udev/rules.d/80programs.rules
Copy&paste this text:

Code:
SUBSYSTEMS=="usb", SYSFS{idVendor}=="0bda", SYSFS{idProduct}=="8187", RUN+="/usr/local/bin/crda_change"
- Now, when you connected your wifi card into USB port, the scrip will perform all operations.

INSTALLING DRIVER r8187/Stacks-ieee80211 on UBUNTU only for ALFA-AWUS036H

2010-01-17T16:01:00.000+02:00

Installing driver r8187

NOTE: Do not make any changes to the package/driver. (is already changed)
IMPORTANT NOTE:Ref. ALFA-AWUS036H + r8187/Stacks-ieee80211 on Ubuntu Karmic -
- The driver r8187/Stacks-ieee80211at the moment is not compilable, because this Kernel replaced the "old net_device API" structure with a new one called "net_device_ops".
http://trac.aircrack-ng.org/ticket/650

Code:
sudo mkdir /usr/src/drivers
cd /usr/src/drivers
sudo wget http://www.jano.netsons.org/wardiving/driver-patch/rtl8187_linux_26.1010-intrepid-jaunty.zip
sudo unzip rtl8187_linux_26.1010-intrepid-jaunty.zip
cd rtl8187_linux_26.1010.0622.2006/
sudo patch -Np1 -i rtl8187_2.6.27.patch
sudo make
sudo make install
For loaded/use your ALFA-AWUS036H, use this command:

Code:
sudo modprobe r8187
Alternative link for download driver:
http://jano.homelinux.net/wardriving/driver-patch/rtl8187_linux_26.1010-intrepid-jaunty.zip

Installing the Compact Wireless on UBUNTU for ALFA-AWUS050NH/driver rt2800usb or ALFA-AWUS036H/driver RTL8187

2010-01-17T15:59:00.001+02:00

Code:
sudo rmmod rtl8187
sudo rmmod mac80211

echo "blacklist rtl8187" | sudo tee -a /etc/modprobe.d/blacklist.conf
echo "blacklist mac80211" | sudo tee -a /etc/modprobe.d/blacklist.conf
echo "blacklist r8187" | sudo tee -a /etc/modprobe.d/blacklist.conf
echo "blacklist rt2870sta" | sudo tee -a /etc/modprobe.d/blacklist.conf
echo "blacklist rt3070sta" | sudo tee -a /etc/modprobe.d/blacklist.conf
echo "blacklist rt2800usb" | sudo tee -a /etc/modprobe.d/blacklist.conf

sudo mkdir /usr/src/drivers
cd /usr/src/drivers
sudo wget http://download.aircrack-ng.org/drivers/compat-wireless-aircrack-alfa036h-050nh.tar.bz2
sudo tar jxvf compat-wireless-aircrack-alfa036h-050nh.tar.bz2
cd compat-wireless-aircrack-alfa036h-050nh
sudo make
sudo make install
sudo make unload
- At this point, to use the driver RTL8187 with ALFA-AWUS036H, load the appropriate module with this command:

Code:
sudo modprobe rtl8187
- While, for use of the new ALFA-AWUS050NH, load driver RT2800usb:

Code:
sudo modprobe rt2800usb

UPDATE (15/Jul/09)
Ref. ALFAAWUS050NH on Ubuntu Jaunty -
- It was released Kernel 2.6.30 and 2.6.31, and when there are some bugs related to the Ralink driver.
- The injection works well, but if you can not surf the Internet, you can alternatively use the Ralink utility.
(Ralink Wireless Driver Station RT2870sta use)

UPDATE (03/Nov/09)
Ref. ALFA-AWUS050NH on Ubuntu Karmic -
- For surfing in Internet use New driver RT3070sta. (already included)
- For use with Aicrack-ng load RT2800usb driver. (already included)

Ref. ALFA-AWUS036H + RTL8187/Stacks-mac80211 on Ubuntu Karmic -
- For use Aircrack-ng load the default RTL8187 driver, but this driver is NOT stable for browsing Internet.

ALFA-AWUS036H & ALFA-AWUS050NH INSTALLING/UPDATING DRIVERS RTL8187, r8187, RT2800usb on UBUNTU

2010-01-17T15:58:00.000+02:00

NOTE: For surfing Internet with ALFA-AWUS050NH on Ubuntu Jaunty with rt2870sta driver, you must use the Kernel "2.6.28-11-generic #42-Ubuntu", without change or updates the drivers modules.
NOTE: The tutorial is not related to Ubuntu karmic.

Driver RTL8187/Stacks-mac80211 (ref. ALFA-AWUS036h)
- These drivers, for surfing Internet, are more stable than r8187, and fully compatible with Network-Manager 0.7 installed by default on Ubuntu 9.04. Network-Manager 0.7 installed by default on Ubuntu 9.04.
- Supports all encryption without problems. (OPEN, WEP and WPA/WPA2)
- With Compat-Wireless, the "injection" working, but for support “Fragmentation attack” (opt. -5) you need to install one patch.
- The RX sensitivity and packets injection is less, related to drivers r8187.

Driver r8187/Stacks-ieee80211 (ref. ALFA-AWUS036h)
- This driver is recommended for use with the Suite of Aircrack-ng, but not particularly suitable for Internet connections, as less stable and discontinuous at regular intervals.
- The r8187 is compatible with Network-Manager 0.7, installed by default on Ubuntu 9.04, and supporting the encryption OPEN and WEP (not WPA/WPA2)
- To establish links with WPA/WPA2 encryption, require a manual setup.
- The "injection" and all "attacks" of Aireplay-ng, are supported after installing the appropriate "patch".
(for other info read the Wiki: http://aircrack-ng.org/doku.php?id=r8187)

Driver RT2800/Stacks-mac80211 with Kernel 2.6.28-11-generic (ref. ALFA-AWUS050NH)
- With Compat-Wireless, the "injection" and all "attacks" of Aireplay-ng, are already supported natively without installing any "patch".
- Compatible with "Macchanger".
- The RX sensitivity and packets injection is less, related to ALFA-AWUS036H.
- Do not allow surfing Internet (possible with the driver RT2870sta or the new RT3070sta)

Update your OS and install these packages before continuing

Code:
sudo dpkg --configure -a && sudo apt-get install -f && sudo apt-get updateCode:
sudo apt-get install linux-headers-$(uname -r) build-essential make patch gettext gcc python-psyco autoconf subversion tcl8.5 libssl-dev libnl1 libnl-dev
Upgrading the package "IW" (suggested for both models of ALFA card)

Code:
sudo mkdir /usr/src/drivers
cd /usr/src/drivers
sudo wget http://wireless.kernel.org/download/iw/iw-0.9.19.tar.bz2
sudo tar jxvf iw-0.9.19.tar.bz2
cd iw-0.9.19
sudo make
sudo make install
Step ONLY for ALFA-AWUS050NH and If NOT present the RT2870 Firmware.
(not necessary on Jaunty because is already installed)
For check Firmware:

Code:
jano:~$ ls -l /lib/firmware/rt2870.bin
-rw-r--r-- 1 root root 4096 2009-04-02 23:46 /lib/firmware/rt2870.bin
For Installing Firmware:

Code:
sudo mkdir /usr/src/drivers
cd /usr/src/drivers
sudo wget http://www.jano.netsons.org/wardriving/driver-patch/RT2870_Firmware_V8.zip
sudo unzip RT2870_Firmware_V8.zip
sudo cp RT2870_Firmware_V8/rt2870.bin /lib/firmware/$(uname -r)

Aircrack-ng 1.0

2010-01-17T15:51:00.000+02:00

Latest version of Airgraph-ng and Airoscript were included in this release.

Important note: It does not support peek drivers.
Important note 2: It is not in sync with our subversion (the repository works fine in read mode but commit doesn't work anymore; we're working on the issue) meaning that the sources are svn trunk plus a few patches.

Changelog:

•airserv-ng: Now works fine between 32 and 64bit OSes.
•wesside-ng: Fixed some endianness bugs
•airodump-ng-oui-update: Make sure the user is root when updating the file.
•airmon-ng: Updated iw download link (0.9.17).
•All: Fixed compilation with some gcc.
•patches: Added missing patches from patches.aircrack-ng.org: mac80211_2.6.28-rc4-wl_frag+ack_v3.patch
•manpage: Updated aireplay-ng manpage.
•INSTALLING: Removed (now) useless requirement for OSX installation.
•GUI (windows): Fixed 2nd selection of a capture file.

Slitaz Aircrack-ng

2010-01-17T15:50:00.001+02:00

The goal of SliTaz is to have a GNU/Linux distro working in memory (RAM). Installable to a hard disk, with good support for French language web, it offers reliability, high performance and PC recycling. SliTaz boots with Syslinux and provides more than 200 Linux commands, the LightTPD web server, SQLite database, rescue tools, IRC client, SSH client/server powered by Dropbear, X window system, JWM (Joe's Window Manager), gFTP, Geany IDE, Mozilla Firefox, Alsaplayer, Gparted, a sound file editor and much more.

Summary of What Is Included:

■Aircrack-ng 1.0 final including sqlite airolib-ng support
■madwifi-hal r4032 patched for injection (The new official HAL (0.10.5.6) supports AR5007EG (and AR5006EG) on 32 and 64 bit systems.)
■madwifi-ng r4032 patched for injection
■rt73 (ASPj rt73-k2wrlz-3.0.2) patched for injection
■r8187 (rtl8187_linux_26.1010 for RTL8187L) patched for injection
■Linux kernel 2.6.30.6 and related wireless drivers.
■Includes Compat-wireless drivers from November 15/2009. The ZD1211B driver has been patched for injection and power readings. Mac80211 has been patched for the fragmentation attack.
■mdk3 wireless tool
■Wireshark
■NMAP
■Midnight Commander
■General tools / compilers to do software development
■See the Slitaz site for the list of standard packages / programs. The distribution is based on the 2.0 cooking version of Slitaz plus updated packages to November 16/2009.

slitaz-aircrack-ng-20091124.iso

Fragmentation Attack

2010-01-17T15:47:00.004+02:00

And another world premiere from me. First implementation of the Fragmentation Attack on Linux. This attack needs a special driver and card, that is able to handle the IEEE802.11 fragmentation correctly, your driver may not work or may need to be updated or modified. The output of this tool is a file in the aircrack-ng keystream format (.xor). The output can be used in the same way like the output of the chopchop attack in aireplay-ng. With that keystream you can build an ARP packet (arpforge-ng or packetforge-ng). This packet can then be injected into the target wifi system, generating either answers and/or fowarded packets increasing the IV count. For an example attack, see the README in the tarball. afrag has already been integrated into aireplay-ng, best idea is to get the aircrack-ng SVN version for the newest fragmentation attack code.

afrag-0.1.tar.bz2

Fake Shared Key Authentication

2010-01-17T15:47:00.003+02:00

This is world's first fully functional code to enable fake authentication on networks using Shared Key Authentication. You do NOT need to know the key to authenticate, all you need is a keystream that has been chopped with aireplay-ng's chopchop attack. Hirte, another developer from the aircrack-ng community successfully included this code into the aircrack suite.

Fixed in Version 0.2:
•Show error when network does not use Shared Key Authentication
•Get Capability Field from Beacon Frame. (Using the standard capabilities failed for some APs)

ska-0.2.tar.bz2

Prism2_usb Injection driver

2010-01-17T15:47:00.001+02:00

This is the first Prism2 USB driver that was able to inject packets. I made this before Devine had its own one. But i never released it to the public, however. Instead of his driver, this one seems to be very stable (was able to crack a whole lot of WEPs with aireplay). It shares the same issue with Devine's driver, it doesn't inject on kernels newer than 2.6.11. I can't give any support or help for this since I gave my prism away. Sorry.

linux-wlan-ng-0.2.3-k2wrlz-usbrawsend.tar.bz2

MDK3

2010-01-17T15:45:00.002+02:00

The new MDK3 uses the osdep injection library from the www.aircrack-ng.org project. The Linux-dependant includes have been removed, mdk3 compiles and runs on FreeBSD and even Windows (Cygwin). For Windows you need special drivers, a possibly illegal DLL file and the cygwin environment. Please see the aircrack-ng website for details about Packet Injection in Windows.

MDK3 works on the new mac80211 stack.

If you are a Linux user, just make, make install and have fun.
If you are a FreeBSD user, do the same, and report back to me, if it works correctly there.
If you are a Windows user, good luck, but expect no support from me.

MDK3 is licenced under GPLv2.

Features:
•Bruteforce MAC Filters
•Bruteforce hidden SSIDs (some small SSID wordlists included)
•Probe networks to check if they can hear you
•intelligent Authentication-DoS to freeze APs (with success checks)
•FakeAP - Beacon Flooding with channel hopping (can crash NetStumbler and some buggy drivers)
•Disconnect everything (aka AMOK-MODE) with Deauthentication and Disassociation packets
•WPA TKIP Denial-of-Service
•WDS Confusion - Shuts down large scale multi-AP installations

Changelog:
MDK3 version 6

•Amok Mode now works on Ad-Hoc and MANET networks (WARNING: Clients may not reconnect automatically, so they may stay disconnected after the attack stopped!)
•Removed duplicate WPA downgrade in Deauth Mode (sorry for the confusion)
•SSID Bruteforce Mode understands 0 and 1 byte SSIDs as hidden now, and tries all lengths
•GCC 4.4 support, all warnings and extra warnings fixed
•Whitelists and Blacklists in Amok Mode are re-read periodically every 3 seconds.
You can use this to dynamically allow or block hosts with scripts.
•A lot of small bugfixesMDK3 version 5

•Enhanced MAC-Filter Bruteforce Mode
•Another WDS/WIDS/WIPS Confusion Test
•Amok Mode supports QoS packets
•Michael Countermeasure Exploit (also known as TKIP QoS Exploit)
Shuts down APs using TKIP encryption and QoS Extension with 1 sniffed and 2 injected QoS Data Packets

•WPA-Downgrade Test - deauthenticates Stations and APs sending WPA encrypted packet
With this test you can check if the sysadmin will try WEP or even disables encryption
mdk3 will let WEP and unencrypted clients work, so if the sysadmin simply thinks "WPA is broken" he sure isn't the right one for this job. (this can/should be combined with social engineering)
MDK3 version 4

•Added high-speed MAC-Filter Bruteforce Mode (experimental)
Please test this on your APs and report back for optimizing and bugfixing, thanks!

mdk3-v6.tar.bz2

RaLink RT2570 USB Enhanced Driver

2010-01-17T15:45:00.001+02:00

•Prism header can be toggled via iwpriv, no automatic changes which screwed up packet captures!
•MAC changing supported
•Support for Fragmentation Attack

Fragmentation support is now considered stable. For further details on the fragmentation attack see the paper from Andrea Bitteau: http://toorcon.org/2005/slides/abittau/

1.5.0 version has some important fixes for kernel version 2.6.19 and above.

The serialmonkey CVS repository updated its driver from a new RaLink legacy one. Version 1.6.0 is the modification of this driver with fragmentation support, MAC changing and prism headers enabled by default. This driver seems to fix some threading, some SMP and some endianness issues. So it should be more stable than previous releases.

Version 1.6.1 works for 2.6.22 kernels and comes with some more stability improvements.

Version 1.6.2 with a new base version from serialmonkey CVS, all the patches from the previous version and support for 2.6.26 kernel.

Version 1.6.3 adds kernel 2.6.27 compatibility. NOTE: You may also try the mac80211 drivers included in 2.6.27 since these drivers are pretty nice too ;)

Version 1.6.4 adds compatibility with 2.6.29.

rt2570-k2wrlz-1.6.4.tar.bz2

RaLink RT73 USB Enhanced Driver

2010-01-17T15:43:00.000+02:00

•Support for Fragmentation Attack
•Interface is called rausb0 instead of wlan0 to prevent some tools incorrectly detecting it as wlanng or hostap driver
•Injection speed can be selected with iwconfig rate command. The default speed is 54 MBit. You may want to lower it to 1 MBit before injection with iwconfig rausb0 rate 1M

IMPORTANT!
Version 3.0.0 is a new fork from the former serialmonkey CVS. It has fixes for 2.6.24 and 2.6.25 and does not need setting a MAC Address before bringing the interface up. This version includes all the enhancement of the 2.0 series of this driver. If you unplug the card while its still in use, it may crash your system. So close all applications accessing it, bring the interface down and then remove the device.

You may have waited for this:
Version 3.0.1 has an updated base version from serialmonkey CVS. It is patched with all the features of 3.0.0 and it has been successfully tested with 2.6.26 vanilla kernel.

Version 3.0.2 provides kernel version 2.6.27 compatibility.
NOTE: You may also try the mac80211 drivers included in 2.6.27 or newer since these drivers are pretty nice too ;)

Version 3.0.3 provides kernel version 2.6.29 compatibility. It uses default kernel memory allocation for devices' private data area. This may fail on 64bit platforms (according to RaLink). In previous versions the driver allocated its own memory and hacked it into the netdev structure. This hack failed in 2.6.29 and has been removed. However, the new mode works for me quite well. Please report if any problems occur.

rt73-k2wrlz-3.0.3.tar.bz2

Enhanced Injection driver for Intel ipw3945

2010-01-17T15:42:00.000+02:00

This is based on a driver made for testing purposes called ipwraw. It allows raw packet Tx/Rx with the Intel PRO/Wireless 3945ABG adapter, it's raw mode only and can't be used for normal connections to the internet. ipwraw doesn't have wireless extensions, so this modification adds some to make it easier to work with programs like aircrack-ng, kismet, mdk, ...

New in ipwraw-ng 2.3.4:

•Added compatibility fixes for recent kernels (2.6.23 and newer)
•Fixed bug when setting 5.5 Mb/s rate with iwconfig
•Fixed bugs (I hope) in Makefile - it would report that old firmware versions were adequate and also had some cosmetic glitches
•Added set TxPower Wireless Extension. Now TxPower can be set using
iwconfig INTERFACE txpower TXPOWER
(INTERFACE is normally wifi0, or eth0; TXPOWER is a the value you want to set, min=-12 and max=16)

This version includes some fixes ported from ipw3945 driver. It should be more stable now...
Default speed was left at 54 MBit, you may want to lower it to 1 MBit before injection with iwconfig wifi0 rate 1M
You will have that configured automatically if you use airmon-ng from the aircrack-ng suite (changeset 847 or greater)
More information can be found on the included README.ipwraw-ng file.

Please contact JMF directly for questions regarding his driver: tolas_feup@hotmail.com

ipwraw-ng-2.3.4-04022008.tar.bz2

Test New ALFA-AWUS036H v.2 (1.000mW) VS ALFA-AWUS036H v.1 (500mW)

2010-01-17T15:35:00.005+02:00

- Recently emerged the New ALFA-AWUS036H v.2 (1.000mW), and these are the tests.

TEST WITH NETSTUMBLER

1) usb da 100mW chipset railink
2) usb da 200mW chipset railink rt73
3) intel 2200 b/g con connettore esterno rp-sma
4) Alfa-AWUS036H 500mW
5) New Alfa-AWUS036H V2 da 1.000mW

Backtrack 4 Final

2010-01-17T15:27:00.000+02:00

BackTrack 4 Final is out and along with this release come some exciting news, updates, and developments. BackTrack 4 has been a long and steady road, with the release of a beta last year, we decided to hold off on releasing BackTrack 4 Final until it was perfected in every way shape and form.

With this release includes a new kernel, a larger and expanded toolset repository, custom tools that you can only find on BackTrack, and more importantly, fixes to all (well, most..) major bugs that we knew of. This release we received an overwhelming support from the community and we are grateful to everyone that has contributed to the success of this release.

Aircrack-ng 1.0 rc4

2009-08-06T23:15:00.001+03:00

Latest version of Airgraph-ng and Airoscript were included in this release.

Important note: It does not support peek drivers.

Changelog:

•airodump-ng: Decreased time before writing text files to 5 sec (instead of 20).
•airodump-ng: New option --output-format option (to replace --nocap): specify output files.
•airodump-ng: Fixed encryption tag value in kismet netxml files.
•airodump-ng: Sanitize essid before writing it into kismet netxml files.
•airodump-ng: Log manufacturer into kismet netxml files.
•aireplay-ng: Fake auth: reduce the number of ACKs to 2 per packet.
•aireplay-ng: Added possibility to stop sending fake auth requests after n retry failures.
•aircrack-ng: Fixed compilation on FreeBSD.
•aircrack-ng: Fixed aircrack-ng --help on OSX.
•airmon-ng: Updated iw download link (0.9.15).
•airmon-ng: Fix chipset detection for iwlagn (show "Intel 4965/5xxx" instead of "Unknown").
•airmon-ng: Display a message when udev rename madwifi-ng VAPs.
•airmon-ng: sleep 1s instead of 0.1 (0.1 is not supported by all distro).
•airolib-ng: Fixed locked database counter.
•airdriver-ng: Updated to rt2570 k2wrlz v1.6.3
•airdriver-ng: Updated r8187 patch.
•aircrack-ng, airdecap-ng, ivstools, airodump-ng, airbase-ng, aireplay-ng, airtun-ng, packetforge-ng, tkiptun-ng: Added support for PPI captures support (Thanks to dragorn).
•airdecap-ng: Fixed segfault on some capture files.
•wesside-ng, easside-ng: "ERROR: Packet length changed while transmitting (XX instead of YY)" should finaly be fixed.
•All: Added compatibility file for functions like cpu_to_le32. That should fix compilation on a lot of OSes.
•All: Temporary fix to allow compilation with recent gcc (Error message: "dereferencing type-punned pointer will break strict-aliasing rules"). I hope it doesn't break anything. A cleaner fix will be applied later.
•INSTALLING: OSX patch for Intel CPU isn't required anymore
•INSTALLING: Updated instructions to compile sqlite on cygwin for 3.6.16.
•patches: Updated sqlite (v3.6.13) patch for cygwin.
•patches: Updated wlanng patch for 2.6.28.
•patches: Updated madwifi-ng patch to r4073
•packages: Fixed spec (RPM) file.
•GUI (windows): Use last used directory when selecting another file to crack.
•GUI (windows): Allow .pcap files too (next to .cap, ...).

Slitaz Aircrack-ng Distribution

2009-08-06T23:09:00.000+03:00

The “Slitaz Aircrack-ng Distribution” is the base Slitaz cooking version plus the latest Aircrack-ng SVN version, wireless drivers patched for injection and other related tools. The custom distribution is especially tuned for the Acer Aspire One netbooks but will work well on virtually all desktops, notebooks and netbooks. It is extremely small (60meg), requires minimal memory and includes a rich set of programs.

This distribution is not intended to be all things to all people. Especially with respect to patched wireless drivers. Only a limited set of patched wireless drivers are included. If you own a card which uses one of these patched drivers then you are in luck. These are for cards which are personally owned and are known to work well. There are no plans to expand this list. If your particular card is not included then use Back Track which includes an exceedingly large number of patched drivers.

Having said that, the latest version now includes the 2.6.29 kernel with many new wireless drivers. So you may have luck with wireless devices which are not officially supported as noted above. The mac80211 drivers work for many devices out of the box.

Slitaz home: http://www.slitaz.org/en/

The foundation is SliTaz which is a free micro GNU/Linux distro using BusyBox, a Linux kernel, and GNU free software. The goal of SliTaz is to have a GNU/Linux distro working in memory (RAM). Installable to a hard disk, with good support for French language web, it offers reliability, high performance and PC recycling. SliTaz boots with Syslinux and provides more than 200 Linux commands, the LightTPD web server, SQLite database, rescue tools, IRC client, SSH client/server powered by Dropbear, X window system, JWM (Joe's Window Manager), gFTP, Geany IDE, Mozilla Firefox, Alsaplayer, Gparted, a sound file editor and much more.

Summary of What Is Included:

■Aircrack-ng 1.0 rc3 r1579 including sqlite airolib-ng support
■madwifi-hal r4032 patched for injection (The new official HAL (0.10.5.6) supports AR5007EG (and AR5006EG) on 32 and 64 bit systems.)
■madwifi-ng r4032 patched for injection
■rt73 (ASPj rt73-k2wrlz-3.0.2) patched for injection
■r8187 (rtl8187_linux_26.1010 for RTL8187L) patched for injection
■mdk3 wireless tool
■Wireshark
■NMAP
■Midnight Commander
■General tools / compilers to do software development
■See the Slitaz site for the list of standard packages / programs. The distribution is based on the 2.0 version of Slitaz plus updated packages to July 4/2009.

wicd

2009-08-06T23:07:00.000+03:00

Wicd is an open source wired and wireless network manager for Linux which aims to provide a simple interface to connect to networks with a wide variety of settings.

Some of Wicd's features include:
No Gnome dependencies (although it does require GTK), so it is easy to use in XFCE, Fluxbox, Openbox, Enlightenment, etc.
Ability to connect to wired and wireless networks
Profiles for each wireless network and wired network
Many encryption schemes, some of which include WEP/WPA/WPA2 (and you can add your own)
Remains compatible with wireless-tools
Tray icon showing network activity and signal strength
A full-featured console interface