{5} Assigned, Active Tickets by Owner (Full Description) (18 matches)

Original thread:  http://tinyshell.be/aircrackng/forum/index.php?topic=1298

<Daouid> i cant fakeauth using rt2570 and macchanging to the FAKE MAC used for fakeauth !!!
<Hirte> so after changing your hardware mac you are unable to fakeauth?
<Daouid> aireplay just hangs, no output at all
<Daouid> yup
<Daouid> exactly
<Daouid> tried reset the card
<Hirte> sounds like a driver bug
<Daouid> wont work with the same MAC for some reason
<Hirte> but you can fake auth with whatever mac without changing the hardware mac in the first place?
<Daouid> yup
<Daouid> even with the new mac
<Daouid> just wont accept hw mac = fake mac
<Hirte> you also cannot fake auth with your original mac?
<Daouid> yes i can
<Daouid> the only scenario that wont work is (hw mac=fake mac)
<Daouid> aireplay crash
<Daouid> rt2570 1.5.0
<Daouid> ASPj drivers
<Hirte> and if you don't change your hardware mac, then you also cannot fake auth with your hardware mac?
<Daouid> didnt try
<Daouid> but i try different combination
<Hirte> ok
<Daouid> hw abc fake mac aaa
<Hirte> i'd say that the code aspj hacked into the driver for changing the mac isn't safe
<Daouid> works
<Daouid> hw aaa fake mac abc
<Daouid> works
<Daouid> hw aaa fake mac aaa doenst
<Hirte> any interesting dmesg messages?
* Quits: n3Cre0 (Remote closed the connection)
<Daouid> net_dev supplies mac
<Daouid> activating this one : ...
<Daouid> (the last one entered)
<Hirte> any error  after that?
<Hirte> or warning?
<Daouid> nop
<Daouid> none
<Hirte> does aireplay prints any message (error or warning)?
<Daouid> none just crashes...
<Hirte> segfault?
<Daouid> i unplugged the adaptor and it reverted it's mac to factory
<Daouid> nothing on screen
<Hirte> ok
<Daouid> just the input thingy
<Daouid> like a square
<Daouid> top left
<Daouid> of xterm

Update readme for new makefile and dependences.

right now you can set the speed on how fast you want to inject frames when repeating them from a file, so the time difference between each sent frame is always the same. Using the timestamps like tcpreplay does, would be more realistic in most cases. also add an option to set a speed multipliier when using timestamps, like 2 times, or 10 times faster...

make --chopchop and --fragment in aireplay-ng work with non IP LLC/SNAP headers

 Wep0ff has some interesting features that would be of value ported to aireplay-ng. Especially for targetting client workstations

It attempts to use some IPv6 traffic to get packets relayed. I have just started some research into this area. However, it may hold promise as another class of traffic that can be used to obtain a xor file.

One very interest technique is arp scanning a range of IPs to determine the actual IP of the client. It is extremely fast to scan a 169.254.0.0 "B" class. 169.254.0.0 is the default IP assignment range used by WinXP when there is no DHCP response. A great enhancement for aireplay-ng would be to build in the ability to scan networks you specify. The parameter would be IP/CIDR.

As an aside, they pick up double the PRAGA from an initial ARP packet.

d.

 http://tinyshell.be/aircrackng/forum/index.php?topic=1002.msg6903#msg6903

 http://tinyshell.be/aircrackng/forum/index.php?topic=1015.msg6905#msg6905

 http://tinyshell.be/aircrackng/forum/index.php?topic=1095.msg6906#msg6906

 http://tinyshell.be/aircrackng/forum/index.php?topic=14.msg6907#msg6907

Hi,

Here's an early and incomplete patch to port aircrack-ng to the Cell Broadband Engine (Playstation 3).

It currently only supports WPA cracking. (However, I'm not even sure if it's worth to implement WEP cracking, as PTW is so fast anyway).

So, well. The code still has serious speed issues, but it basically works. On the playstation we get a speedup of about 2.3, compared to running an unpatched aircrack-ng on the PS3. So it's not _that_ bad.

However, I only get half the speed on the (patched) PS3, compared to a Quad Power-Mac with 2.5GHz. I think this can be improved. I'm working on it...

Don't commit this. I will commit this when it's done. This ticket is just for comments.

Script something to create a nightly build of trunk and 1.0-dev and upload it on  http://nightly.aircrack-ng.org (new subdomain to create)

Here is airdriver-ng log:

Mon Mar 17 18:37:59 EDT 2008
Installing "ACX100/111" on 2.6.22-14-generic.
--18:37:59--  http://www.cmartin.tk/acx/acx-20070101.tar.bz2
           => `acx-20070101.tar.bz2'
Resolving www.cmartin.tk... 216.127.66.87
Connecting to www.cmartin.tk|216.127.66.87|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 146,810 (143K) [application/x-tar]

    0K .......... .......... .......... .......... .......... 34%  179.30 KB/s
   50K .......... .......... .......... .......... .......... 69%  456.60 KB/s
  100K .......... .......... .......... .......... ...       100%  924.46 KB/s

18:38:00 (329.38 KB/s) - `acx-20070101.tar.bz2' saved [146810/146810]

--18:38:00--  http://patches.aircrack-ng.org/acx-20070101.patch
           => `acx-20070101.patch'
Resolving patches.aircrack-ng.org... 213.186.33.2
Connecting to patches.aircrack-ng.org|213.186.33.2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1,444 (1.4K) [text/x-diff]

    0K .                                                     100%   49.56 MB/s

18:38:01 (49.56 MB/s) - `acx-20070101.patch' saved [1444/1444]

patching file common.c
patching file pci.c
make: Entering directory `/usr/src/linux-headers-2.6.22-14-generic'
  CC [M]  /usr/src/drivers/acx-20070101/wlan.o
  CC [M]  /usr/src/drivers/acx-20070101/conv.o
  CC [M]  /usr/src/drivers/acx-20070101/ioctl.o
  CC [M]  /usr/src/drivers/acx-20070101/common.o
/usr/src/drivers/acx-20070101/common.c: In function ‘acx_l_rxmonitor’:
/usr/src/drivers/acx-20070101/common.c:2757: error: ‘struct sk_buff’ has no member named ‘mac’
make[1]: *** [/usr/src/drivers/acx-20070101/common.o] Error 1
make: *** [_module_/usr/src/drivers/acx-20070101] Error 2
make: Leaving directory `/usr/src/linux-headers-2.6.22-14-generic'