Skip to content
hostapd-mana for the 6.th gen. Wifi Pineapple, and OpenWRT
Branch: master
Clone or download
Latest commit c4c8ae5 Apr 17, 2019

Readme.md

hostapd mana

by Dominic White (singe) & Ian de Villiers @ sensepost (research@sensepost.com)

AWS CodeBuild Status

Overview

A access point (evilAP) first presented at Defcon 22.

More specifically, it contains the improvements to KARMA attacks we implemented into hostapd, as well as the ability to rogue EAP access points.

This will track the hostapd releases, although at a somewhat lagged pace depending on time. At the time of publication this was up to date with the latest hostapd-2.3 branch.

Contents

It contains:

  • hostapd-mana - modified hostapd that implements our new karma attacks
  • crackapd - a tool for offloading the cracking of EAP creds to an external tool and re-adding them to the hostapd EAP config (auto crack 'n add)

Installation

The build instructions are exactly the same as hostapd's, and can be found in hostapd/README

Pre-Requisites

Hardware

You'll need a wifi card that supports master mode. You can check whether it does by running: iw list You want to see "AP" in the output. Something like:

Supported interface modes:
         * IBSS
         * managed
         * AP
         * AP/VLAN
         * monitor
         * mesh point

More information at https://help.ubuntu.com/community/WifiDocs/MasterMode#Test_an_adapter_for_.22master_mode.22

Three cards that have been confirmed to work well, in order of preference are:

Note, the silver Alfa does not support master mode and will not work.

Running

You'll need to generate a valid configuration file. Some example of these are included in the MANA toolkit at https://github.com/sensepost/mana

License

The patches included in hostapd-mana by SensePost are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License (http://creativecommons.org/licenses/by-sa/4.0/) Permissions beyond the scope of this license may be available at http://sensepost.com/contact us/. hostapd's code retains it's original license available in COPYING.

You can’t perform that action at this time.