Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Marauder #133

Open
1c0wb0y1 opened this issue May 21, 2024 · 4 comments
Open

Marauder #133

1c0wb0y1 opened this issue May 21, 2024 · 4 comments
Labels
needs-more-info Requires more information to triage question Some information is requested

Comments

@1c0wb0y1
Copy link

Describe the bug.

The marauder companion seems to not be capturing pcaps properly. It collects them but they all say 0 bytes. It could be just me but I’ve seen it on other FW so I didn’t know if there was an issue or if it’s just my end.

Reproduction

Open marauder. Scan ap. Select ap. Attack pmkid. Collect pcaps. Analyze pcaps.

Target

No response

Logs

No response

Anything else?

No response

@Willy-JL
Copy link
Member

Apps > gpio > esp > esp flasher > quick flash > your board type > marauder

@Willy-JL Willy-JL added question Some information is requested needs-more-info Requires more information to triage labels May 26, 2024
@CuriousCocainist
Copy link

Hi,
Sorry to squeeze in, but have a similar issue.

  1. Marauder flashed to dev board the way you mentioned (went through, although I got "E (217) esp_core_dump_flash: No core dump partition found!")
  2. During the first use set to save pcaps (and logs) to flipper sdcard
  3. Following attack ("EAPOL:" displayed few times on f0) no pcap files saved (no files of any type in "pcaps" folder), despite logs were saved successfully in "logs" folder

@Willy-JL
Copy link
Member

@CuriousCocainist you enabled saving on flipper side, but the board doesn't have it. Usually it's on by default from what I know but looks like it's off for you. Marauder > settings: save pcaps> run command

@CuriousCocainist
Copy link

Scratch that, I'm an idiot... :')
Got totally confused by the other ways you can access files on f0... Using "the browser" (down arrow from the main screen) allows me to see captured pcaps, while through marauder app ("View log from" or "Load Evil Portal HTML file") they look empty.
Thanks for your help @Willy-JL :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs-more-info Requires more information to triage question Some information is requested
Projects
None yet
Development

No branches or pull requests

3 participants