Add support for WPE mode

[no0be]

Add support for the hostapd-mana options allowing to intercept various EAP credentials:

• mana_wpe
• mana_eapsuccess
• mana_eaptls

See wiki page for details.

[cablethief]

Thank you, I meant to split the --mana flag into the separate flags just because you do not always want to run Mana attacks, just didn't have the time.
Will merge when I have checked it out.

[cablethief]

I think I was going for simplest is best by only having the --mana flag, but I agree with this more. May mean really long commands however.

[no0be]

Thanks for the rapid feedback!

I feel like it makes more sense to split the EAP related options for targeted attacks against WPA-Enterprise. However, you could still add a --mana-all flag that enable all mana options to also have a simple option.

[cablethief]

Will see how it works out, for now I rate this is better, will just neaten up the Mana options now cause they not as pretty as the wpe ones as the block of changes is now a single option. If I get feedback its too long then maybe we start adding convenience options like --mana-all

[cablethief]

I may change the options to follow that same

if [[ $MANA -eq 1 ]]; then

Logic, just because that was in the orig create_ap and seems to be everywhere. Also makes smaller hostapd configs if you choose to grab it from the created temp folder.

[cablethief]

Also just want to ask @singe if there are any interactions that may break things, for example credout with wpe disabled. In which case those will fall under the same block

[no0be]

I did hesitate on where to place the additional config options. Indeed, a block such as the following might be cleaner.

if [[ $MANA_WPE -eq 1]]; then

It should be inside one of the $ENTERPRISE-related block though, as these options do not make any sense if --eap is not set.

[cablethief]

Good point xD, let me look a bit closer.

[cablethief]

Should of probably made a testing branch

[cablethief]

Another option is when WPE is enabled to pull in all the normal EAP stuff forcing the requirement and shortening the commandline.

if [[ $ENTERPRISE -eq 0 ]] && [[ $MANA_WPE -eq 1 ]]; then
       <--- Would be put here
fi 

if [[ $ENTERPRISE -eq 1 ]] && [[ $MANA_WPE -eq 1 ]]; then
    cat << EOF >> $CONFDIR/hostapd.conf
mana_wpe=1
mana_credout=${MANA_CREDOUT}
EOF
fi

[no0be]

Or simpler, set ENTERPRISE to 1 if MANA_WPE is enabled prior generating hostapd.conf

if [[ $MANA_WPE -eq 1 ]]; then
   ENTERPRISE=1
fi

[cablethief]

That is soooo much better xD