Aerial - Multi-mode wireless LAN Based on a Software Access point

Printable View

Show 40 post(s) from this thread on one page

2014-10-24
Nick_the_Greek

Quote:

Originally Posted by skycrazy

Hey Nick, any advice if possible compatible with nethunter. Many thanks and great work

Hi skycrazy.

I'm watching very closely the nethunder project and I can admit that I'm very excited about that. Unfortunately I don't own a Nexus device and thus I can't test Aerial with it but I'm planning to do that in the near future, not until January-February.
That would be my next project in 2015 :)

As for now if you're able to have installed the required programs for Aerial maybe it should work.
Tale a look at first page to see what programs are required.
Have a nice day!
2014-10-29
subject_3156

Hey Nick_the_Greek,

I have a problem with running Aerial.

I use Kali 1.0.9. VM edition with TL-WDN3200 (RT5572 chipset) and I can't get fake AP started...

Also I noticed that every time script restarts network manager, it gets stuck at ''Waiting to connect to internet...'' and eth0 (interface where my internet is connected) doesn't start. I ''fixed'' that problem with manually starting eth0 everytime with

Code:

ifup eth0

and I managed to go to the end of script where process starts, but I don't see my AP.

As of settings, I use following:
-Internet interface: eth0 - pci:e1000
-SoftAP wireless interface: wlan0 - usb:rt2800usb
-hostapd mode (tried with airbase-ng too; all are supported)
-custom ESSID: bnet
-current MAC adress (used custom one too but no effect)
-CRDA:00
-used channel 1 for softAP
-tried all modes (g/n20/n40)
-OPN encryption

Looks like a really nice script, would be shame not to test it... :/
2014-10-29
subject_3156

Ok, II didn't manage to find a solution but I found new problems... :/

When connecting to internet over 3G USB stick, Aerial doesn't even want to start.. But if I go around it by leaving it on wlan, and then disconecting it looks like it solves the problem... Also, manual reconnecting issue is still there; I have to manualy connect 3G stick to internet every time Aerial resets my network manager.
What I noticed more (also happened before on VM but I thought is was VM issue) is that wlan card starts to hang. By that I mean that after failed attempt to execute script complitely, wlan card (one that is supposed to generate AP) doesn't want to connect to internet anymore; it just hangs... I think that some service still continues to work which needs to be ended in order for wlan to start working again...

Hope that I helped a bit
2014-10-31
Nick_the_Greek

Quote:

Originally Posted by subject_3156

Ok, II didn't manage to find a solution but I found new problems... :/

When connecting to internet over 3G USB stick, Aerial doesn't even want to start.. But if I go around it by leaving it on wlan, and then disconecting it looks like it solves the problem... Also, manual reconnecting issue is still there; I have to manualy connect 3G stick to internet every time Aerial resets my network manager.
What I noticed more (also happened before on VM but I thought is was VM issue) is that wlan card starts to hang. By that I mean that after failed attempt to execute script complitely, wlan card (one that is supposed to generate AP) doesn't want to connect to internet anymore; it just hangs... I think that some service still continues to work which needs to be ended in order for wlan to start working again...

Hope that I helped a bit

Hi subject_3156 and I'm very sorry for being late to respond, but I'm very busy and I will be busy for the next couple of months.
Anyway, to your subject.
There are two problems, I'm never tried Aerial with VMs and I never use it with 3G USB stick, so is hard to find what is wrong, but let's give it a shot.
To get Aerial to work some thing are required. One of them is Internet connectivity. If it doesn't detect Internet connectivity it will not continue. As I said, I don't know how your 3G USB stick acts. It's controlled by network manager? What it's interface name? Can you give me please the output of some basic commands to see if I can make some changes to Aerial?
Connect to Internet with your 3G usb, run the following, give me back the output of the commands and please tell me with which interface are you connected to Internet and with which interface are you trying to create the rogue AP.

Code:

ifconfig iwconfig iw phy # This should tell us your wireless card's capabilities. route -n | awk '($1 == "0.0.0.0") { print $NF ; exit }' # This should tell us your Internet interface nmcli dev status # This should tell us how is managed your Internet interface by network manager.

then restart network and network manager by:

Code:

service network-manager stop service networking stop service networking start service network-manager start

and re-run the:

Code:

route -n | awk '($1 == "0.0.0.0") { print $NF ; exit }' # This should tell us your Internet interface and not being an empty output. nmcli dev status # This should tell us how is managed your Internet interface by network manager.

Run all the above commands, post back the output and we will see what is wrong.

Thank you for taking the time to test my script and please be patient. I will post back when I'm able to do that.
2014-11-15
eme101

hostapd and udhcpd not working

Thank you for an amazing script!

I have problems getting hostapd to work on a 64-bit version of kali. And udhcpd to distribute ips on 32-bit. Ive got a readout of what hostapd spews out:

Code:

random: Trying to read entropy from /dev/random Configuration file: /root/Desktop/aerial/Aerial/hostapd.conf ctrl_interface_group=0 rfkill: initial event: idx=0 type=2 op=0 soft=1 hard=0 rfkill: initial event: idx=6 type=1 op=0 soft=0 hard=0 nl80211: Supported cipher 00-0f-ac:1 nl80211: Supported cipher 00-0f-ac:5 nl80211: Supported cipher 00-0f-ac:2 nl80211: Supported cipher 00-0f-ac:4 nl80211: Using driver-based off-channel TX nl80211: interface wlan0 in phy phy5 nl80211: Set mode ifindex 8 iftype 3 (AP) nl80211: Failed to set interface 8 to mode 3: -16 (Device or resource busy) nl80211: Try mode change after setting interface down nl80211: Set mode ifindex 8 iftype 3 (AP) nl80211: Mode change succeeded while interface is down nl80211: Setup AP(wlan0) - device_ap_sme=0 use_monitor=0 nl80211: Subscribe to mgmt frames with AP handle 0xfc5120 nl80211: Register frame type=0xb0 (WLAN_FC_STYPE_AUTH) nl_handle=0xfc5120 match= nl80211: Register frame type=0x0 (WLAN_FC_STYPE_ASSOC_REQ) nl_handle=0xfc5120 match= nl80211: Register frame type=0x20 (WLAN_FC_STYPE_REASSOC_REQ) nl_handle=0xfc5120 match= nl80211: Register frame type=0xa0 (WLAN_FC_STYPE_DISASSOC) nl_handle=0xfc5120 match= nl80211: Register frame type=0xc0 (WLAN_FC_STYPE_DEAUTH) nl_handle=0xfc5120 match= nl80211: Register frame type=0xd0 (WLAN_FC_STYPE_ACTION) nl_handle=0xfc5120 match= nl80211: Register frame type=0x40 (WLAN_FC_STYPE_PROBE_REQ) nl_handle=0xfc5120 match= nl80211: Add own interface ifindex 8 nl80211: if_indices[16]: 8 phy: phy5 BSS count 1, BSSID mask 00:00:00:00:00:00 (0 bits) wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE Previous country code 00, new country code 00 nl80211: Regulatory information - country=00 nl80211: 2402-2472 @ 40 MHz 20 mBm nl80211: 2457-2482 @ 40 MHz 20 mBm (no IR) nl80211: 2474-2494 @ 20 MHz 20 mBm (no OFDM) (no IR) nl80211: 5170-5250 @ 160 MHz 20 mBm (no IR) nl80211: 5250-5330 @ 160 MHz 20 mBm (DFS) (no IR) nl80211: 5490-5730 @ 160 MHz 20 mBm (DFS) (no IR) nl80211: 5735-5835 @ 80 MHz 20 mBm (no IR) nl80211: 57240-63720 @ 2160 MHz 0 mBm nl80211: Added 802.11b mode based on 802.11g information Driver does not support configured HT capability [SMPS-STATIC] wlan0: interface state COUNTRY_UPDATE->DISABLED wlan0: AP-DISABLED wlan0: Unable to setup interface. hostapd_interface_deinit_free(0xfc0590) hostapd_interface_deinit_free: num_bss=1 conf->num_bss=1 hostapd_interface_deinit(0xfc0590) hostapd_bss_deinit: deinit bss wlan0 wlan0: Deauthenticate all stations nl80211: send_mlme - da= ff:ff:ff:ff:ff:ff noack=0 freq=0 no_cck=0 offchanok=0 wait_time=0 fc=0xc0 (WLAN_FC_STYPE_DEAUTH) nlmode=3 nl80211: send_mlme -> send_frame nl80211: send_frame - Use bss->freq=0 nl80211: send_frame -> send_frame_cmd nl80211: Frame command failed: ret=-22 (Invalid argument) (freq=0 wait=0) hostapd_cleanup(hapd=0xfc3f30 (wlan0)) hostapd_free_hapd_data: Interface wlan0 wasn't started hostapd_interface_deinit_free: driver=0x49b640 drv_priv=0xfc4df0 -> hapd_deinit nl80211: Remove monitor interface: refcount=0 nl80211: Remove beacon (ifindex=8) netlink: Operstate: ifindex=8 linkmode=0 (kernel-control), operstate=6 (IF_OPER_UP) nl80211: Set mode ifindex 8 iftype 2 (STATION) nl80211: Failed to set interface 8 to mode 2: -16 (Device or resource busy) nl80211: Try mode change after setting interface down nl80211: Set mode ifindex 8 iftype 2 (STATION) nl80211: Failed to set interface 8 to mode 2: -16 (Device or resource busy) nl80211: Delaying mode set while interface going down nl80211: Set mode ifindex 8 iftype 2 (STATION) nl80211: Mode change succeeded while interface is down nl80211: Teardown AP(wlan0) - device_ap_sme=0 use_monitor=0 nl80211: Unsubscribe mgmt frames handle 0x888888888874d9a9 (AP teardown) hostapd_interface_free(0xfc0590) hostapd_interface_free: free hapd 0xfc3f30 hostapd_cleanup_iface(0xfc0590) hostapd_cleanup_iface_partial(0xfc0590) hostapd_cleanup_iface: free iface=0xfc0590

Can anyone help?

Thanks
2014-11-15
Nick_the_Greek

Quote:

Originally Posted by eme101

Thank you for an amazing script!

I have problems getting hostapd to work on a 64-bit version of kali. And udhcpd to distribute ips on 32-bit. Ive got a readout of what hostapd spews out:

Code:

random: Trying to read entropy from /dev/random Configuration file: /root/Desktop/aerial/Aerial/hostapd.conf ctrl_interface_group=0 rfkill: initial event: idx=0 type=2 op=0 soft=1 hard=0 rfkill: initial event: idx=6 type=1 op=0 soft=0 hard=0 nl80211: Supported cipher 00-0f-ac:1 nl80211: Supported cipher 00-0f-ac:5 nl80211: Supported cipher 00-0f-ac:2 nl80211: Supported cipher 00-0f-ac:4 nl80211: Using driver-based off-channel TX nl80211: interface wlan0 in phy phy5 nl80211: Set mode ifindex 8 iftype 3 (AP) nl80211: Failed to set interface 8 to mode 3: -16 (Device or resource busy) nl80211: Try mode change after setting interface down nl80211: Set mode ifindex 8 iftype 3 (AP) nl80211: Mode change succeeded while interface is down nl80211: Setup AP(wlan0) - device_ap_sme=0 use_monitor=0 nl80211: Subscribe to mgmt frames with AP handle 0xfc5120 nl80211: Register frame type=0xb0 (WLAN_FC_STYPE_AUTH) nl_handle=0xfc5120 match= nl80211: Register frame type=0x0 (WLAN_FC_STYPE_ASSOC_REQ) nl_handle=0xfc5120 match= nl80211: Register frame type=0x20 (WLAN_FC_STYPE_REASSOC_REQ) nl_handle=0xfc5120 match= nl80211: Register frame type=0xa0 (WLAN_FC_STYPE_DISASSOC) nl_handle=0xfc5120 match= nl80211: Register frame type=0xc0 (WLAN_FC_STYPE_DEAUTH) nl_handle=0xfc5120 match= nl80211: Register frame type=0xd0 (WLAN_FC_STYPE_ACTION) nl_handle=0xfc5120 match= nl80211: Register frame type=0x40 (WLAN_FC_STYPE_PROBE_REQ) nl_handle=0xfc5120 match= nl80211: Add own interface ifindex 8 nl80211: if_indices[16]: 8 phy: phy5 BSS count 1, BSSID mask 00:00:00:00:00:00 (0 bits) wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE Previous country code 00, new country code 00 nl80211: Regulatory information - country=00 nl80211: 2402-2472 @ 40 MHz 20 mBm nl80211: 2457-2482 @ 40 MHz 20 mBm (no IR) nl80211: 2474-2494 @ 20 MHz 20 mBm (no OFDM) (no IR) nl80211: 5170-5250 @ 160 MHz 20 mBm (no IR) nl80211: 5250-5330 @ 160 MHz 20 mBm (DFS) (no IR) nl80211: 5490-5730 @ 160 MHz 20 mBm (DFS) (no IR) nl80211: 5735-5835 @ 80 MHz 20 mBm (no IR) nl80211: 57240-63720 @ 2160 MHz 0 mBm nl80211: Added 802.11b mode based on 802.11g information Driver does not support configured HT capability [SMPS-STATIC] wlan0: interface state COUNTRY_UPDATE->DISABLED wlan0: AP-DISABLED wlan0: Unable to setup interface. hostapd_interface_deinit_free(0xfc0590) hostapd_interface_deinit_free: num_bss=1 conf->num_bss=1 hostapd_interface_deinit(0xfc0590) hostapd_bss_deinit: deinit bss wlan0 wlan0: Deauthenticate all stations nl80211: send_mlme - da= ff:ff:ff:ff:ff:ff noack=0 freq=0 no_cck=0 offchanok=0 wait_time=0 fc=0xc0 (WLAN_FC_STYPE_DEAUTH) nlmode=3 nl80211: send_mlme -> send_frame nl80211: send_frame - Use bss->freq=0 nl80211: send_frame -> send_frame_cmd nl80211: Frame command failed: ret=-22 (Invalid argument) (freq=0 wait=0) hostapd_cleanup(hapd=0xfc3f30 (wlan0)) hostapd_free_hapd_data: Interface wlan0 wasn't started hostapd_interface_deinit_free: driver=0x49b640 drv_priv=0xfc4df0 -> hapd_deinit nl80211: Remove monitor interface: refcount=0 nl80211: Remove beacon (ifindex=8) netlink: Operstate: ifindex=8 linkmode=0 (kernel-control), operstate=6 (IF_OPER_UP) nl80211: Set mode ifindex 8 iftype 2 (STATION) nl80211: Failed to set interface 8 to mode 2: -16 (Device or resource busy) nl80211: Try mode change after setting interface down nl80211: Set mode ifindex 8 iftype 2 (STATION) nl80211: Failed to set interface 8 to mode 2: -16 (Device or resource busy) nl80211: Delaying mode set while interface going down nl80211: Set mode ifindex 8 iftype 2 (STATION) nl80211: Mode change succeeded while interface is down nl80211: Teardown AP(wlan0) - device_ap_sme=0 use_monitor=0 nl80211: Unsubscribe mgmt frames handle 0x888888888874d9a9 (AP teardown) hostapd_interface_free(0xfc0590) hostapd_interface_free: free hapd 0xfc3f30 hostapd_cleanup_iface(0xfc0590) hostapd_cleanup_iface_partial(0xfc0590) hostapd_cleanup_iface: free iface=0xfc0590

Can anyone help?

Thanks

Hi eme101
Can you please tell me which wirelless card are you using?
2014-11-16
repzeroworld

hello Nick_the_Greek
I haven't tested your script as yet...writing such a lengthy script requires alot of work!..hope your script goes viral..haha!.:D
2014-11-16
Nick_the_Greek

Hi repzeroworld
I'm, looking forward for your feedback, when you got time to test it. :)
2014-11-17
eme101

Quote:

Originally Posted by Nick_the_Greek

Hi eme101
Can you please tell me which wirelless card are you using?

I have tried these three with various results:

ALFA AWUS036NHA
ath9k_htc
Atheros AR9271x

ALFA AWUS051NH
rt2800usb
Ralink RT2770 RT2750

ALFA AWUS036NHR
rtl8192cu
RTL8188RU

The script says the ralink-card is supported using all options when selecting hostapd. I have got it to wark semi-fine if I run hostapd with 802.11g only.
2014-11-21
Rajnish357

How can I limit the clients of my Soft AP to access only Facebook or Gmail ??
2014-11-22
Nick_the_Greek

Quote:

Originally Posted by Rajnish357

How can I limit the clients of my Soft AP to access only Facebook or Gmail ??

Hi Rajnish357.
An easy way, at least for me is iptables. Search a little bit how to redirect trafic to a specific IP with iptables.
2014-11-22
Nick_the_Greek

Quote:

Originally Posted by eme101

I have tried these three with various results:

ALFA AWUS036NHA
ath9k_htc
Atheros AR9271x

ALFA AWUS051NH
rt2800usb
Ralink RT2770 RT2750

ALFA AWUS036NHR
rtl8192cu
RTL8188RU

The script says the ralink-card is supported using all options when selecting hostapd. I have got it to wark semi-fine if I run hostapd with 802.11g only.

Hi eme101.
The script it's not that accurate about the capabilities of a wireless card because is "reading" the output of iw command. The output of that command claims to support a capability, but in reality it might not be supported.
Is short, the safest way is to use 802.11g. Then you can try to 802.11n with 20 MHz channel width and if you succeeded with that then you can move to 802.11n 40MHz channel width.
Try them all, one by one. It all depends on chipset, drivers and hostapd.
2014-11-30
bahha

I have read the whole script you did a **** good work. I haven't used it because I want to select only what I need and refresh my rusty shell. thank you very much
2014-12-02
Rajnish357

Quote:

Originally Posted by Nick_the_Greek

Hi Rajnish357.
An easy way, at least for me is iptables. Search a little bit how to redirect trafic to a specific IP with iptables.

Thanks alot Nick_the_Greek, for the reply..... but I'm a beginner, can you please give me a sample code or point me to any tutorial please....
2014-12-07
bahha

I have been playing with the script : I reduced it to my need as I already have Hostapd that run through Dhcp . and everything worked except I2P it was driving me crazy

it won't run as root I changed the I2p file to allow it still nothing . then I tried to restart it even if it's not running and it worked so in the modified script it's run by restart instead of start .

it start but I can't get it the http proxy to forward the connection I get on the client http outproxy some error with the web interface of i2p server

thanks I again for the great work I really enjoyed reading throught it . you got style !

update: after reading about the i2p I finally got it. the .i2p sites are accessible while the regular one I can access them through https when the proxy is set to https port
2014-12-16
sluggz

I get this error.

[ info ] Airbase-ng NBPPS (Number of packets per second): 300 pps.
[ ok ] Stopping network connection manager: NetworkManager.
[ ok ] Deconfiguring network interfaces...done.
[ ok ] Configuring network interfaces...done.
[ ok ] Starting network connection manager: NetworkManager.
[ ok ] Waiting to connect again to the Internet.
Aerial.sh: 5825: Aerial.sh: cannot create /etc/squid3/squid.conf: Directory nonexistent
Aerial.sh: 1: Aerial.sh: squid3: not found
[ ok ] Starting UDHCPD server for subnet.(conf file: /etc/udhcpd.conf)
[....] Starting DNSMASQ - DNS Forwarder.(conf file: /root/Aerial/Aerial/dnsmasq.conf)Aerial.sh: 5990: Aerial.sh: /etc/init.d/udhcpd: not found
[ ok ] Starting DNSMASQ - DNS Forwarder.(conf file: /root/Aerial/Aerial/dnsmasq.conf)

Your clients now can access the Internet.
There is no interception, no nothing.
Aerial is acting as an Access Point.

Everything seems to start fine but when I connect to AP, it has no internet and is limited/ doesnt get an ip address. From the looks of it, it looks like something with DHCP.
2014-12-17
bahha

Quote:

Originally Posted by sluggz

I get this error.

[ info ] Airbase-ng NBPPS (Number of packets per second): 300 pps.
[ ok ] Stopping network connection manager: NetworkManager.
[ ok ] Deconfiguring network interfaces...done.
[ ok ] Configuring network interfaces...done.
[ ok ] Starting network connection manager: NetworkManager.
[ ok ] Waiting to connect again to the Internet.
Aerial.sh: 5825: Aerial.sh: cannot create /etc/squid3/squid.conf: Directory nonexistent
Aerial.sh: 1: Aerial.sh: squid3: not found
[ ok ] Starting UDHCPD server for subnet.(conf file: /etc/udhcpd.conf)
[....] Starting DNSMASQ - DNS Forwarder.(conf file: /root/Aerial/Aerial/dnsmasq.conf)Aerial.sh: 5990: Aerial.sh: /etc/init.d/udhcpd: not found
[ ok ] Starting DNSMASQ - DNS Forwarder.(conf file: /root/Aerial/Aerial/dnsmasq.conf)

Your clients now can access the Internet.
There is no interception, no nothing.
Aerial is acting as an Access Point.

Everything seems to start fine but when I connect to AP, it has no internet and is limited/ doesnt get an ip address. From the looks of it, it looks like something with DHCP.

that's where the problem is. your IP tables will redirect the traffic through squid but it's not working, may be it's not installed
2014-12-18
sluggz

Quote:

Originally Posted by bahha

that's where the problem is. your IP tables will redirect the traffic through squid but it's not working, may be it's not installed

I fixed that problem and I am no longer getting any errors that I can see. I connect to the wifi but it never leases me an IP Address...
2014-12-21
bahha

Quote:

Originally Posted by sluggz

I fixed that problem and I am no longer getting any errors that I can see. I connect to the wifi but it never leases me an IP Address...

then your dhcp server is not functioning, I personally modified the script to use dhcpd instead of the supplied one
2014-12-29
alt0id

Quote:

Originally Posted by sluggz

I get this error.

[ info ] Airbase-ng NBPPS (Number of packets per second): 300 pps.
[ ok ] Stopping network connection manager: NetworkManager.
[ ok ] Deconfiguring network interfaces...done.
[ ok ] Configuring network interfaces...done.
[ ok ] Starting network connection manager: NetworkManager.
[ ok ] Waiting to connect again to the Internet.
Aerial.sh: 5825: Aerial.sh: cannot create /etc/squid3/squid.conf: Directory nonexistent
Aerial.sh: 1: Aerial.sh: squid3: not found
[ ok ] Starting UDHCPD server for subnet.(conf file: /etc/udhcpd.conf)
[....] Starting DNSMASQ - DNS Forwarder.(conf file: /root/Aerial/Aerial/dnsmasq.conf)Aerial.sh: 5990: Aerial.sh: /etc/init.d/udhcpd: not found
[ ok ] Starting DNSMASQ - DNS Forwarder.(conf file: /root/Aerial/Aerial/dnsmasq.conf)

Your clients now can access the Internet.
There is no interception, no nothing.
Aerial is acting as an Access Point.

Everything seems to start fine but when I connect to AP, it has no internet and is limited/ doesnt get an ip address. From the looks of it, it looks like something with DHCP.

I'm also having the issue w/ limited internet access. Everything starts fine, however when connecting w/ a victim machine my AP has "limited access" and can't connect to the web. Any ideas?
2015-01-14
Rajnish357

How to Aerial over proxy ??

On my internet network i must use local proxy server 172.16.8.2:8080 as proxy setting in browers and applications to connect to internet but i'm unable to find how can i apply these settings to Aerial and make it work over Proxy ?

Please help someone...
2015-01-20
zimmaro

hi dear nick:-)
Now that everything is back to normal (in my real life .... && my 2 cars have returned home ...) .. I started playing with your wonderful script !!!
I made a little video with the use of the number 9 options (wouhhh)

https://vimeo.com/117293271

PS: sorry for low-quality ... i'm not much ""abile"" with the screen-recorders !!!

AS always very, very thanks Again !!!:o
2015-01-21
mmusket33

To Nick The Greek

Reference the negative one issue with airbase-ng. It has not affected airbase-ng performance with Pwnstar - however we coded around it in the script by putting the wifi device supporting airbase-ng in mode monitor:

ifconfig wlan0 down # device used by airbase-ng
iwconfig wlan0 mode monitor
ifconfig wlan0 up

This keeps network-manager from trying to use the device used by airbase-ng and kills the negative-one issue.

MTeams
2015-01-21
Hizagashira

thanks so much for your amazing tool Nick the Greek !
It works perfectly for me with the option 9 as said Zimmaro!

This is a really great script!
Thanks! :)
2015-01-25
mmusket33

Aerial.sh is truely the Mona Lisa of bash and phishing programs. But like Mona Lisa it has one small flaw that can ground all your phishing plans to a halt. It doesnot allow you to put spaces in the ESSID name. Thus if your targets' name is:

Home Wifi

you cannot emulate it. The reason is in the sophistication of the programming itself and comes down to two(2) parenthasis but that is another story. Here is a simple method to patch your Aerial to allow ESSID names with spaces and unlock the programs full potential.

1. Install aerial.sh using the stock program. Get all your files downloaded and installed.

2. Once installed test the stock program using airbase-ng and setup menu item one(1):

Simple WLAN (Clients can access Internet)

3. Test here means use a second computer and actually access the internet thru the aerial WLAN.

One warning. If you are using two(2) wifi devices, the wifi device providing internet access must be connected to a router while the device supporting the rogueAP must be disonnected from any such association. The program during setup constantly resets Network-manager. The device supporting the rogue may keep trying to associate to another router. To function as an AP this device must be disconnected from any association to other devices so keep checking the network-manager appelet during the setup to insure the wifi device supporting airbase-ng is disconnected. During these Network-manager restarts, give the program time to let the wifi device providing internet access to reassociate to the AP.

4. Once everything is up and running and you are familiar with the program and how it functions you can patch it.

Make a copy of Aerial.sh and only work on the copy. You can rename it another name like Aerialpatched.sh and run it just the same as the stock version. If you make a mistake delete, make another copy and start again. Go here for the patch. It is just a list of 4 command lines in text format that you need to add or change:

Once changed airbase-ng will allow ESSID names with spaces.

The patching steps are detailed, simply download the text file and follow the instructions

http://www.datafilehost.com/d/49357f28

Musket Teams
2015-02-18
okinu

Hi,
I would like yo ask you somethings about the certificates.
I see the folder where the files are also the readme.
But how to install them? just doubble click them and import?
or should i open them in the terminal?
2015-02-26
gonedsram

Hi Nick,

After installing the Aerial.sh (although i wasnt able to do the patching of Hostapd since I havent figured out the following on how to issue
sed 's%#CONFIG_DRIVER_HOSTAP=y%CONFIG_DRIVER_HOSTAP=y% g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_DRIVER_NL80211=y%CONFIG_DRIVER_NL80211= y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_LIBNL32=y%CONFIG_LIBNL32=y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_IEEE80211N=y%CONFIG_IEEE80211N=y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_IEEE80211AC=y%CONFIG_IEEE80211AC=y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_ACS=y%CONFIG_ACS=y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_TLS=openssl%CONFIG_TLS=openssl%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_WPS=y%CONFIG_WPS=y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig
sed 's%#CONFIG_WPS_UPNP=y%CONFIG_WPS_UPNP=y%g' $HOME_DIR/hostap/hostapd/defconfig > $HOME_DIR/hostap/hostapd/defconfig1 && mv $HOME_DIR/hostap/hostapd/defconfig1 $HOME_DIR/hostap/hostapd/defconfig

....

everytime I start Aerial.sh and choose option 11 (https://vimeo.com/114373690) to following this video. The Mitmproxy log windows closes. Cant seem to follow the above video.

Also, in the video, it states that user request (google.de) will be redirected to IP/index.htm then to mitm.it. Can you further illustrate on how to do these?
2015-03-28
Rarity

Script won't successfully run.. any ideas? I do have the v3.18-rc1 backport installed to fix the negative one issue, not sure if that conflicts with Aerial somehow.

Code:

Most probably network manager automatically connects you again to the Internet using the wireless NIC with the strongest signal or sometimes gets confused and is using all your wireless NIC's to connect to (if you have more then one) Please check the following and if you see STATE connected on more then one wireless NIC then please disconnect manually then one that you don't want, leave only one connected to Internet and press Enter DEVICE TYPE STATE eth0 802-3-ethernet connected wlan0 802-11-wireless disconnected wlan1 802-11-wireless disconnected Press ENTER to continue...

Code:

Nope! You CAN'T continue. You are connected to Internet with more than one wireless NIC. Sorry. Exit...
2015-03-29
wn722

anyone tested Aerial with tp-link wn722?

https://wikidevi.com/wiki/TP-LINK_TL-WN722N
2015-06-03
kolong

Hi nick,

Everytime i run Aerial.sh, i get this

D e p e n d e n c i e s :
[ updated ] apt-get list.
[ found ] UDHCPD: Very small Busybox based DHCP server.
[ found ] Aircrack-ng: Wireless WEP/WPA cracking utilities.
[ found ] Proxychains: Redirect connections through proxy servers.
[ found ] Proxyresolv: DNS resolving.
[ found ] ImageMagick's Mogrify: Image manipulation programs.
[ found ] jp2a: Converts jpg images to ASCII.
[ found ] Ghostscript: Interpreter for the PostScript language and for PDF.
[ found ] Apache2: HTTP Server.
[ found ] DNSmasq: A small caching DNS proxy and DHCP/TFTP server.
[ found ] Haveged: Linux entropy source using the HAVEGE algorithm.
[ found ] Squid3 v3.1.20: Full featured Web Proxy cache (HTTP proxy) without SSL support.
[ found ] Sarg: Squid Analysis Report Generator.
[ found ] TOR (The Onion Router): A connection-based low-latency anonymous communication system.
[ found ] ARM (The Anonymizing Relay Monitor): Terminal status monitor for TOR.
[ ok ] Adding i2P's repository to APT's /etc/apt/sources.list file.
[ ok ] Installing the keys to sign the repository and add it to apt.
[ ok ] Updating Repositories.
[ ok ] Installing I2P (The Invisible Internet Project).
[ ok ] Removing I2P's repository from APT's /etc/apt/sources.list file.
[ ok ] Updating Repositories.
[....] Modifying i2prouter to run as root.sed: can't read /usr/bin/i2prouter: No such file or directory
chmod: cannot access `/usr/bin/i2prouter': No such file or directory
[ ok ] Modifying i2prouter to run as root.
[ ok ] Do not start I2P on Start Up.

[ found ] Sslstrip version 0.9 :SSL/TLS man-in-the-middle attack tool.
[ found ] SSLsplit version 0.4.8: Transparent and scalable SSL/TLS interception
[ found ] Mitmproxy: SSL-capable man-in-the-middle HTTP proxy.
[ found ] HoneyProxy: HTTP(S) Traffic investigation and analysis.
[ found ] Installation package Airchat v2.1a: Wireless Fun.
[ found ] Installation packages Squid3-(i386-amd64) v.3.3.8 with SSL support.

B a c k U p F i l e s :

[....] Making a backup copy of current IPTABLES to /root/Aerial/backup//root/Aerial/Aerial.sh: 1255: /root/Aerial/Aerial.sh: cannot create /root/Aerial/backup/iptables.original: Directory nonexistent
[ ok ] Making a backup copy of current IPTABLES to /root/Aerial/backup/
[....] Making a backup copy of Sarg's configuration file to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/sarg.conf': No such file or directory
[ ok ] Making a backup copy of Sarg's configuration file to /root/Aerial/backup
[....] Making a backup copy of Squid3's configuration file to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/squid.conf': No such file or directory
[ ok ] Making a backup copy of Squid3's configuration file to /root/Aerial/backup
[....] Making a backup copy of proxychains.conf configuration file to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/proxychains.conf': No such file or directory
[ ok ] Making a backup copy of proxychains.conf configuration file to /root/Aerial/backup
[....] Making a backup copy of proxyresolv file to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/proxyresolv': No such file or directory
[ ok ] Making a backup copy of proxyresolv file to /root/Aerial/backup
[....] Making a backup copy of Apache2's httpd configuration file to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/apache2.conf': No such file or directory
[ ok ] Making a backup copy of Apache2's httpd configuration file to /root/Aerial/backup
mkdir: cannot create directory `/root/Aerial/backup/www': No such file or directory
[....] Making a backup copy of /var/www/ folder to /root/Aerial/backup/www/cp: cannot stat `/var/www/*': No such file or directory
[ ok ] Making a backup copy of /var/www/ folder to /root/Aerial/backup/www/
[....] Cleaning up /var/www/ folderrm: cannot remove `/var/www/*': No such file or directory
[ ok ] Cleaning up /var/www/ folder
[....] Making a backup copy of UDHCPD configuration file to /root/Aerial/backupcp: cannot create regular file `/root/Aerial//backup/udhcpd.conf': No such file or directory
[ ok ] Making a backup copy of UDHCPD configuration file to /root/Aerial/backup
[....] Making a backup copy of TOR's configuration file (torrc) to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/torrc': No such file or directory
[ ok ] Making a backup copy of TOR's configuration file (torrc) to /root/Aerial/backup
[....] Making a backup copy of I2P's files (i2ptunnel.config, i2prouter) to /root/Aerial/backupcp: cannot stat `/usr/share/i2p/i2ptunnel.config': No such file or directory
cp: cannot stat `/usr/bin/i2prouter': No such file or directory
[ ok ] Making a backup copy of I2P's files (i2ptunnel.config, i2prouter) to /root/Aerial/backup
[....] Making a backup copy of /etc/network/interfaces to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/interfaces': No such file or directory
[ ok ] Making a backup copy of /etc/network/interfaces to /root/Aerial/backup
[....] Making a backup copy of /etc/default/crda to /root/Aerial/backupcp: cannot create regular file `/root/Aerial/backup/crda': No such file or directory
[ ok ] Making a backup copy of /etc/default/crda to /root/Aerial/backup
Sarg is not modified yet. Please run this script again and when asked to customize, answer (1). - Stop
cp: cannot stat `/root/Aerial/backup/sarg.conf': No such file or directory

Please help me. Thanks
2015-07-21
skycrazy

Just a thought, any chance of incorporating a captive portal style to the simple no(1) in the script. Direct all traffic to one page(apache maybe) guess an accept the conditions of use page maybe :-) . Have been slightly altering the script with little success so far. Any pointers in the right direction or impossible, hopefully not. id like to see this in the script. Thanks
2015-07-29
zeroblood62

Can this be used with a single wireless adapter connected to the internet?
2015-10-13
imitm

Hello!
I'm trying this scirpt, it installs well, and i'm choosing 10'th attack. It starts hostapd AP but i'm not getting IP for client. Could this be somehow resolved via dnsmasq?
Thanks!

Show 40 post(s) from this thread on one page