Aerial - Multi-mode wireless LAN Based on a Software Access point

[Nick_the_Greek]

Hey Nick no matter what I do, I am unable to connect to the softap, I can create a normal fake ap manually and connect and sslstrip etc. on the script I also just tried the number 1 option for just wifi and no dice. Any ideas? I tried using eth0 and wlan0 both as the main internet connection

Hi dataghost
Thank you for your reply and for your time.
Are you running Kali as VM or live/hdd ?
Are you using Gnome/KDE ?
What wireless NIC are you using? It supports AP mode?
If you select to create a hostapd based softAP did hostapd is running?
Try with:

pidof hostapd

if you're getting a number as an output then hostapd is running.
If not then go to Aerial folder and run hostapd manually with debug enabled and please give me the output:

cd Aerial
hostapd -d hostapd.conf

just make sure hostapd.conf is present to Aerial folder and to do that Aerial.sh must be run at least one time and you must select to create a hostapd based AP. It should look like this:

# Interface, driver,essid,IEEE 802.11 mode,channel.
interface=wlan1
driver=nl80211
ssid=free
hw_mode=g
channel=01

#IEEE 802.11 related configuration
macaddr_acl=0
beacon_int=100
dtim_period=2
max_num_sta=20
rts_threshold=2347
fragm_threshold=2346
ignore_broadcast_ssid=0
macaddr_acl=0

# Enable IEEE 802.11d. This advertises the country_code and the set of allowed
# channels and transmit power levels based on the regulatory limits.
country_code=GR
ieee80211d=1
#ieee80211h=1

# IEEE 802.11n related configuration
ieee80211n=0

# The following will be replaced by the script with the corresponding 
# values depending on your wireless NIC
#ht_capab=

# Event logger configuration
logger_syslog=-1
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=2

ctrl_interface_group=0
ctrl_interface=/var/run/hostapd

# TX queue parameters (EDCF / bursting)

# Low priority / AC_BK = background
tx_queue_data3_aifs=7
tx_queue_data3_cwmin=15
tx_queue_data3_cwmax=1023
tx_queue_data3_burst=0

# Normal priority / AC_BE = best effort
tx_queue_data2_aifs=3
tx_queue_data2_cwmin=15
tx_queue_data2_cwmax=63
tx_queue_data2_burst=0

# High priority / AC_VI = video
tx_queue_data1_aifs=1
tx_queue_data1_cwmin=7
tx_queue_data1_cwmax=15
tx_queue_data1_burst=3.0

# Highest priority / AC_VO = voice
tx_queue_data0_aifs=1
tx_queue_data0_cwmin=3
tx_queue_data0_cwmax=7
tx_queue_data0_burst=1.5

# Default WMM parameters (IEEE 802.11 draft; 11-03-0504-03-000e):
wmm_enabled=1
# Low priority / AC_BK = background
wmm_ac_bk_cwmin=4
wmm_ac_bk_cwmax=10
wmm_ac_bk_aifs=7
wmm_ac_bk_txop_limit=0
wmm_ac_bk_acm=0
# Normal priority / AC_BE = best effort
wmm_ac_be_aifs=3
wmm_ac_be_cwmin=4
wmm_ac_be_cwmax=10
wmm_ac_be_txop_limit=0
wmm_ac_be_acm=0
# High priority / AC_VI = video
wmm_ac_vi_aifs=2
wmm_ac_vi_cwmin=3
wmm_ac_vi_cwmax=4
wmm_ac_vi_txop_limit=94
wmm_ac_vi_acm=0
# Highest priority / AC_VO = voice
wmm_ac_vo_aifs=2
wmm_ac_vo_cwmin=2
wmm_ac_vo_cwmax=3
wmm_ac_vo_txop_limit=47
wmm_ac_vo_acm=0

# WPA/IEEE 802.11i configuration
auth_algs=1
wpa_psk_file=/etc/hostapd.psk
wpa=2
wpa_passphrase=asedrftgyhujik
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP
rsn_pairwise=CCMP
wpa_ptk_rekey=3600
eap_server=1

please copy-paste here your hostapd.conf file.

Try to see if udhcpd is running:

pidof udhcpd

if not then please copy-paste here your udhcpd.conf file.Is located at /etc/udhcpd.conf

Try to see if dnsmasq is running:

pidof dnsmasq`

if not then please copy-paste here your dnsmasq.conf file.Is located at ../Aerial/dnsmasq.conf

If you select a airbase-ng based softAP, open the Aerial.conf file ../Aerial/aerial.conf
and set Nbpps_USE from yes to no:

# If set to "yes" (without double quotes) nbpps (number of packets per second) 
# and MTU (maximum transmission unit) will be used in airbase-ng based softAP. 
# Nbpps's default value is 100. In my cards i've seen differences up to 300 
# to 400 values. You can "play" with nbpps values and run some tests to find 
# the optimum value for you card.  If you're having troubles, set it to 100.
# Default values: yes nbpps: 300 and MTU: 1500
Nbpps_USE yes
Nbpps_VALUE 300
MTU_MON 1500

to:

Nbpps_USE no

when is set to "yes" it will try to inject 300 packet/second. (the airbase-ng). When is set to "no" it will use the default value:100
and if it's not trouble copy-paste here your aerial.conf file here.
Look at /etc/network/interface file. You should see something like:

auto lo
iface lo inet loopback
iface wlanX inet manual

wlanX is the wireless interface that you have select to create the softAP. If that line isn't present the add it your self, save it and run:

service network-manager stop
service networking stop
service networking start
service network-manager start

and re-run the script.
I'm suggesting you to try to create a hostapd based soft AP, set a free channel, no high throughput, set CRDA, no encryption (OPEN) and mode 1.(just Internert access)
Finally please copy-paste here the last page you're getting from Aerial.sh. It should look like this:

Internet interface - Gateway - IP - DNS servers
Internet Interface : wlan3 - usb:rt2800usb
Internet Gateway : 192.168.1.1
Internet IP : 192.168.1.5
Primary DNS server : 192.168.1.1
Secondary DNS server : 208.67.222.222

Software Access Point options
Wireless NIC : wlan0 - pci:rt2800pci
Gateway : 192.168.60.129
Clients IPs : 192.168.60.130 - 192.168.60.150
ESSID : free
MAC address : xx:xx:xx:xx:xx:xx
CRDA country : GR
Channel : 1
Based on : Hostapd
IEEE 802.11 standard : g 2.4GHz
Encryption : OPEN
Mode : Simple - Clients can access directly the Internet.

If non of them are working try with a different wireless NIC or try to run it in a live session.
I'm suspecting that VMs are working differently than live/hdd sessions. I will look for that.
I know that I'm asking too much from you, but I'm not in a rush. Try them when you got time.
Thank you dataghost!