FrankenScript by Slim76 - It Attacks Access Points and .pcap files

[flyinghaggis]

Just using you're script now and it is very impressive.

Just one thing I noticed - when using wash there is no error check for FCS errors so I added the -C switch to the script and all is working fine (Hope there is no copyright infringement )

The other thing, I wasn't aware that it must be run from root - this had me baffled untill I realised that is where the dependencies are placed. A nice new folder would be nice to place all the client captures just to tidy it up a bit.

A netgear WPS pin generator would be nice - all I know is that they invariable start with a 2 but hey what do i know.

Rab.

[slim76]

Just using you're script now and it is very impressive.

Just one thing I noticed - when using wash there is no error check for FCS errors so I added the -C switch to the script and all is working fine (Hope there is no copyright infringement )

The other thing, I wasn't aware that it must be run from root - this had me baffled untill I realised that is where the dependencies are placed. A nice new folder would be nice to place all the client captures just to tidy it up a bit.

A netgear WPS pin generator would be nice - all I know is that they invariable start with a 2 but hey what do i know.

Rab.

Many thanks for the feedback.
It did originally have the folder you're talking about, but I removed it while cleaning and adding to the script, I'll end up putting it back at some point.

What do you mean by wash and -C switch?.

[flyinghaggis]

What do you mean by wash and -C switch?.

-C, --ignore-fcs Ignore frame checksum errors......

If I don't use this all I get is fcs errors - never used to get as many but with new adapter it seems that is all I get so I use the -C switch and all works as should.

Rab.

Forgot - It is in the wash help

[slim76]

-C, --ignore-fcs Ignore frame checksum errors......

If I don't use this all I get is fcs errors - never used to get as many but with new adapter it seems that is all I get so I use the -C switch and all works as should.

Rab.

Forgot - It is in the wash help

Kool, I'll add it to the script so others with the same issue can benefit.

[mmusket33]

We attempted to download your script thru this site. It tells you to go to a mirror. We went to all the mirrors and they are all the same - they want you to and install an\ download.exe file on to your computer. We dragged out an old persistent usb driven XP program and ran the download. It quickly filled the computer with tons of spyware and programs. The spyware got stopped by the antivirus and it took us 30 minutes to remove all the bogus programs they were all over the place to include showing up in notepad. And we never actually got to your program.
We are not happy campers.

Musket Teams Alpha and Bravo

[slim76]

We attempted to download your script thru this site. It tells you to go to a mirror. We went to all the mirrors and they are all the same - they want you to and install an\ download.exe file on to your computer. We dragged out an old persistent usb driven XP program and ran the download. It quickly filled the computer with tons of spyware and programs. The spyware got stopped by the antivirus and it took us 30 minutes to remove all the bogus programs they were all over the place to include showing up in notepad. And we never actually got to your program.
We are not happy campers.

Musket Teams Alpha and Bravo

Cheers for the heads up mate.
I've checked it out and the downloads are fine, maybe you clicked on the silly ads that they use, avoid the ads and all should be good.

Your reply is kinda strange to me, you're the only person that has mentioned such issue, and what you said just doesn't add up.
I made a post at 02:46 AM saying that I had updated FrankenScript, you replied at 03:13 AM saying that you spent the last half an hour removing viruses.
So you're saying you spent 30mins removing viruses, plus the time it takes to browse to the mirror site and browse and try ALL the mirrors all within 27 minutes. LOL

Update:
I've added several direct links.

[mmusket33]

Again for clarity this is what we get - !!!Downloaders beware!!!

We are using XP for the download

For example:
We went to: http://rghost.net/51637035

There is a black rectangular square below the file name with the word Download. When you click on the square the program asks you to download FrankenScript-v2.tar.gz.

You click it and it shows you the correct file name and asks to run or save. You save the file !!!BUT!!! What you get is:

FrankenScript-v2.tar.gz-180upload_accelerator.exe(314KB)

We have already seen this on the original download link and do not wish to do through that again. ie the same csize file just a more embedded name. Here the stick the actual file name at the beginning but give you an exe file instead.

We picked this page for its simplicity. There are only one or two other download buttons on the far right of the page and they deal with Windows products.

Musket Team A/B

[mmusket33]

Okay further to our above comments.

Our lab has six computers. We tried two other computers running XP and in every case clicking on the file gave us an exe file. The name of the file changed with the site but in every case it was a small exe. You do not want to run this - see our original above. Next we thought to try the download with kali-linux


Using kali-linuix we downloaded the correct file named FrankenScript-v2.tar.gz.

So for most of these links shown for this file we suggest users not use XP for the download - you will end up with a load of spyware and bogus products.


MTA/MTB

[mmusket33]

Again for clarity this is what we get - !!!Downloaders beware!!!

We are using XP for the download

For example:
We went to: http://rghost.net/51637035

There is a black rectangular square below the file name with the word Download. When you click on the square the program asks you to download FrankenScript-v2.tar.gz.

You click it and it shows you the correct file name and asks to run or save. You save the file !!!BUT!!! What you get is:

FrankenScript-v2.tar.gz-180upload_accelerator.exe(314KB)

We have already seen this on the original download link and do not wish to do through that again. ie the same csize file just a more embedded name. Here the stick the actual file name at the beginning but give you an exe file instead.

We picked this page for its simplicity. There are only one or two other download buttons on the far right of the page and they deal with Windows products.

Musket Team A/B

[kcdtv]

Very nice job indeed
Some part of the code are very, very familiar to me.

[slim76]

Very nice job indeed
Some part of the code are very, very familiar to me.

What part?, let me guess, its either the vodafone or the WPSPIN, am I correct?.
Please let me know and I'll add credits for you or remove it , which ever you choose I'm kool.