tehw0lf/airbash

A POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing

airbash's Issues

Replace wlanhc2hcx with hcxpcaptool

Even though hcxpcaptool is already deprecated, it is a great tool that provides conversion of capture files to both .hccapx format and PMKID hash format, amongst other useful information.

It also supports checking for handshakes/PMKIDs substantially faster than aircrack-ng.

The packet captures done with airodump-ng can contain PMKIDs already, if the access point is compatible. Now we can detect them 🎉

Verbose mode

The current output is designed with obscurity in mind, so that even if the user is being watched while using the script, it's not blatantly obvious what is happening.

This decision was based on the idea that airbash was to be used in wardriving (or rather warwalking, considering the fact that the user needs to stay in the range of the initial scan in order to get results).

When operating on Linux, though, we might want to be more verbose instead of only showing lines and numbers.

The current way should not be removed though, so there should be a command line argument for choosing display mode. On Linux, we may then default to the verbose output.

Add backend with HTTP API

To use the new frontend, we need a tested backend that enables interaction with the database.

This includes updating the readme with instructions on how to compile and run the backend.

When starting airbash, we might want to start the backend automatically if it has been compiled previously.

error init.csv

i get this error why?

airba.sh: line 144: /home/max/tools/airbash/initlist-01.csv: No such file or directory
airba.sh: line 148: /home/max/tools/airbash/initlist-01.csv: No such file or directory

Fix database interaction

The database interaction in the modules are not up to date, preventing passphrases from being saved to the database.

Airodump_Bin Errors

I get these errors everytime i run airba.sh:

airba.sh: line 95: 2688 Killed "$AIRODUMP_BIN" -w $path$ofile -o csv $INTERFACE &> /dev/null 
_1/4
 __1/4
 _2/4 
airba.sh: line 103: 2752 Killed "$AIRODUMP_BIN" -c $c --bssid $i -w $path$i -o pcap $INTERFACE &> /dev/null 
__3/4 
_3/4 
airba.sh: line 103: 2873 Killed "$AIRODUMP_BIN" -c $c --bssid $i -w $path$i -o pcap $INTERFACE &> /dev/null 
__2/4 
_4/4 
airba.sh: line 103: 2997 Killed "$AIRODUMP_BIN" -c $c --bssid $i -w $path$i -o pcap $INTERFACE &> /dev/null 
__4/4 
airba.sh: line 103: 3127 Killed "$AIRODUMP_BIN" -c $c --bssid $i -w $path$i -o pcap $INTERFACE &> /dev/null 
_______ 1!

What do these errors indicate?

Exporting the hccap?

Is there a way you can export the captured handshake for manual cracking?

Add interface variable

The interface is currently hardcoded to wlan0. Using a variable will make the code more flexible.

Add modules

The modules section is permanently open to pull requests to pwn more default keys!

A template module is included in modules. crackdefault.sh contains a template elif statement to include the new module.

Contributing a module generally means to gather an existing open source implementation that exploits a weak key algorithm for a specific router series, which can be used to generate default passwords. In case the implementation is not a shell script but needs to be compiled, README.md should be updated with compilation instructions instead of providing pre-built binaries.

Please ensure that all shell scripts are POSIX-compliant and licensed under the MIT License.