new: reporting if wifi handshakes are full or half

This commit is contained in:
evilsocket 2019-08-19 13:56:18 -04:00
parent 9e9b984fec
commit 3d31bf3712
No known key found for this signature in database
GPG key ID: 82E42E7F3B34C97E
3 changed files with 8 additions and 0 deletions

View file

@ -80,6 +80,10 @@ func (mod *EventsStream) viewWiFiHandshakeEvent(e session.Event) {
if hand.PMKID != nil { if hand.PMKID != nil {
what = "RSN PMKID" what = "RSN PMKID"
} else if hand.Full {
what += " (full)"
} else if hand.Half {
what += " (half)"
} }
fmt.Fprintf(mod.output, "[%s] [%s] captured %s -> %s %s to %s\n", fmt.Fprintf(mod.output, "[%s] [%s] captured %s -> %s %s to %s\n",

View file

@ -22,5 +22,7 @@ type HandshakeEvent struct {
NewPackets int `json:"new_packets"` NewPackets int `json:"new_packets"`
AP string `json:"ap"` AP string `json:"ap"`
Station string `json:"station"` Station string `json:"station"`
Half bool `json:"half"`
Full bool `json:"full"`
PMKID []byte `json:"pmkid"` PMKID []byte `json:"pmkid"`
} }

View file

@ -102,6 +102,8 @@ func (mod *WiFiModule) discoverHandshakes(radiotap *layers.RadioTap, dot11 *laye
AP: apMac.String(), AP: apMac.String(),
Station: staMac.String(), Station: staMac.String(),
PMKID: rawPMKID, PMKID: rawPMKID,
Half: station.Handshake.Half(),
Full: station.Handshake.Complete(),
}) })
// make sure the info that we have key material for this AP // make sure the info that we have key material for this AP
// is persisted even after stations are pruned due to inactivity // is persisted even after stations are pruned due to inactivity