new: working on wifi.beacon.flood feature, still very WIP

This commit is contained in:
evilsocket 2018-03-12 15:25:52 +01:00
commit bfed627501
No known key found for this signature in database
GPG key ID: 1564D7F30393A456
3 changed files with 86 additions and 1 deletions

View file

@ -0,0 +1,79 @@
package modules
import (
"net"
"time"
"github.com/bettercap/bettercap/log"
"github.com/bettercap/bettercap/network"
"github.com/bettercap/bettercap/packets"
"github.com/google/gopacket/layers"
)
func NewDot11Beacon(bssid net.HardwareAddr, ssid string, seq uint16) (error, []byte) {
// TODO: still very incomplete
return packets.Serialize(
&layers.RadioTap{},
&layers.Dot11{
Address1: network.BroadcastHw,
Address2: bssid,
Address3: bssid,
Type: layers.Dot11TypeMgmtBeacon,
SequenceNumber: seq, // not sure this needs to be a specific value
},
&layers.Dot11MgmtBeacon{
Timestamp: uint64(time.Now().Second()), // not sure
Interval: 1041, // ?
Flags: 100, // ?
},
&layers.Dot11InformationElement{
ID: layers.Dot11InformationElementIDSSID,
Length: uint8(len(ssid) & 0xff),
Info: []byte(ssid),
},
// TODO: Rates n stuff ...
&layers.Dot11InformationElement{
BaseLayer: layers.BaseLayer{
Contents: []byte{0x01, 0x08, 0x82, 0x84, 0x8b, 0x96, 0x24, 0x30, 0x48, 0x6c},
},
},
&layers.Dot11InformationElement{
BaseLayer: layers.BaseLayer{
Contents: []byte{0x03, 0x01, 0x0b},
},
},
)
}
func (w *WiFiModule) sendBeaconPacket(counter int) {
w.writes.Add(1)
defer w.writes.Done()
if err, pkt := NewDot11Beacon(w.Session.Interface.HW, "Prova", uint16(counter)); err != nil {
log.Error("Could not create beacon packet: %s", err)
} else {
w.injectPacket(pkt)
}
time.Sleep(10 * time.Millisecond)
}
func (w *WiFiModule) startBeaconFlood() error {
// if not already running, temporarily enable the pcap handle
// for packet injection
if w.Running() == false {
if err := w.Configure(); err != nil {
return err
}
}
go func() {
defer w.handle.Close()
for counter := 0; w.Running(); counter++ {
w.sendBeaconPacket(counter)
}
}()
return nil
}

View file

@ -11,7 +11,7 @@ import (
func (w *WiFiModule) injectPacket(data []byte) {
if err := w.handle.WritePacketData(data); err != nil {
log.Error("Could not send deauth packet: %s", err)
log.Error("Could not inject WiFi packet: %s", err)
w.Session.Queue.Stats.Lock()
w.Session.Queue.Stats.Errors++

View file

@ -98,6 +98,12 @@ func NewWiFiModule(s *session.Session) *WiFiModule {
return w.startDeauth(bssid)
}))
w.AddHandler(session.NewModuleHandler("wifi.beacon.flood", "",
"todo",
func(args []string) error {
return w.startBeaconFlood()
}))
w.AddHandler(session.NewModuleHandler("wifi.show", "",
"Show current wireless stations list (default sorting by essid).",
func(args []string) error {