yashsingh1/xdaforums huggingface dataset:
[G1 Android Development] zewelor:
Great it worked for you. Im wondering what is different in laszlo rom that it didnt work there as the kernel is the same and. As i said i never tried to use that drivers it sta mode so it can be hanging like that i dont know and i dont have g1 to test. Strange is on n900 it seems ppl are using that drivers to both monitor mode and normal connecting to ap. Is there anything in dmesg ? If u want to debug it your could recompile drivers with DEBUG_ALL level so maybe there will be something in dmesg output.
[G1 Android Development] blackplatypus:
I intensely tested packet injection with 2.6.29 and 2.6.35 kernel on my HTC Hero and found some interesting things. Packet injection works fine, however deauthentification does not work against my HP notebook, probably because I'm using wifi channel bonding, but against a second notebook connected with 802.11g it works fine.

Packet dumping works fine too (kismet, airodump) but only if I use channel hoping, if I set a fixed channel after a few minutes no new packets are captured. The strange thing is even if no packets are captured, if I inject some packets with aireplay they are shown by airodump/kismet, so injection still works.
[G1 Android Development] tuthan:
Ok, i will try again and check if there are any dmesg.

about laszlo rom. I will test again when i has time. I am really love that rom :D:D
[G1 Android Development] zewelor:
@blackplatypus: Im wondering maybe on n900 there is different firmware or smth as i read a lot and didnt saw any of that probels reported by ppl. Or maybe some problem with kernel as its newer than n900 kernel AFAIK. I cant test it bcoz i dont have g1 now.
[G1 Android Development] Proxin:
This is awesome. I've been waiting forever to see something like this. Now I'll finally get some use out of my old G1 haha. I'm about to try it now, just flashed the file you said to flash in recovery.

...

This works now, but I'm at a loss of what to actually do. I did

localhost:/# airodump-ng -i mon0

And I got:

Missing dump prefix (-w)

Next I tried:

airodump-ng -w -i mon0

and I got...

←[2J←[?25l←[2J

←[1;1H←[J←[1;1H←[J←[1;1H←[J←[1;1H←[J←[1; (this repeated over and over again)

Did I do something wrong? :confused:
[G1 Android Development] zewelor:
R u using adb shell on windows ? My friend got problem like this with windows shell, maybe try under cygwin ? Or u can try to do it on the phone.
[G1 Android Development] blackplatypus:
or starting a "screen" session should also fix the terminal. Just out of curiosity does passive handshake capturing (wpa) work for you guys?
[G1 Android Development] Proxin:
I'll try on the phone, was using adb shell in Windows.

I tried using the screen command but bash didn't recognize it. :confused:

I reflashed my nandroid backup to use the wifi so I could install extra packages on Debian. I know I have aircrack-ng but not sure if I have aireplay-ng and airmon-ng (I think that's what it's called) that are necessary for testing WEP points for vulnerability.
[G1 Android Development] zewelor:
You need to install screen on debian. I maybe will be able to host debian img with i hope all neccesary programs installed already
[G1 Android Development] Proxin:
True, I'll no doubt have to install a few other things such as airmon-ng and aireplay-ng I think, however when I check for those it doesn't seem to find them.

Is there something I need to add to the repositories or something, to be able to install these other packages I will need?

Pardon my ignorance on the matter, I only just was able to play around with BackTrack for the first time this week... :(
[G1 Android Development] zewelor:
If u got aircrack-ng installed u also should have other aircrack tools like aireplay etc
[G1 Android Development] Maave:
Holy crap, how did I miss this thread? I'm so frigging excited to get this running but I need to finish doing work before I can mess around with my phone ;_;

I'm staying up all night until I get this working
[G1 Android Development] ultra spikey:
Is there an updated guide somewhere on how to get CM6/7 + Debian on a G1? I got CM6 on, but having a hard time getting Debian set up.
[G1 Android Development] Maave:
I've installed on CM6. What are you stuck on?
[G1 Android Development] ultra spikey:
I tried following this guide...

http://www.androidfanatic.com/community-forums.html?func=view&catid=9&id=2248

...step 5 won't let me chmod, and step 6 just doesn't run. Then I tried the changes "pensive" made on page 11. Now I can start "bootdeb" but it fails and I get this...
[G1 Android Development] blackplatypus:
If you need a easy straightforward solution, use this:

https://guardianproject.info/code/lildebi/
[G1 Android Development] ultra spikey:
That guide looks a little easier. Still getting stuck towards the end though. When I run the app, here is what shows up on the last 2 lines...

Debian chroot mounted and started.

chroot: can't execute '/bin/bash': No such file or directory

...so it looks like it's trying to execute something and cannot.
[G1 Android Development] Maave:
EDIT

nevermind, gotta futz with Android before I can continue setup
[G1 Android Development] Maave:
I can't get this Debian builder running either.

I'm going to go back to bootstrapping my own builds. It's a pain to build but I know how to fix errors on it because I made the whole thing.

If I can get the Debian running from a loopback (I usually run from a partition) I'll upload the image and bootscript for you.
[G1 Android Development] zewelor:
If u got some server i could upload debian.img with start script i used. It has already installed aircrack.
[G1 Android Development] haralampije2:
please do, i am having problems too.
[G1 Android Development] blackplatypus:
Strange for me it was very straightforward, use a kernel which supports loop devices, install the latest apk [1], download the image [2], unzip it move the debian.img to your sdcard, launch the app, press Start Debian, after that you get a shell (e.g in connectbot) with "start-debian", the script is located in /data/data/info.guardianproject.lildebi/app_bin , you can copy it to /system/xbin or some other directory.

[1] http://guardianproject.info/builds/lildebi/2011-07-12_19-46-22/LilDebi-debug.apk

[2] https://github.com/downloads/guardianproject/lildebi/debian-squeeze.img.bz2
[G1 Android Development] Maave:
I figured all that out and I know how to the error on my phone, but whenever I push the file back it says file not found. I've already set the uid and gui to that of the app and set the appropriate permissions.

It doesn't matter, I'm just going to install it myself.

How about MegaUpload? Put them in a ZIP or whatever you use and upload there.

edit: Wait, how large is your IMG? Some file hosters have filesize limits.
[G1 Android Development] ultra spikey:
FYI

I also tried Debdroid...

http://gitbrew.org/debdroid/

...but after I flashed the installer, I lost root.

---------- Post added at 02:04 PM ---------- Previous post was at 02:02 PM ----------

Does CM6.1 kernel support loop?

EDIT: Doing some research, it looks like the Cyanogenmod kernel does not support loop devices. Where can I find a kernel that does?
[G1 Android Development] zewelor:
@ultra spikey: just flash kernel from the first post there is loopback support for sure.

EDIT:

added megaupload link, in first post, with debian.img i used. http://www.megaupload.com/?d=HA6CJKET there is script startdeb, just sh /sdcard/debian/startdeb, i tested it on cm6.

EDIT1: there is also compiled newest kismet from sources, as debian packages are very old, but i couldnt saw any networks with it :(
[G1 Android Development] Maave:
This is sweet. It works like a boss.

I was trying to get my DS's browser traffic but it looks like I was sniffing the wrong BSSID. A lot of people use the insecure network here, lol. I tossed the cap file into NetworkMiner to check and it was more than I expected
[G1 Android Development] stickemup:
Im getting an error showing in dmesg saying "ERROR nvs size is not multiple of 32 bits" when i try to run the airmon-ng command. i followed directions exactly and triple checked that i was entering the commands correct. any ideas?
[G1 Android Development] zewelor:
paste output from: ls -la /system/etc/firmware

or u dont have that file: wl1251-nvs.bin or its damanged maybe recreate it ? or try to use cm6 as there its working and someone got some problems on laszlo rom.
[G1 Android Development] stickemup:
old rom cant remember what it was i think COS-DS

~ # ls -la /system/etc/firmware

drwxr-xr-x 1 root root 2048 Oct 26 17:58 .

drwxr-xr-x 1 root root 2048 Jul 6 18:41 ..

-rw-r--r-- 1 root root 14087 Aug 1 2008 brf6300.bin

lrwxrwxrwx 1 root root 21 Oct 26 17:58 wl1251-fw.bin -> ../wifi/Fw1251r1c.bin

-rw-rw-rw- 1 root root 729 Oct 26 18:16 wl1251-nvs.bin

I tried recreating the file aswell. im going to try cm6 and see what happens.

EDIT: I flashed update-cm-6.1.0-DS-signed.zip, then followed instructions and thistime when i do the start deb command it says "insmod: can't open '/system/lib/modules/ext2.ko'" but it still starts debian, and i tryo the command again and i get the same "wlan0 Unknown wl1251_sdio - [phy0]SIOCSIFFLAGS: Invalid or incomplete multibyte or wide character" error. any ideas?

cm6

# ls -la /system/etc/firmware

drwxr-xr-x 1 root root 2048 Oct 27 17:49 .

drwxr-xr-x 1 root root 2048 Oct 27 2011 ..

-rw-r--r-- 1 root root 14087 Aug 1 2008 brf6300.bin

lrwxrwxrwx 1 root root 21 Oct 27 17:49 wl1251-fw.bin -> ../wifi/Fw1251r1c.bin

-rw-rw-rw- 1 root root 729 Oct 27 17:49 wl1251-nvs.bin
[G1 Android Development] Maave:
Isn't COS-DS a Gingerbread ROM? This kernel/module is for Froyo.

edit:

I get the same insmod error in CM 6.1 but mine works anyway.
[G1 Android Development] stickemup:
So in theory that error shouldnt affect me. But im getting the same error across 2 seperate roms "wlan0 Unknown wl1251_sdio - [phy0]SIOCSIFFLAGS: Invalid or incomplete multibyte or wide character". Maybe a hardware problem as i am pasting the commands directly from the first post.
[G1 Android Development] zewelor:
Post output from dmesg also maybe there will be some more information. Quick google for it and it looks like some locale problem with utf8, but why and where :\ Are you sure you are creating that nvs file on the original kernel ? Before flashing mine kernel ? Another idea is ty execute "cat /proc/calibration > wl1251-nvs.bin" NOT using adb shell but directly on the phone, but be sure to do it on the original rom kernel. That ext2 error is nothing script only tries to load ext2 kernel module and it doesnt exists in cm6 but its ok as kernel got ext2 support compiled in.
[G1 Android Development] stickemup:
I am absolutely certain i am not flashing your kernal before the patch. I will wipe and flash CM6 and then type the steps out as i do in order. One question though. When i try "mount -o remount,rw /" , then type "ln -s ../wifi/Fw1251r1c.bin wl1251-fw.bin" i get that it is still read-only, so instead i used "mount -o remount,rw /system" which seems to bypass the error.

Im going to paste directly from my terminal to make sure i am typing the right commands

Wipe/factory restore in recovery.

Flash CM6

boot into CM6

in terminal typing your commands in order with the modified "/system" in the mount command

~ Stickemup$ adb shell
# su
# mount -o rw,remount /system
# cd /system/etc/firmware
# ln -s ../wifi/Fw1251r1c.bin wl1251-fw.bin
# cat /proc/calibration > wl1251-nvs.bin
# mount -o remount,ro /system
# reboot recovery

flash ez_1.5.1_wl1251.signed.zip

reboot into android os

in terminal i type your commands

Stickemup$ adb shell
# su
# cd /sdcard/wl1251_modules
# sh ../insmod.sh
# sh /sdcard/debian/startdeb
insmod: can't open '/system/lib/modules/ext2.ko'
root@localhost:/# screen
# bash
root@localhost:/# airmon-ng start wlan0

Interface Chipset Driver

wlan0 Unknown wl1251_sdio - [phy0]SIOCSIFFLAGS: Invalid or incomplete multibyte or wide character

(monitor mode enabled on mon0)

root@localhost:/#

Here is the dmesg

[ 302.828643] Compat-wireless backport release: compat-wireless-2010-12-20
[ 302.829223] Backport based on linux-next.git next-20101221
[ 303.178771] cfg80211: Calling CRDA to update world regulatory domain
[ 303.825836] wifi probe start
[ 303.826293] trout_wifi_power: 1
[ 303.987579] trout_wifi_reset: 0
[ 304.027954] trout_wifi_set_carddetect: 1
[ 304.028198] mmc0: card_present 1
[ 304.028594] mmc0: Slot status change detected (0 -> 1)
[ 304.028869] wifi probe done
[ 306.528289] mmc0: mmc_rescan: trying to init card at 144000 Hz
[ 306.585449] mmc0: card claims to support voltages below the defined range. These will be ignored.
[ 306.605468] mmc0: new SDIO card at address 0001
[ 306.612609] wl1251: using SDIO interrupt
[ 306.622283] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[ 306.634033] wl1251: loaded
[ 306.640563] wl1251: initialized
[ 368.157806] EXT4-fs (loop99): warning: mounting unchecked fs, running e2fsck is recommended
[ 368.159698] EXT4-fs (loop99): mounted filesystem without journal. Opts: (null)
[ 405.072296] select 374 (utta.rommanager), adj 15, size 6061, to kill
[ 405.072601] send sigkill to 374 (utta.rommanager), adj 15, size 6061
[ 450.184295] init: untracked pid 571 exited
[ 450.191955] wl1251: ERROR nvs size is not multiple of 32 bits: 729
[ 450.204284] init: untracked pid 572 exited
[G1 Android Development] hackbert130:
@ stickemup: I had your issue, too. It finally worked for me by using "adb remount" before "adb shell". Then, i didnt need any mount command to get the firmware in place.

@ zewelor: thx!!!
[G1 Android Development] zewelor:
@stickemup: i dont know what can be wrong, last idea is to try that "cat /proc/calibration > ..." on the phone not on the adb shell, maybe some encoding issue when running it on adb shell but why if its not being displayed at all. Or u can try to get that file from someone else, but as i read it should be device specific but its worth a try a dont have g1 so i cant send it to u, maybe someone could upload this nvs file ?
[G1 Android Development] blackplatypus:
You can also try to use part of my loading script, quick and dirty, but works.

#!/system/bin/sh

echo "[x] Injection startup"

if [ -e /system/etc/firmware/wl1251-fw.bin ] && [ -e /system/etc/firmware/wl1251-nvs.bin ]
then
echo "[x] Firmware/calibration file found"
else
echo "[!!] Firmware/calibration file NOT found"
echo "[x] remount rw /system"
mount -o,remount,rw /system

echo "[x] create symlink"
ln -s /system/etc/wifi/Fw1251r1c.bin /system/etc/firmware/wl1251-fw.bin

echo "[x] create calibration file"
cat /proc/calibration > /system/etc/firmware/wl1251-nvs.bin

echo "[x] remount ro /system"
mount -o,remount,ro /system
fi

By the way, using 2.6.29 kernel allows to switch on the fly between the "normal" wlan.ko module and the "injection modules".
[G1 Android Development] Maave:
What kernel are you using, an old Pershoot? The search on his site is broken and the Google pages aren't cached so I'd where the download is for that.
[G1 Android Development] blackplatypus:
No I'm using a HTC Hero (G2) phone with flykernel, but I don't think there should be much difference kernel wise as the wifi implementation is always the same.
[G1 Android Development] rattking:
Hi I am using the debian.img from the last page.

When I run wesside-ng it says cracking pid died and if I run aircrack-ng against the wep.cap file it says starting attack and returns to terminal with no error.. there are plenty of IVs and when I run aircrack-ng on the same wep.cap from my pc it finds the key in no time. so injection and capture works but not aircrack-ng. is anyone else having this problem or just me?
[G1 Android Development] stickemup:
So trying the script for injection didn't seem to work either. Tried the cat command from the phone as well. Maybe a rom issue? anyone else have a confirmed rom that works? also can someone with it working make an md5 for all the download files? thanks
[G1 Android Development] zeubea:
Hi, nice works both.

I have used patching kernel by blackplatypus and scripts whith any modification for adapt to stock 2.1 in my HTC Hero. I have tested a little and i have found airodump hopping channels slowdown the phone too much. aireplay -0 is moderately ok (desaossociate a powerful SGS2!) , airodump fixing a channel and bssid fail in 1 or 2 minutes, although only fixing bssid it is better althogh the phone slowdown because channel hopping, i suppose.

i cant associate to AP, and the battery drains very fast. Investigating Maemo patches, 03 patch point to resolve this question, but is not possible apply in androids HTC hero, dream, magic, dont you?
[G1 Android Development] BLEK0TA:
zewelor do u think your manual will work with htc sensation? with your drivers?
[G1 Android Development] zewelor:
If the htc sensation got wifi chipset TI wl1251 then yes it should work
[G1 Android Development] formula91:
Could you post a mirror of the debian img? Megaupload doesn't work anymore for obvious reasons.
[G1 Android Development] zewelor:
I can but where ?
[G1 Android Development] ThrashWolf:
Mediafire or Rapidshare would probably be best. And thanks!
[G1 Android Development] zewelor:
http://www.mediafire.com/?0ab95ia8xbale0i
[G1 Android Development] formula91:
Much thanks!
[G1 Android Development] anonymusneo:
can you please make a apk for i9000 sgs ice cream sandwich

thankyou in advance :)
[G1 Android Development] Aldasa:
DNS isnt working in this image. The wrong nameservers are set up.

typing: echo 'nameserver 4.2.2.2' >/etc/resolv.conf

after chrooting to debian fixed it for me.
[G1 Android Development] BLEK0TA:
zewelor i dont know what kind of wifi chipset is used on htc sensation and i didnt find it true google :(

so i hope one day u will buy sensation and your development work will be continued :rolleyes:
[G1 Android Development] binarybishop:
I am trying to do this same thing with the SGS2 from T-mobile. I need some help in getting started. I know the wifi chipset is bcm4330, but that is about as far as I got. I was able to get Backtrack 5 on to the device flawlessly with the exception of getting anything working with monitor mode or packet injection. Can you PM me to help me get started. I am a noob when it comes to deving kernels and deving drivers.

Thanks in advance.

You can PM me to give me info, or ask me for my e-mail.
[G1 Android Development] sambwel:
Posting here rather than PM so the info is freely available... If you want to try creating a modified driver for the bcm4330 that will support these modes, your best bet is to start here. The Broadcom cards are notoriously difficult to get up and running even when you're dealing with a laptop wifi card - it's just that much more difficult in a phone.

AFAIK nobody has achieved this for a broadcom chipset in a phone to date, but that probably has as much to do with the fact that not many have tried, as it does with the innate difficulty! So to you I say, good luck, really. I mean it! If you spend a decent amount of time learning and hacking away, I think it's not unreasonable to aim for at least monitor mode working. Packet injection may be a pipedream, but who knows...

Meanwhile, if you're the type of person who's not that tied to your phone, or you aren't against the idea of having a second phone just for pentesting, I seriously recommend getting an N900 or a G1. My primary phone is an SGS i9000 but I got a cheap second hand N900 to play with and it's really cool :) But it's awesome to see that the driver first developed for the N900 is being put to good use on the G1 so Android gets some real pentesting love.

Now if only phone manufacturers would move away from these goddamn broadcom chipsets!!!
[G1 Android Development] zewelor:
So im posting also here :)

http://linuxwireless.org/en/users/Drivers/brcm80211 here is some info about driver that supports wifi chipset in sgs2. As you can see on bottom monitor mode is in the future todo. "To be done for fullmac driver" and as i understand broadcom mobile chipsets needs fullmac driver. http://git.kernel.org/?p=linux/kern...ivers/net/wireless/brcm80211/brcmfmac;hb=HEAD here is git repo of that driver looks active so maybe support for monitor mode will be added there. wl1251 ( wifi chipset for g1 n900 etc ) got monitor mode patches but newer version wl1271 doesnt have and some developers said they wont be easy or almost impossible bcoz of the firmware, so other manufacturers arent so monitor mode friendly also. Anyway i think that the best way would be just to use some atheros usb wifi on phones which supports USB OTG ( and i hope it will be on every new phone ) and dont bother with mobile wifi chipsets.
[G1 Android Development] sambwel:
This.

A community developer had to dedicate a lot of time and effort to making an injection capable driver for wl1251, and I gather it was only really possible because of the state of the original firmware. Unless someone with super-technical firmware reverse-engineering skills decides to devote themselves to making similar drivers for broadcom chipsets, it's just not going to happen, and even with all that effort, there's just no guarantees it will be stable. Better to pick up a phone you know already has such a driver available (I think that means openmoko neo freerunner, G1, or N900 at the moment).

If you really want to use a brand new phone, a USB device is your next best option. USB OTG devices (ones that can act as a USB host to other devices) include the SGSII and Galaxy Nexus. At least with a USB wifi card you can have a much more powerful antenna... An Alfa AWUS036H is probably the best choice for that!
[G1 Android Development] PMGRANDS:
Thanks for the Awesome thread man...
[G1 Android Development] Fuse8499:
Just dug out my old T-mobile G1 and the first thread I see is "Aircrack-NG on the G1". Hahaha awesome. Android was so awesome until carriers started destroying it.
[Windows Phone 7 Q&A, Help & Troubleshooting] Ugelvidg:
So i am beginning on a Windows 8 app, and want to build a music app, like the one that is on the windows one seven, but so far I have been unabe to get one to even work correctly. Is there a way I can get the Windows phone seven music app source code??

Thanks in advance.
[Windows Phone 7 Q&A, Help & Troubleshooting] furfree:
Tried it once already, but I can't seem to find that darn code! Although shouldn't this be posted in somewhat in the W8 forum ?
[Windows Phone 7 Q&A, Help & Troubleshooting] Ugelvidg:
I thought maybe it would, but im asking for a windows phone 7 app. So i just put it into general. Well, i will keep looking, The zune code should work as well if im not mistaken....
[HTC Sensation] mikeyboc:
Is there an .apk or .zip file to have color notifications in the status bar?
[XPERIA X10 Q&A, Help & Troubleshooting] mraiko:
MY PHONE CAN'T REBOOT/BOOT UP AT ALL. CAN SOMEONE HELP PLEASE. ):

I'm currently very scared.
[XPERIA X10 Q&A, Help & Troubleshooting] The Sonos:
You'll need to provide more info before someone can help you.

Like rom, last thing you did/what you tried to do that it won't boot now, what have you tried so far (if anything)....
[XPERIA X10 Q&A, Help & Troubleshooting] rotundo:
Do you even see the sony erricson logo when you first try to turn it on? Or is it just black screen completely?

Does it let you get into like flash mode? Hold the back button and stick a usb cable in and see if the LED light comes on, if so, try to flash something via flashtool.
[XPERIA X10 Q&A, Help & Troubleshooting] mraiko:
Yes i do, i followed this thread http://xdaforums.com/showthread.php?t=1196808

however, my phone stopped at the logo.

---------- Post added at 05:15 AM ---------- Previous post was at 04:54 AM ----------

I apologized, i was too impatient already. At last my phone booted up. Will post anything else here if anything cropped up. :/
[HTC Sensation] chrisizzle492:
I remember reading a thread about installing the recovery through it, and it being unstable. Is this still the case? I'm still on the first release that came out with the soff tool.
[HTC Sensation] epsix:
I use rom manager to flash recovery It's stable for me. Don't know why you guys don't use it,much easier.