yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] aiiro:
use google, e.g. http://forum.soft32.com/pda/HOWTO-Bypass-align-screen-cracked-display-ftopict22441.html
[HTC Aria Q&A, Help & Troubleshooting] casperi:
I have done the whole root via Revolutionary to get S-off which I got fine. I rebooted back in to hboot to do a nadbackup but if I choose any of the selection

like backup or restore, install from zip, update from zip any of the options it just shows the name REVOLUTIONARY and never goes away unless I hit the power button which takes me back to the reg menu. All these options are in blue.

thanks

casperi
[HTC Aria Q&A, Help & Troubleshooting] drumist:
It's because it's a newer version of Clockworkmod. The power button is no longer used to make selections. Instead you must press the trackball button to select something. The power button just shows and hides the menu (for reasons I don't myself understand).
[HTC Aria Q&A, Help & Troubleshooting] casperi:
OMGs man thanks!! that did it. I would have never even have thought to try that.

Thanks again!!
[HTC Aria Q&A, Help & Troubleshooting] dandrumheller:
This caught me off guard too yesterday - just updated to the AGSE recovery that Attn1 posted from CWM 2.5.0.7.
[Xoom Android Development] bigrushdog:
AOSP Kernels for HTC's 8x50, 7x30, and 8x60 Devices

Also available for the Motorola Xoom
​

After much testing, developing, and debugging, Team Tiamat Xoom is proud to present Backtrack 5 with Aircrack for Motorola Xoom! Backtrack 5 is a Linux Distro designed specifically for Information Security (InfoSec) professionals. Aircrack is a software suite for wireless network vulnerability and penetration testing (pentest). We are very excited that we have been able to unify Backtrack, Aircrack, and the Xoom to produce a robust, unified, and mobile security solution.
​

Please be advised: The purpose of this thread is to release the Tiamat Xoom Backtrack 5 with Aircrack Expansion Pack. It is also to advance the Android implementation of this suite, along with discussion of drivers, dongles, and other aspects AS IT PERTAINS TO ANDROID. This is not the thread for asking about how to use the software suite. There are countless sources on the internet on which to find information about using the software suite. Also, due to the nature of this software, it may be a violation of XDA policy to discuss certain aspects of vulnerability testing, network penetration, and the like. I will personally follow up with XDA Moderation to determine what is fair game and what it not. Upon receiving guidance from moderation, I will open a thread in the Xoom General section for sharing scripts, tips, strategies, etc.​
[Xoom Android Development] bigrushdog:
Tiamat Xoom Moray BT5 Power User Expansion Pack

DEPRICATED -- Use the development overlay in the Tegra Hardware and Feature Implementation thread or just download in the above post.

Tiamat Xoom Rom users who use the Backtrack 5 package should be able to flash rom upgrades on not skip a beat! Simply flash this expansion pack over your Tiamat Xoom Moray rom update to keep backtrack running and add functionality.

RELEASE PAGE

HIGHLIGHTS

Dynamic BCM4329 MAC address change script

Modules for virtually every usb wifi dongle out there

bt5.img mount and unmount script for easy file access

mount symlinked to android root for easy file access

bt5 script in /xbin for easy chroot shell access

ftdi_sio.ko, pl2303.ko, and pegasus.ko for the guys over on the Xoom General board (see, I remember :D )

NEW BT5 Script and Resource Flash Zip tool

tcpdump

And, of course, Tiamat Tachi 2.1 stock gpu kernel

This pack replaces the wifi-fix download
[Xoom Android Development] bigrushdog:
Tools

ConnectBot for Honeycomb
​

Grab it here . Much credit and thanks to arctu for putting this together. You can have many shells open and easily access them for processing jobs​
[Xoom Android Development] bluedragon1982:
Awesome :)

Will your MOD also work with an VNC Client like "BackTrack 5 ARM (with GUI via TightVNCServer)" from here http://xdaforums.com/showthread.php?t=1074723 ?
[Xoom Android Development] alias_neo:
Nice

My, you have been busy! Nice work.
[Xoom Android Development] kevdog:
Nice work --

I'm wondering if users can contribute specific dongles that support monitoring mode with packet injection. I've only used pcmcia cards for monitoring mode. I'm also aware different chipsets seem to perform better than others. I've had good look with the atheros (mad_wifi driver) and broadcom (b43 driver) cards, however I'm aware usb dongles may contain different chipsets. If users could contribute whats working it would be great.
[Xoom Android Development] bigrushdog:
Sup kevdog. Ya, that would be perfect. In fact I got 2 OP spots to update with that info. Personally, I have an Alfa and a Netgear dongle and both work well. The Alfa works great. If users could post confirmed working dongles with a link to purchase, that could be useful. Also, I know Solarnz has a dlink that works. However, that dongle required additional firmware to be installed inside the BT image. I haven't addressed firmware yet, but this is an open-ended project in which community involvement is welcome.
[Xoom Android Development] bigrushdog:
I'm not sure. We used the stock BT5 ARM distro as a base. So if tightvncserver is included, it should. If not, you can always dpkg -i it. Keep in mind, we see no use for vnc in this enviroment and will not be supporting it. This is all shell sir :D, the way a good pentest enviro should be :D
[Xoom Android Development] bluedragon1982:
The link i posted, is based of "ARM with Gnome" so there is a gui. I dont know if your version also has a gui.

All i know is that vncserver is a part of BT5.
[Xoom Android Development] dascope:
My wifi is broken after installing the zip file via CWM. Shows 'Error' under Wifi in the settings. Any ideas? Do I *need* a dongle to use this add-on?
[Xoom Android Development] madamimadam:
I truely have no use for this, but this is great development for the xoom! Congratulations on another wonderful piece of work!
[Xoom Android Development] gqstatus0685:
Awesome work OP. I have a Netgear dongle lying around to play with. Will report results later.
[Xoom Android Development] BM1515:
Broken wifi

After I flashed this my WiFi broke
[Xoom Android Development] willverduzco:
[No message]
[Xoom Android Development] willverduzco:
^^ demonstration of how speechless I am by the level of contributions made by the awesome developers on Tiamat and Rogue.
[Xoom Android Development] bigrushdog:
Sorry about the wifi guys

Fix here

It wasn't flashing the kernel right. I missed it because me and the testers already had the kernel installed. Now we're in the game :rolleyes:
[Xoom Android Development] gqstatus0685:
I know this is Tiamet but will this work with Moray? I want to flash but I don't want to mess anything up.
[Xoom Android Development] bigrushdog:
Yes. In fact it should work with any rooted Xoom.
[Xoom Android Development] blkr00t:
BRD...this is great news. I can't wait to get my Xoom back next week. I let my son borrow mine for college. He isn't really using it so he is sending it back to me. I played the the BT5 ARM version when it was first release but it was limited. Looks like this addresses those limitations.

Great job as always
[Xoom Android Development] garveygibbs:
thnx

thanx for this you guys..

can you pleas provide a tut....that will allow me to go into GUI mode ?

thnx in advance
[Xoom Android Development] kev0153:
getting -1 channel error on m alfa card. Investigating, seems to be a fix.

**** I can't figure this thing out. Closest I came is this

http://forum.aircrack-ng.org/index.php?topic=9484.0

anybody is getting the -1 channgel error on the rtl8187.ko driver? Looks like you need a patch but you other guys are having luck with your rtl8187 devices.
[Xoom Android Development] bigrushdog:
I patched that in the rev4 kernel. Make sure you are using rev4. Also I'm gonna start adding the kernel and modules to the overlay pack to simplify things. And I should have an updated kernel soon.
[Xoom Android Development] kev0153:
Thanks let me check it out.

sweet, just cracked my own ap. Next target :)

Thanks again. I like that autocrack script too, thanks for posting that.
[Xoom Android Development] Mjamocha:
Cool, glad you got the auotcrack going! ;)

---------- Post added at 02:47 PM ----------

Is the rt73usb patched as well, having trouble with it.
[Xoom Android Development] kev0153:
This is interesting got it to work in the console for a wep crack. I don't have any suitable wpa access point to try it on.

I need to set up an AP with suitable wpa encryption to test.
[Xoom Android Development] Mjamocha:
You got which one to work in the console? wifite or reaver?
[Xoom Android Development] kev0153:
Ahh, I cracked a wep protected AP with wifite in the console. I got reaver running but I don't have a wpa AP in range that I can test. I might reconfigure mine to test.
[Xoom Android Development] Mjamocha:
Oh, ok - yeah I was only testing WPA/2 with wifite. I prefer the autocrack myself for WEP, and loving reaver for WPA/2.

Once you find an AP, let us know how you like it. Did you use my guide to install reaver? I wanted to make sure it was written fairly simple.
[Xoom Android Development] kev0153:
I like the option to analyze several access points at once with wifite. There is a shopping center near me that would be interesting to try this on.
[Xoom Android Development] Mjamocha:
I did find that wifite is a little faster on WEP than autocrack - what do you think?

"Shopping center" Ha ha ha .... damn Hackers ... can't stand 'em! :p

I meant, by all means - navigate to the local shopping center and locate your lost network key. :D

Set up your Pawn-Shop, and Pawn on brotha ! :cool:
[Xoom Android Development] Don_Don:
to try or not to try

Is this a good tool for testing security of my home networks, friends, and family? I guess I'm just asking about the learning curve? I researched a bit and see there is a lot of online info for someone like me just learning. Is this easy to uninstall if needed or can I just go into recovery and install a recovery backup?

Thanks guys for any help

Sent from my Xoom happily running Team EOS Nightly #81
[Xoom Android Development] kev0153:
Yes it did seem like wifite was a little faster.

;-)

I had a bit of trouble installing but only I because i wasn't paying attention to the different revisions of the kernel modules. If you feel comfortable flashing stuff and with working with the command line you should be OK.

Try this link for a good tutorial

http://www.aircrack-ng.org/doku.php?id=simple_wep_crack&DokuWiki=34379520e5be987144251147ee3a93d7

Once you get the hang of aircrack, try the sweet script Mjamocha posted a few pages back. It helps automate a lot of the aircrack functions.
[Xoom Android Development] bigrushdog:
The patch is to chan.c in /net. So it is the kernel networking that is patched. So it would apply to any driver. Post a dmsg
[Xoom Android Development] Mjamocha:
Got it going, thanks had to reflash kernel -
[Xoom Android Development] bigrushdog:
I think something is wonky with my boot image script. I flashed the overlay then the kernel, but the kernel did not flash, just the modules. That could be the cause of some difficulties. Watch for an update.
[Xoom Android Development] kev0153:
hmm, bluetooth is not working again. Happened after re-flashing rev 4.
[Xoom Android Development] cabagekiller:
OK How do I make it tar everything and not make me put y for each individual file? rather noob here haha
[Xoom Android Development] Mjamocha:
@cabagekiller

If this is in regards to Reaver-1.4 -

The instructions are written in order and quite clearly. To untar reaver-1.4.tar.gz enter the below command.

tar -xvwzf reaver-1.4.tar.gz

I'm not understanding why you would need to put "Y" for each individual file. The system does not supply you with that option.

EDIT - Refer to the below post
[Xoom Android Development] bigrushdog:
I appreciate the participation in this thread but lets try to stay focused on development. 99% of everything I've learned is from Google and trial and error. I think that was diplomatic enough. :p
[Xoom Android Development] earl00:
Word. I agree.
[Xoom Android Development] kev0153:
So after playing around with this a little bit, I can say I like it very much. I recovered about 6 lost keys with WEP encryption. I'm playing around now with WPA. My plan is to capture the handshake and then pass this off to a computer with a large dictionary file (I think this was brought up in this post). I'm having a little trouble capturing the 4 way handshake but I think it is a problem on my end.

I think I like wifite the of the various scripts posted.

I'm going to give this a go next.

http://wirelessdefence.org/Contents/coWPAttyMain.htm#Installing_coWPAtty:
[Xoom Android Development] bigrushdog:
Guys is there any interest in being able to run any of these programs natively? I debate the issue because there's almost no point. The bcm4329 chip using the bcmdhd driver does not use the mac80211 wireless subsystem, which is 100% required for packet injection. Therefore, whether we operate in the bt shell or native shell is almost a matter of semantics. Also, many tools, like mdk3 require the pthread library which is not part of the bionic c library. Just some thoughts...
[Xoom Android Development] Mjamocha:
If it 'aint broke don't fix it, I always say. I think the current setup covers so many bases. Leave it, it's awesome.

Once the Overlay/modules update is up- were all good.
[Xoom Android Development] kev0153:
Finally was able to capture a 4-way handshake. Took longer than I thought, almost 30 minutes. I passed the .cap files off to my linux box using a usb stick and ran them through my word list and was able to recover the key. This was my AP so I knew the key was in the wordlist so I cheated a bit. Anyway, it all works as expected.

The only thing I think making it native would be nice to be able to store a large word list on a usb drive or something and then use it in aircrack without "booting" BT5. I suppose it is possible to mount a usb stick on BT5 and use it but I haven't investigated. I guess it would be like any linux distro. But since the Team EOS rom already mounts usb sticks so nice it would be clean solution.
[Xoom Android Development] cabagekiller:
Can we use a powered USB hub with the Xoom.
[Xoom Android Development] bigrushdog:
Yep. Running mon0 - 3 on my netgear just sucks my battery dry.
[Xoom Android Development] bigrushdog:
Dude I'm telling you, dictionary attacks are dead on arrival man. An old and ineffective strategy that does not meet today's needs. Deauth the target, clone the AP, and run any number of mitm attacks. Keep in mind some of the bt libs are a bit wonky so some tools may not work correctly.
[Xoom Android Development] Mjamocha:
I turned down the Maximum frequency my Xoom to 912MHz, performance is still great, saved the battery a lil bit.

---------- Post added at 05:34 PM ---------- Previous post was at 05:31 PM ----------

I still prefer, reaver for WPA/WPS-2, no dictionary file just good ole Brute Force - success in about 3-4hrs. :)
[Xoom Android Development] kev0153:
Interesting, I'll have to investigate. I've only been playing around with WEP attacks up to this point. Time to step up I guess. Thanks

My understanding is that reaver is only good for WPA using a WPS setup. What if the AP is not using WPS? Then you'd have to use a dictionary or a technique like BRD described. When I use the wash command. I never seem to find any APs using WPS protection. It says they are capable but not using it. Maybe I'm missing something.
[Xoom Android Development] jonman364:
Or maybe your reading it backwards like I was at first. Under the WPS Locked column, "No" means that WPS

is

enabled.
[Xoom Android Development] kev0153:
hmm interesting. I'll have to try this when I get home tonight. thanks

Ok, I must be a dope, I was able to reaver to work on my lunch hour.
[Xoom Android Development] bigrushdog:
My understanding is that reaver only needs wps enabled. If wps is disabled, that calls for my aforementioned attack vector. You WILL NOT be successful in brute forcing wpa keys. Our sun will be a white dwarf by the time you crack it.

Edit: The sun will become a red giant and swallow the earth even before that. So learn the various metasploit attacks.
[Xoom Android Development] GunPR:
what about a simplified version like tiny core linux?

Size wise would be nice
[Xoom Android Development] kev0153:
I was playing around with reaver a little bit this weekend. Seems kind of hit or miss. I was attacking my home AP and it seemed like it locked me out after about 5 minutes. Had to restart the AP. I found another AP near the coffee shop I frequent that was playing nice. Got 20 % complete before my battery got too low. Best advice is to play around with it.

I was also playing around with airbase-ng. I wasn't able to get it going on the xoom because it couldn't find the tun.ko module. I posted a question and it's supposed to be baked in the kernel but no good. Wish it would work, this is a pretty amazing tool in the aircrack-ng suite.
[Xoom Android Development] bigrushdog:
I remember this issue from the honeycomb days. The problem is chroot. The Tun node is created in the android sysroot, and not the chroot sysroot. I don't have a solution atm but once I dig into it, I'm sure I can come up with something. Google some tun mknode scripts and see what comes up. We def need airbase running.
[Xoom Android Development] kev0153:
awesome, another project right? :)

On a side note, I wonder if this will run?

http://www.ex-parrot.com/~chris/driftnet/

going to give it shot see if it complies and runs. You'd have to run it in adjunct mod and then do something with the images it collects.
[Xoom Android Development] Mjamocha:
(sorry quoted the wrong text) any whoooo ...

I don't understand the issue here. Reaver runs fine for me no issues, no lock out or anything like that at all. For kev0153, where you attacking you AP while you are using it? Was wps enabled? It has to be WPA2, If not, reaver will not associate. Also, it does take a little while so my advice is to have you tab charging while you use Reaver. Could have been a signal issue, maybe you had a stronger sig at lunch ... not sure what happened with ya.
[Xoom Android Development] kev0153:
It would run fine for awhile then I would get a timeout error 0x02 or something like that. It would keep trying the same pin over and over again. The only way to fix it was to reset my AP. Happened a few times to me on a couple of different APs.
[Xoom Android Development] Mjamocha:
"Timeout error ...." That is part of the process. I notice that if the target gets offline you will get a timeout error - if you look at my screenshot of reaver - it says that as well a few times, along with WPS transaction Fail, however the pass was cracked a little while later. Don't over think ... just let it run it's course. You may not see any progress until you are around 96-98% done.
[Xoom Android Development] kev0153:
I'll have to try again. I assumed it was broken, as I got about 20 of those timeout errors in a row and the pin numbers were not advancing.
[Xoom Android Development] Mjamocha:
Yeah, if the target gets offline, you will get a timeout error. Just stop the process, and pick it up later.

Wouldn't mind discussing this more in depth, however this threads focus is on Development.
[Xoom Android Development] Mjamocha:
Bigrushdog

LOL - Ahhh Yeah ... special and personalized, Thank you kindly!
[Xoom Android Development] eureka9092000:
After I flash backtrack file in CWM, go to terminal and type bt5, it said 'it appears no backtrack 5 installed'..What should I do?
[Xoom Android Development] Mjamocha:
you didn't mention before that your BT image was only 385mb LOL.

that is you issue.

As always If This Was Helpful, Hit The Thanks.
[Xoom Android Development] eureka9092000:
Still the same..and my bt5 folder has only 385mb size..What wrong??:( Btw, I'm using team EOS ICS nightly build 51 mz601..
[Xoom Android Development] bigrushdog:
You got a bad backtrack install. Delete the backtrack folder in data and flash again. Also make sure you flash the ics version.
[Xoom Android Development] XxLordxX:
I did s*** and needed to flash a new ROM, now I have a 10gb (!!!) folder with BT5 name and can't delete, so anyone having this issue, bigrushdog can you help me? Anyway, can't use reaver too, when I perform "airodump-ng mon0" it doesn't show anything, anyone have this issue? Thanks for the great job!

Sent from my awesome ICS Xoom with xda Premium HD
[Xoom Android Development] bigrushdog:
I have no clue as to what you got going on man, but it looks like your having issues. Go into adb shell from recovery and delete the BT5 folder. Start fresh.
[Xoom Android Development] Mjamocha:
@ XxLordxX

How To:

ADB Shell Folder Removal - (we will use BT5 as an example)

++++++++++++++++++++++++++++

1. Connect Xoom to pc

2. Boot into recovery

3. Toggle to internal storage as /sdcard

4. mount /data

Enter adb shell via pc

(cd to file location) in this case BT5, is in the sdcard directory

Code: cd /sdcard # (once typed, you will be at.... /data/media prompt)

if after the above command and you are not at the /data/media prompt start over)

Code: rm -r BT5 (stubborn Folder)

*Side note ... This works for any other stubborn folder that you want to delete as well...

USE AT YOU OWN RISK - MAKE SURE YOU DO A BACKUP FIRST

If this was helpful Hit The Thanks!
[Xoom Android Development] Prack:
Same thing happened to me. People will post all sorts of ways for you to delete it and adb commands etc and none of them will work. I had to lock/unlock bootloader and redo the whole darn thing to get it off my xoom. It wasn't a BT5 problem just so you know. I noticed I had an old rom sort of stuck in my xoom. Go to settings/storage and take a look at what's taking up space you might be surprised.
[Xoom Android Development] Mjamocha:
The above How to - does work. I've used it myself for the same BT5 issue. Looks like XxLord - has somehow installed the BT5 image twice. (each images is around 5gb) If this is the case and just a folder issue, this will do the trick. Shouldn’t knock people for trying to assist - this is one of the things that a forum is for. Trial and Error, each situation may not be exactly the same; and the solution may have to be tweaked accordingly. As we all know, things get haywire sometimes ... and it sucks!
[Xoom Android Development] iruiz2:
And it did work for me as well!! I was able to delete the whole BT5 using those instructions, and make a clean install.
[Xoom Android Development] Mjamocha:
Awesome-ness!
[Xoom Android Development] iruiz2:
Hi:

I've gone missing some weeks, but I am back with full force. I don't know if you remembre my posts but I was unable to make bt5 in the xoom recognize my dongle (cheap imitation of an alfa, that gold-looking one).

After some time I decided to buy the one recommended by @Mjamocha in the 18th page of this thread... and the first impresion was frustration (didn't work, but neither did on my laptop). After some emails with the seller (he was very kind) he replaced the deffective item and (images speak by themselves...)

This was accomplished with EOS nightly #90 and the xoom development overlay 4.

THANK YOU @bigrushdog and @Mjamocha!!!!!
[Xoom Android Development] Mjamocha:
Your Welcome, Anytime my friend!
[Xoom Android Development] XxLordxX:
Yeah not working huh? Just freed me 10gb of space :p

Thanks mjamocha, already thanked your post ;)

Sent from my awesome ICS Xoom with xda Premium HD
[Xoom Android Development] Prack:
Glad that worked for you guys. I had tried that and a few other suggestions with no luck. The install of BT5 I had that would not delete was from another dev. Link was another thread on this forum.

I had a few others with the same problem and the re-unlock was the only way we could get rid of it.
[Xoom Android Development] Mjamocha:
Anytime my friend! -;)