yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] Vishnuisgod:
Ive been trying to get bcmon to work for a few months now....Ive had zero success.

Nexus 7 2012 running android 5.1

rooted, unlocked, with busy box1 .24, and superuser

Ive even done fresh wipe, and nothin I do can get bcmon to work. I install it>go to install firmware and tools> crashes (very brief error message) (reverts to home screen).

Could someone help me figure out wth is goin on?
[Android Software/Hacking General [Developers Only]] keliuss:
I've read elsewhere that it works on kitkat but not lollipop.
[Android Software/Hacking General [Developers Only]] Vishnuisgod:
keliuss!!!!!!!!

Thanks for that, Ive also read that it doesnt work with busybox 1.24,only 1.21 (or lower).

Ive been giving it some real thought to putting my n7 back to what it would have been like during that time when bcmon came out. Guess I will now.

Keliuss, again, thanks for the missing peice of info. Ive read the first 30 pages of Reaver for android and the last12. Ive read all the other threads too.... so this info is hopefullymthe last piece of info. The guys who made bcmon, give no help either. you rock!

Cheers!

ps - I see alot of guys running Cyanogen, does it NEED that or is that a preference?
[Android Software/Hacking General [Developers Only]] keliuss:
I've seen that too but don't know for sure, although I'd say if it was a needed, it would be stated clearly enough. I've just started trying to get this working recently, so I'm no expert.

Also, I'm not sure why but this thread was almost a year old until you revived it.

I'll be getting my hands on a Samsung S2 in about 5 or 6 weeks, which has the right hardware. I might report back then.

Keliuss
[Android Software/Hacking General [Developers Only]] Vishnuisgod:
well I got it running! woot!

I had to downgraded to kitkat (that was a chore...I downloaded the GSM rom not the wifi one - D`oh!).

Rooted. then installed busybox 1.20<<important apparently

SuperSU is 2.46

I cant seem to get a green checkmark beside my router when it lists the available networks.....not sure what it means...

Im not sure what it means....but after 20 attempts my router bumps me of with an error (in RfA) Warning AP limit detected waiting 60 seconds....

Im looking around at some other cracking methods...anybody heard of pixiewps? Know where I can find an apk for it?
[Android Software/Hacking General [Developers Only]] Vishnuisgod:
does anybody know for sure if this works on the Nexus 7 gen 1 >> sim models<<?
[Android Software/Hacking General [Developers Only]] J()KER:
Yes, it works
[Android Software/Hacking General [Developers Only]] matrixex:
hello I noob not lazy

Want to ask till now does monitor mod works for any device (android) or only for selected android device

I have a device,Nokia x and I badly wanted to run monitor mod on it

so any suggestion or help ,then pls provide me and by the way

I am noob ,with little programming skills(c++)

That's all thanks
[Android Software/Hacking General [Developers Only]] J()KER:
Please read first post.
[Android Software/Hacking General [Developers Only]] VanzMooth:
Please compile for xiaomi redmi note 2 :(
[Android Software/Hacking General [Developers Only]] BatDroid:
Greetings devs.. 1 big question..

Sir,

can u find a way out for spreadtrum chips?
[Android Software/Hacking General [Developers Only]] a317023957:
bcm4335 appear open listening

hello, I'm from China

I found the monitor cueing failed, and why？

meizu mx4 pro test wireless LAN chip is bcm4339

Directly in the / system / etc / wifi / directory decentralization a bcm4330-sta.bin know

Figure

[IMG="http://chuantu.biz/t2/34/1458926452x3738746523.jpg"]http://chuantu.biz/t2/34/1458926452x3738746523.jpg[/IMG]

[IMG="http://chuantu.biz/t2/34/1458926500x3738746523.jpg"]http://chuantu.biz/t2/34/1458926500x3738746523.jpg[/IMG]

[IMG="http://chuantu.biz/t2/34/1458926538x3738746523.jpg"]http://chuantu.biz/t2/34/1458926538x3738746523.jpg[/IMG]

[IMG="http://chuantu.biz/t2/34/1458926579x3738746523.jpg"]http://chuantu.biz/t2/34/1458926579x3738746523.jpg[/IMG]

[IMG="http://chuantu.biz/t2/34/1458926636x3738746523.jpg"]http://chuantu.biz/t2/34/1458926636x3738746523.jpg[/IMG]

[IMG="http://chuantu.biz/t2/34/1458926666x3738746523.jpg"]http://chuantu.biz/t2/34/1458926666x3738746523.jpg[/IMG]

[IMG="http://chuantu.biz/t2/34/1458926694x3738746523.jpg"]http://chuantu.biz/t2/34/1458926694x3738746523.jpg[/IMG]
[Android Software/Hacking General [Developers Only]] crazyraiga:
does this work on S5?
[Android Software/Hacking General [Developers Only]] a317023957:
Start monitor failed to monitor the emergence of
[Android Software/Hacking General [Developers Only]] crazyraiga:
was asking if this will work on s5?
[Android Software/Hacking General [Developers Only]] a317023957:
不知道
[Android Software/Hacking General [Developers Only]] a317023957:
有没有人呀
[Android Software/Hacking General [Developers Only]] :
English only on XDA please.

Thanks.
[Android Software/Hacking General [Developers Only]] Happy2016:
anyone here still using bcmon/aircrack-ng? Im grateful if someone can help me out

im using korek chop chop attack for the injection attack.

i notice when i tried to use arpreplay attack, it would generated a lot of IVS until the 4 thousands packet then the #/s will dropped to 0

It is shown in the video at 6 minute 7 second

https://www.youtube.com/watch?v=ZFW9oSqyU3A

CH 9 ][ Elapsed: 16 s ][ 2007-02-04 11:04

BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

00:14:6C:7E:40:80 47 100 179 2689 336 9 11 WEP WEP teddy

BSSID STATION PWR Lost Packets Probes

00:14:6C:7E:40:80 00:09:5B:EC:EE:F2 29 0 2707

CH 9 ][ Elapsed: 16 s ][ 2007-02-04 11:04

BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

00:14:6C:7E:40:80 47 100 179 4689 0 9 11 WEP WEP teddy

BSSID STATION PWR Lost Packets Probes

00:14:6C:7E:40:80 00:09:5B:EC:EE:F2 29 0 2707
[Android Software/Hacking General [Developers Only]] JoshDaWhite:
Hey provide more details such as device, Android version, and if you are using a Wi-Fi adapter, etc.
[Android Software/Hacking General [Developers Only]] Mr Wolf:
In the video, it shows the attacker has been deauthenticated, so, the attack can't go on. You always need to be authenticated to generate replay packets.
[Android Software/Hacking General [Developers Only]] Happy2016:
Thanks for your help, for bcmon im using cm1.01 and samsung s2.

No idea why aireplay attack not generating ivs. In my case my device is using fake authentication and is associated to my home ap. But when i run aireplay-ng -3 -b <mac address> wlan0, im not getting enough ivs, totally 0 after the 4k mark even when im assoicated. However my airodump can collect over 10k ivs if the aireplay-ng -3 -b <mac address> wlan0 is done on kali linux

Now im using this http://xdaforums.com/showthread.php?t=1940416

aireplay-ng -3 -b <mac address> does work, im getting ivs ard 10-30 per second even after the 4k packets collected. However fak auth does not seem to work due to different channel. Im facing same problem as them. Please help me out. Thank you

http://xdaforums.com/showpost.php?p=33471327&postcount=16

http://xdaforums.com/showpost.php?p=38294470&postcount=45

i have set iwconfig wlan0 channel, still not able to use fake auth and the utilis does not have airomon-ng.

Thank you for the help
[Android Software/Hacking General [Developers Only]] JoshDaWhite:
I m afraid I cannot help you. Sorry.
[Android Software/Hacking General [Developers Only]] Happy2016:
Hi, can anyone help me. Im having -1 channel. How do i fixed that?

im using syiah kernel 4.1.5
[Android Software/Hacking General [Developers Only]] Happy2016:
Hi, what is the difference between these 2 file, which file is causing the issues of the wifi card not able to determine the channel?

bcm4330_sta.bcmon.bin

dhd.ko

Thank you
[Android Software/Hacking General [Developers Only]] Happy2016:
I having problems injecting. I'm using the bcmon apk to enter monitor mode, when I start injecting all data and beacons stop. Same goes when I run air crack through bcmon terminal. I've try different aireplay commands but nothing.

Im using 10.1.3 cm rom on samsung s2.

Thanks for the help
[Android Software/Hacking General [Developers Only]] Happy2016:
Hi,

Im having the same problem as this guy. http://xdaforums.com/showpost.php?p=45181109&postcount=87

I noticed the solution is to limit the injection packets to less than 100. I am using this command for arp replay attack

aireplay-ng -3 -b 00:13:10:30:24:9C -h 00:11:22:33:44:55 wlan0

How can i modify the above command to limit packets injection to less than 100 packets?

I noticed that the aircrackgui allows packet injection to be set

http://dl-1.va.us.xda-developers.co....png?key=18D5qH-OWpRMW1KytJr0gA&ts=1478578985

If im not wrong, this app run on aircrack-ng commands

http://xdaforums.com/showthread.php?t=2233282

Please help me out

Thank you
[Android Software/Hacking General [Developers Only]] a317023957:
[IMG="https://img.xda-cdn.com/cAAcjtQXyDSVkuMrHGPiQCqSXok=/http%3A%2F%2Fp1.bqimg.com%2F1949%2F0886aabeabc14e2f.jpg"]https://img.xda-cdn.com/cAAcjtQXyDSVkuMrHGPiQCqSXok=/http%3A%2F%2Fp1.bqimg.com%2F1949%2F0886aabeabc14e2f.jpg[/IMG]

[IMG="https://img.xda-cdn.com/Vzyvh3wIlgbVRwHFinRfO1g8U10=/http%3A%2F%2Fp1.bqimg.com%2F1949%2F8c8fe9de19f629c4.jpg"]https://img.xda-cdn.com/Vzyvh3wIlgbVRwHFinRfO1g8U10=/http%3A%2F%2Fp1.bqimg.com%2F1949%2F8c8fe9de19f629c4.jpg[/IMG]

[IMG="https://img.xda-cdn.com/jZwJEOnz5ihGOaH7p47SUnUsnwE=/http%3A%2F%2Fp1.bqimg.com%2F1949%2F62babf7c1237e805.jpg"]https://img.xda-cdn.com/jZwJEOnz5ihGOaH7p47SUnUsnwE=/http%3A%2F%2Fp1.bqimg.com%2F1949%2F62babf7c1237e805.jpg[/IMG]

Bully binary file

do you haveï¼Ÿ
[Android Software/Hacking General [Developers Only]] venus342a:
Well, we made a new project which enables Monitor Mode on latest chipsets like BCM4361 on the S8 Plus :)

Check out : https://xdaforums.com/galaxy-s8+/development/monitor-mode-broadcom-chipset-t3622338
[Android Software/Hacking General [Developers Only]] Atifbaig786:
Can Anyone Compile for a Gt i9060i The Grand neo plus Version

I recently Used a chroot and nethunter and found out that It Uses an BCM 43430

ANY help.
[Android Software/Hacking General [Developers Only]] SteelSpider:
Can Monitor mode be used in Moto G (1st Gen) or Redmi 1S ?
[Android Software/Hacking General [Developers Only]] Alishahoud:
Hi xda

Please i need your help ,to run my wifi card BCM43430 in monitor mode ,i'm using Userland app and when i tip airmon-ng start wlan0 ,i have this error :field to connect to genric net link
[Android Software/Hacking General [Developers Only]] CalicoStack:
hey fellas im on a Lg Aristo 2 msm8917 and i was able to get monitor mode, which is crazy because its not supposed to be possible. Thing is it never made sense to me why some chipsets work n some dont the. In my opinion all modern smartphones have that ability. my internal wifi card doesnt even mention moniter mode but i was still able to do it. software interface modes (can always be added) thats what gave me motivation to keep tinkering. when i do iw phy1 info its tells you that at the very end. the only thing im still trying to fix is that it stll says wlan0 and it still says managed mode yet by the evidence i know for a fact that its in monitor mode. by the way i followed https://www.google.com/amp/s/xdafor...lopment/wifi-monitor-mode-t3874557/page2/amp/ but i had to mess with it for a few weeks. i have no experience at all but the skill to research. ill post what i did to acomplish this once i get my notes together. All thanks to you guys tho and github and the internet.
[Android Software/Hacking General [Developers Only]] s.m.p.l:
Hi!

I'm now running the latest nightly Build of CM10 with the Modded Kernel from MemoryController, so far so good, running setup.sh now seems to work.

Further I used the iwmulticall from here: http://xdaforums.com/showpost.php?p=13492891&postcount=4

And created the symlinks to iwpriv and iwconfig

But airodump-ng doesn't seem to work, I still get "Can't find wireless tools, exiting."

Also iwconfig says Mode: Managed

Any ideas?
[Android Software/Hacking General [Developers Only]] MemoryController:
I used a iwmulticall I found floating on the Web and the tools in aircrack-static folder but airodump doesn't show any output. Iwconfig shows mode monitor

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] s.m.p.l:
Just did

iwconfig wlan0 mode monitor

now it shows Mode: Monitor

But still the can't find wireless tools thing :P
[Android Software/Hacking General [Developers Only]] MemoryController:
Have you put it in the same directory? :)

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] s.m.p.l:
I can put the iwmulticall into the directory, but when I try to create the symlinks i get:

Edit:

Should have asked Google sooner ... Symlinks don't work on FAT16/32 :P

Edit 2:

Just tried copying airodump-ng into xbin ... still "Can't find wireless tools, exiting."
[Android Software/Hacking General [Developers Only]] sambwel:
Update: Build fails for Galaxy S i9000 CM10. Posted to the issue tracker here https://code.google.com/p/bcmon/issues/detail?id=3
[Android Software/Hacking General [Developers Only]] McRoy:
Great!!!!!

Motorola Xoom have the same chipset like Nexus One!!! Someone will compile it for JB???

I don't have any idea of developing...

THX!
[Android Software/Hacking General [Developers Only]] thelinuxone:
cyanogen9 Exhibit ii 4g

Awesome work guys! I have some dmesg stuff for ya:

dmesg | grep dhd

<3>[ 19.377471] dhd: version magic '3.0.32-CM-ge9cef6c SMP preempt mod_unload

ARMv7 p2v8 ' should be '2.6.35.14-cyanogenmod+ preempt mod_unload ARMv7 '

any thoughts on how I can change the version magic without recompiling? I own a cellphone store and repair shop so I have a lot of phones that we can test on if you want some a tester lol
[Android Software/Hacking General [Developers Only]] sambwel:
EDIT: nevermind
[Android Software/Hacking General [Developers Only]] saitri:
awesome:good:
[Android Software/Hacking General [Developers Only]] MemoryController:
You shouldn't disable vermagic

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] sambwel:
You're right :o
[Android Software/Hacking General [Developers Only]] :
can this also work on galaxy s3?

if is able to compile for siyah for s3?
[Android Software/Hacking General [Developers Only]] MemoryController:
I can compile it for you if you want but does galaxy s3 use the bcm4330?

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] kala123:
maybe some1 can make a small tutorial how to install this? I own linux allso, but I dont underestand the installation method "Build the KO for your device"
[Android Software/Hacking General [Developers Only]] MemoryController:
Fetch the kernel source for your device. Build it once. Replace the drivers source with the one the team posted and run make modules SUBDIRS=path to the drivers after setting the necessary exports

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] atila-hun:
Yes S3 use bcm4330.
[Android Software/Hacking General [Developers Only]] MemoryController:
Ok expect it either tomorrow or the day after tomorrow. Will compile siyah ics right?

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] atila-hun:
Yes, siyah ics, thanks.
[Android Software/Hacking General [Developers Only]] nafitte:
Samsung galaxy s advance uses same bmc4330 wifi.. But it wont have CMW and Cynogen fw yet.. But it has TWRP and a modded firmware with root access.. Can you please compile the ko for this device.. Ask me if you need any more information. Thank you.
[Android Software/Hacking General [Developers Only]] jorch17:
Anyone can compile the ko for i9000 with CM10? I no have idea how to compile.

Or explain how to do.
[Android Software/Hacking General [Developers Only]] nafitte:
Anyone else get this error??

insmod: can't open "dhd.ko"

error: SIOCGILLFAGS (No such a device)

All files are in the same directory.. Also tried with dhd.ko extracted from my phones module folder.. Still get this error.. Any solutions for this..

Thank you.
[Android Software/Hacking General [Developers Only]] MemoryController:
Have you cd to the same directory? :)

Sent from my GT-I9100 running CM10
[Android Software/Hacking General [Developers Only]] nafitte:
Yes.. I cd to the same folder.. Any solution.. I am using galaxy s advance GT-I9070 phone.
[Android Software/Hacking General [Developers Only]] chris9983:
Can you compile for nexus 7 sorry not don't know how to compile but it has 4330 chipset, but would like to learn.
[Android Software/Hacking General [Developers Only]] kala123:
Does this allso work on Sony xperia go ?
[Android Software/Hacking General [Developers Only]] nafitte:
Cummon guys.. If you dont have time to compile our driver, at least give us a detailed tutorial. So we can compile driver for our own phones.

Thank you.
[Android Software/Hacking General [Developers Only]] bobbilljim:
Has anyone got the utils working on a galaxy s2 running cm 9.1?

I have the latest stable cm9 (cm 9.1) and the setup.sh script completed successfully.

However, I cannot run any of the utilities provided in utils.zip (iwconfig for example). I chmod/chown them, put them in /system/bin...

Whatever I do it says "sh: ./iwconfig: no such file or directory" even though I used tab completion on the file! I am out of ideas, anybody else have any?
[Android Software/Hacking General [Developers Only]] nafitte:
Type "iwconfig" on your terminal emulator.
[Android Software/Hacking General [Developers Only]] sambwel:
A lot of noise here with people asking for builds for specific devices. Also this:

Seems reasonable but everyone needs to understand this isn't something that can be described in easy steps like do X, then do Y, then do Z and it just works. I've found that out the hard way trying to compile these drivers for my own devices :)

These drivers are what's known as kernel modules, and kernel modules need to be compiled not only for a specific device, but also for a specific kernel. Since what we have here is an early experimental release, the code is not yet at a stage where it will easily compile for every combination of kernel & device out there.

The good news is that the two wifi chipsets bcm4329 & bcm4330 cover the majority of popular android devices, and it should not be difficult to get the drivers working for pretty much any device eventually. But as the devs have said on their blog:

So if you want these drivers to work for your device/kernel, and you are a skilled dev, get involved (if you haven't already!). Otherwise, you are relying on the time and effort of others, so you should try to be patient.

EDIT: If you are really keen to get into building your own kernels from source, here is a brilliant beginner's guide I just found. Just remember if you go down this path, Google is your best friend, and if you need to ask questions, make sure you ask the right people in the right thread. :)
[Android Software/Hacking General [Developers Only]] bobbilljim:
thanks but doesn't work

app_35@android:/ $ iwconfig

/system/bin/sh: iwconfig: No such file or directory
[Android Software/Hacking General [Developers Only]] defconoi:
I'm sure the aircrack dev's on freenode would love to get in on this, and maybe offer assistance, I would contact some kernel dev's as well and see if this can be a large collaboration. Who wouldn't want this ability? **** I could crack wep from my pocket lol
[Android Software/Hacking General [Developers Only]] ironmaskusa:
This is nice !! I just posted that this probably wouldn't happen because I noticed people working on it before and now it has came back with a lot more success.. great work you guys !

Quick question providing the phone has the right chip set what would be the minimum processor requirements etc ? Just curious. Again great work guys for what you have so far ! :D
[Android Software/Hacking General [Developers Only]] fortenbt:
Galaxy Nexus compilation

I'm attempting to compile bcmon for the Galaxy Nexus (toro). The output I'm getting is shown below. The errors are related to the WLAN_REGION_CODE definition. Is there some configuration that needs to be done before compiling?

Maybe I'm going about this wrong. I replaced the files in the directory drivers/net/wireless/bcmdhd with the files from the project located in bcmon-read-only/bcm4330/driver/src/bcmdhd/

Is this incorrect? I have made the kernel in ~/toro-kernel/omap and it builds fine.

$ export CROSS_COMPILE=~/toro-kernel/prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-

$ export ARCH=arm

$ export USE_SEC_FIPS_MODE=true

$ cd ~/toro-kernel/omap

$ make modules SUBDIRS=drivers/net/wireless/bcmdhd

CC [M] drivers/net/wireless/bcmdhd/src/bcmsdio/sys/bcmsdh.o

In file included from drivers/net/wireless/bcmdhd/src/bcmsdio/sys/bcmsdh.c:41:

drivers/net/wireless/bcmdhd/src/dhd/sys/dhd_sec_feature.h:53:23: error: operator '>=' has no left operand

drivers/net/wireless/bcmdhd/src/dhd/sys/dhd_sec_feature.h:60:23: error: operator '>=' has no left operand

drivers/net/wireless/bcmdhd/src/dhd/sys/dhd_sec_feature.h:104:23: error: operator '>=' has no left operand

make[1]: *** [drivers/net/wireless/bcmdhd/src/bcmsdio/sys/bcmsdh.o] Error 1

make: *** [_module_drivers/net/wireless/bcmdhd] Error 2

Anyone do this on the Galaxy Nexus or run into simliar issues?