yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] osd_daedalus:
Update 3...

Tried... still in bootloop.

I believe I'm stuck in the step before, at kernel compiling. Something must not be good...

I need some time to work on this, or eventually I have to switch down at CM11.
[Android Apps and Games] dsk197:
Not Working Help Please

Im on cyanogenMod 12.1 still it didn't works help needed
[Android Apps and Games] ruleh:
ehem......

What is your device?

Does your device have a bcm4330/bcm4329 chipset?

If it doesn't then you are out of luck for now.

If you don't know, then you need to find out somehow.

an easy way to find out is to run "lsmod" in terminal and look for "dhd" or bcm4329" if none of them are present then your device doesn't support bcmon and therefore therefore reaver for android will not work for you (except if you have an external wifi dongle maybe).
[Android Apps and Games] GalaxyStarndTouchpad:
Help!

NOT WORKING FOR ME!

nexus 7 2012 5.0.2 stock rooted unlocked.

doesnt do anything on starting attack except check monitor mode.
[Android Apps and Games] ruleh:
Android 5.0 has the pie restriction meaning that the reaver binary will not run on android >5.0.
[Android Apps and Games] osd_daedalus:
For sure I'd say as first:

https://wikidevi.com/wiki/Atheros_AR9271 - that covers the common pentest long-range devices such as the TP-link TL-WN722N and my Alfa AWUS036NHA. (module: ath9k_htc)

https://wikidevi.com/wiki/Ralink (module: rt2800usb): that covers the other Alfa long-range AWUS036NH which also is mentioned a lot in pentesting.

Let's return to bcmon:

right now I changed ROM again and I'm on a ROM based on a official Samsung kernel.

I know, but being that my dailydriver phone and work phone too, and fighting also issues of freezing, I need to inquiry on that first...

So far, on my N7000, these are my experiences:

- Ultimate N7000 XXLT3 (based on official Sam ROM): bcmon says "monitor mode: failed". EDIT: because module path is different. It is possible to grant monitor mode with RfA scripts properly adjusted.

- CM 10.1.3: works flawlessly

- CM 11: it activates monitor mode but 99% of times (because one time worked to me), when you do something more (airodump, besside...), in the terminal emulator all I have is some sort of codes like "44:D2" (going by memory) and no command is launched.

- Dirty Unicorns: like CM 10.1.3 but 50% of times it hangs up in activating monitor mode. Trying again usually works but hardly can deactivate it... I have to reboot

- CM 12.1: it activates it (so it says) but crashes when you try another command. Could be PIE restriction?

I wonder why all of these differencies on same hardware, all of them with rooted device and latest busybox installed...
[Android Apps and Games] ruleh:
cm12 is most likely pie restriction.

cm11 doesn't work with the standard shell, bash is also out of question. Try setting ash as your default shell in terminal.

for dirty unicorns: you can deactivate monitor by "rmmod dhd" and then "svc wifi enable". I assume bcmon apk doesn't know if it should use busybox or toolbox.

Stock rom: does it even support modules?

Also check your selinux settings and try changing it to permissive.
[Android Apps and Games] osd_daedalus:
looks like yes (we are talking about stock kernel, not stock rom)...

~ $ lsmod
dhd 430890 0 - Live 0x00000000
exfat_fs 18160 0 - Live 0x00000000 (P)
exfat_core 62038 1 exfat_fs, Live 0x00000000 (P)
j4fs 70143 1 - Live 0x00000000 (P)
Si4709_driver 25212 0 - Live 0x00000000
~ $

After re-enabling logcat, that's what happens when you try to activate monitor mode with bcmon, looks like it has some difficulties in insmodding for itself...

05-24 15:58:23.883: E/RootExecuter(7945): command: 'insmod /lib/modules/dhd.ko iface_name=wlan0 firmware_path=/data/data/com.bcmon.bcmon/files/fw_bcmdhd.bcmon.bin' failed with exitValue = 1
05-24 15:58:23.908: E/BCM4330B2(7945): exception
05-24 15:58:23.908: E/BCM4330B2(7945): com.bcmon.bcmon.ExecuteException: command failed:
05-24 15:58:23.908: E/BCM4330B2(7945): insmod: can't insert '/lib/modules/dhd.ko': No such device

The reason is the module now is in /lib/modules, not in /system/lib/modules.

Just a little work on that, anyway it goes in monitor mode (basically, using the RfA scripts just edited a little)
[Android Apps and Games] SOEDI:
The Realtek RTL8187L could be useful: https://wikidevi.com/wiki/Realtek

It's used in the ALFA AWUS036H and some other popular wifi dongles.

Ralinks rt73usb is a must have too, but thats self-evident as that's your testing device.

I also tried to find a better name for our "big fat wifi module", but there isn't any. Cause that's what it is, a "bit fat wifi (kernel)-module"

Maybe we should just keep this name :p
[Android Apps and Games] yhi:
my mobile screen is too small for thes :(

m using galaxy y :(
[Android Apps and Games] wdevil12:
had anyone succeed making RfA work on cm12 (custom android 5.X) on S2 (inc variants) ???? please answer!
[Android Apps and Games] ruleh:
I don't think so.

At least I haven't been able to do so.

Reasons

--pie restriction

----can't activate bcmon

----can't use reaver binary

If you can disable the pie enforcement it should work.

As of right now, there is no way. (at least none that I know of)

If you compile the rom yourself, then you might be able to disable it.

Also ask your favourite developer to do it for you if you can't do it yourself.
[Android Apps and Games] wdevil12:
I can activate bcmon and its fully working, i9100 cm12.1 roms come with non-pie blobs so it is not the actual problem. What I am seeing as the issue is RfA is not compatible with Android 5.x and it needs updating.

[MENTION=4096618]SOEDI[/MENTION] please bro add support to Android 5 :((( bcmon is compatible and workssss.
[Android Apps and Games] vinsky78:
Hi.

I have a GS2 SGH-I757M rooted, Cyanogen 9 and bcmon and RfA.

When I start RfA and I press Start attack it checks for monitor mode but it hangs there and I get: An error has occurred in sub: java.lang.NullPointerException...

Any ideas?

Thanks!
[Android Apps and Games] ruleh:
weightloss

The bigfat module loads and works now WITHOUT crashing.

I still didn't find out what was wrong, but I used different kernel sources and it worked.

The interesting thing is that the module shrunk from 9mb to 0.5mb which is A LOT.

Also I corrected most init/exit problems found in the original bigfat module.

So right now I need to add the drivers and it <should> work fine.

If someone wants to test an early version of the module, just post the modinfo of any of your modules and I will compile the bigfat module apropriately for your kernel. (also make cfg80211 a module in your kernel)

The early version still only consists of mac80211 and cfg80211. see below

Drivers are on the way now.

Currently in the module

-cfg80211

-mac80211

-rt2x00 (all usb drivers)

-rtl8187 <--can't test this one

-more currently underway
[Android Apps and Games] ruleh:
Did you try setting the monitor mode to manual activation?

If that doesn't work, then try using the script below as activation/deactivation/warmup script

#!/system/bin/sh
echo "rfasuccess"

(you might need to add "exit" to the end of the script)

This will not make rfa work but will tell if the problem is related to activating bcmon thorugh rfa.
[Android Apps and Games] vinsky78:
I am a rooky with all these things...

I tried to set the monitor mode to manual and tried to browse to get the correct script: /system/bin but I can't find sh ?

Sorry I'm a noob!
[Android Apps and Games] ruleh:
sh should be a symlink

to mksh or similar

it is usually what makes your shell work e.g in terminal.

you have to make 2 blank text file somewhere (lets say sdcard)

in the first one add the following code

#!/system/bin/sh
echo "rfasuccess"
exit

in the second one add:

#!/system/bin/sh
cd /data/data/com.bcmon.bcmon/files/tools/

then go to rfa-->settings-->monitor-->(disable use bcmon tickbox)--> custom (...) script.

add the first script you created as activation and deactivation script.

add the second script as warm up script.

This should make sure that rfa doesn't actually do anything.

Therefore we can see if the error is related to rfa or caused by its communication with bcmon.

(because I think it is bcmon)

Note: Also make sure that your phone is in a good working condition, such as no broken files or bad settings (such as clock or similar).
[Android Apps and Games] vinsky78:
Wow it's crazy, it works now without changing anything... Ap rate limiting though

---------- Post added at 10:33 PM ---------- Previous post was at 09:43 PM ----------

Maybe you're right when you say check for phone problems. Sometimes I get the list of WPS access point and sometimes it hangs without any reason, no network found. I have to remove the battery.
[Android Apps and Games] briansid:
Hi,

I use bcmon on Asus Prime TF201, but unfortunately it's works only with stock 4.1.1 ROM.

How can I make it work on other ROMs? Is it kernel or just some setting in wpa_supplicant.conf? Is it possible to port it somehow to other ROMs?

Thank you in advance!
[Android Apps and Games] ruleh:
run the following script

#!/system/bin/sh
export PATH=$PATH:/data/data/com.bcmon.bcmon/files/tools
svc wifi disable
rmmod dhd 2>/dev/null
insmod /system/lib/modules/dhd.ko iface_name=wlan0 firmware_path=/data/data/com.bcmon.bcmon/files/bcm4330_sta.bcmon.bin nvram_path=/system/etc/wifi/nvram_net.txt
LD_LIBRARY_PATH=/data/data/com.bcmon.bcmon/files/libs:$LD_LIBRARY_PATH
export LD_PRELOAD=/data/data/com.bcmon.bcmon/files/libs/libfake_driver.so
enable_bcmon 2>/dev/null
echo "monitor-mode ENABLED"
sh

(you might need to replace "dhd" with "bcm4329" and "bcm4330" with "bcm4329")

This should enable monitor mode without using the bcmon.apk which is buggy at times.

Also make sure that you run this script as root.
[Android Apps and Games] briansid:
ruleh, thank you very much. I will definitely try it.
[Android Apps and Games] Ototu:
thank you very much, it's really usefull.
[Android Apps and Games] doofenshmirtz_1:
Tnx for reply bro, i dont have any idea what im doing lol, but im trying to learn stuff while its summer. How do i use a different airodump binary? Ty!
[Android Apps and Games] ruleh:
download this airodump-ng binary, compiled for arm devices.

Place it in any folder where you have execute permissions (e.g /system/xbin) or replace the the airodump binary from the bcmon folder with the new one.

(replacing the binary is the prefered method if you use the bcmon.apk to do your monitor mode stuff)
[Android Apps and Games] ihsan101:
I'm not sure if this method works, but it says it enables monitor mode on the nexus 7. I haven't tested it or anything, but I think this will allow reaver to work with incompatible devices.

www[dot]pentestpartners[dot]com/blog/diy-build-your-own-pwn-pad-style-nexus-7-hack-box/
[Android Apps and Games] ruleh:
It seems like it does.

I haven't looked through the kernel code yet but I assume they fixed the network stack and added support for a driver. (kind of the same we did ---only did they do it in 2013 and we in 2015)

And that is good . It means that the n7 can use monitor mode with a rtl8187 wifi dongle.

If anyone has a n7 and a rtl8187, please test it with RfA.

However this driver is being included in the bigfat module anyway (almost there).
[Android Apps and Games] ruleh:
just a little bit more

okay ...another update

the current state

--bigfatwifi module loads

--monitor works

--rfa works

Currently in the module

-cfg80211

-mac80211

-rt2x00 (all the ralink usb devices)

-crc-itu-t (because rt73usb really wants that one)

-eeprom_93cx6 (similar reason as above but for rtl8187)

-rtl8187

-ath9k_htc

Problems

I had to include crc-itu-t because the module wouldn't load otherwise (except if you load ctc-itu-t.ko before).

However this might become a problem on kernels where crc-itu-t is already compiled inside the kernel therefore the 2 symbols will match and android will segfault (really why can't it say "duplicate symbol" or similar)

I will add an option to turn it on/off during compile time but I yet have to see a kernel where crc-itu-t is inbuilt.

(all this might also apply to eeprom_93cx6)

Another problem is that the module will not compile with all toolchains by default especially not the ones that stick to the C specifications like it is some holy scripture.

Including the toolchain I used might help otherwise just setting a different compiler flag should work.

Also I just found out that changing the kernel version in the makefile can actually cause the code to behave differently and might not work on all kernels therefore. Still I can't judge the impact of this since I am running only one kernel version. (will not try extreme hybrid kernels)

However the worst thing is the following (already gone but might happen again):

I compiled the module and changed the names of a few module parameters (nohwcrypt) because it would appear 3 times.

However I removed the 2 other ones later so only hwcrypt73 remained.

The module compiled fine without any errors (but a few unrelated warnings).

Running modinfo on the module showed that it had a modparam called nohwcrypt73.

Running modinfo on android showed the same param TWICE.

As a result the module would not load and complain with "file exists".

I compiled it a few more times but the same happend.

I also modinfo'd the module from my zip again and it still showed nohwcrypt73 only once on gnu/linux.

Somehow this stopped happening now with my new modules eventhough I made no related changes.

However I suspect that it will appear just as quickly as it disappeared

Back to good news

Right now I am working on getting the atheros drivers (ath9k[_htc])into the module and then polishing a few things here and there.

Only a big cleanup is needed now.

Other than that,

IT IS FINISHED (more or less for now)

Also if I left out any drivers you want in there, tell me and I will include it.

(uhhhm...where should I post the source code for the module [and the base kernel]?)
[Android Apps and Games] iamsameer:
I'm getting this always ..but no where i can see that the attact started.!

What to do..
[Android Apps and Games] ruleh:
I assume you are supposed to click ok and then on start attack.

If it still doesn't work then post the following:

--wifi chipset

--monitor activation method

--android version
[Android Apps and Games] SOEDI:
Great!

You really did a great job, can't wait to try it out! I just hope Sony didn't messed up the kernel too much, so I can get it to work on my XSP ;)

The best place to publish BigFatWifi is IMHO GitHub. It's easy to maintenance and everyone could add new drivers (or fix bugs), but you still can keep the control over the project. And a manual how to compile this on your own would be really nice.

But better avoid publishing any of your primary email addresses, as you may encounter a flood of mails like

Trust me, after the tenth message they start to get kind of boring, especially if you answered the day before another five and added a big FAQ area to the first post. :rolleyes:

Regards

SOEDI
[Android Apps and Games] lionsmatara:
Hi.. can i use this App and can i activate bcmon app??

Im damn noob on this and any one please help me..!

Thanks
[Android Apps and Games] ruleh:
Thanks for your advice.

Just looking at this thread I can kinda understand what you mean :)

How come people don't read before asking quetions?

Anyway looks like I need to find out how to use github then....

I will try to upload it today and make the guides etc later on and add it over time.

---------- Post added at 07:21 ---------- Previous post was at 07:19 ----------

Looks like you have a note 4.

That means it doesn't support bcmon.
[Android Apps and Games] lionsmatara:
Yes its Note 4. N910c... :(:confused:
[Android Apps and Games] osd_daedalus:
Nuff said.

Please, can you just read at the latest 10 posts of this thread? Is everything written there.
[Android Apps and Games] lionsmatara:
Is this my wifi chip?? :rolleyes:
[Android Apps and Games] osd_daedalus:
I don't know how you got that screen in Spec Device but that seems a dmesg output...

A compatible bcmon device has something like this screenshot.

Otherwise... stay tuned on the project ruleh is bringing on.
[Android Apps and Games] wildseacat:
Interesting
[Android Apps and Games] ruleh:
A simple "lsmod" with wifi enabled will show what driver your phones wifi uses.

If it isn't bcm4329 or dhd then it isn't compatible.
[Android Apps and Games] lionsmatara:
Thanks for reply. What is the Ismod? App or command?

Thanks.
[Android Apps and Games] ruleh:
lsmod is a command.

You run it in terminal or using adb shell from a pc.

---------- Post added at 16:14 ---------- Previous post was at 16:11 ----------

UPLOADED--Bigfatwifi

So here it is.

Right now I will make some guides that give a basic idea of how to use this and so on.

In the meantime, there is another file which could provide some information if you need any. (you should be able to find it)

Enjoy :)
[Android Apps and Games] lionsmatara:
Am i right?

Im a totally noob. Don't get angry and tell me..

Thanks..!
[Android Apps and Games] lionsmatara:
Is that correct?
[Android Apps and Games] ruleh:
Is wifi on while you run lsmod?

If not turn, it on and try again.
[Android Apps and Games] osd_daedalus:
I made a github account just to watch your repository :D

Maybe I can't code but I'm quite notorious in some project for bug hunting and to fill trackers ;)

Just... I was expecting a patch... my impression or did you uploaded a full kernel inside?

I'm going to try on a stock N7000 4.1.2 kernel, eventually I can do a fork--> pull request to shrink the project to the essential files or even to a patch file.
[Android Apps and Games] ruleh:
I uploaded the whole kernel.

I don't think a patch is going to work out with this approach.

Mainly because I wanted to provide an environment where the module would compile for sure.

My idea was that the module compiles on one kernel and then gets loaded into another one.

With the appropriate changes this actually works out.

However the most important files are in /drivers/zzbigfatmod and the mac80211.h, cfg8011.h etc header files.

Otherfiles shoul be the same across most kernel versions

Edit: brief guide added.

I am still working on the guide and on optimising the module code (because right now it is not how it should be but it works). This should also ensure that adding more drivers becomes much easier and swapping kernel code would also be less work (in case it is needed for those exotic kernels).

The guide still needs better formatting and lacks detail, but for now it might help someone (or maybe not).
[Android Apps and Games] sam619:
bcmon not working in lollipop(cm12) please help. how to enable monitor mode without bcmon?
[Android Apps and Games] ruleh:
Sometimes it helps to go a few steps back to see it all :)
[Android Apps and Games] sam619:
thanks bro. but will it work in all wifi chipsets?
[Android Apps and Games] ruleh:
Nope.

But for that we have this

though you need an otg cable and a wifi usb dongle.
[Android Apps and Games] zutyenka:
Hello Everyone! When I tried this app, I got this message (see below). I enabled Monitor Mode with the attached scripts, because bcmon didn't work. What should I do? Thanks.
[Android Apps and Games] ruleh:
you need to install bcmon first even when your chip doesn't support bcmon.

if installing doesn't work, you can extract the content of the apk and put it in the correct path.

However, if bcmon doesn't work, chances are that RfA will not work. (since it requires monitor mode)

Instead I would advice you to look at the bigfatwifi module to enable wifi through otg which has full monitor mode.
[Android Apps and Games] lionsmatara:
How i install bigfatwifi module on my Samsung Galaxy Note 4.

I'm totally big noob.

Steps by step guidance please.

Thanks.
[Android Apps and Games] ruleh:
Did you look at this ?
[Android Apps and Games] ruleh:
I wanna try this too

Hello I am ruleh and bcmon not work, plz help, how to install it on my s3mini??? and btw what is recovery?

So anyways I did a quick lsmod on my s3 and found dhd.ko.

Wierd...

I assumed it supports bcmon (because of the bcmon kernel module being called dhd.ko and my s2 using dhd.ko)

Ahhh stupid me....looks like there are other devices other than bcm4330 using bcmdhd (bcm4334?)

So it looks like doing an lsmod to determine bcmon compatability doesn't really work.

On another note, does the s3 mini lack recovery??

I haven't been able to get into it for some reason ( after 3 tries at least).

Or maybe I am just not doing it right.
[Android Apps and Games] fandroid222:
work fine with android 5?
[Android Apps and Games] SOEDI:
Haha, nice one :D

Yes, the S3 Mini is... well... Samsung screwed it up a little bit. There is no button combo to boot into recovery, but there are some workarounds and a fix: http://xdaforums.com/showthread.php?t=2066407
[Android Apps and Games] ruleh:
Try it out and see.

However I don't think it will work as well as it should (or at all) because of the possible pie restriction and other lp bugs (or "changes").
[Android Apps and Games] Zantag:
Guys it seems work... Rever crack the WPS Pin ... But show every time different WPA PSK key something like 64digit HEX code like a hash... which doesnt work to connect the network ofcource :D Any solution? Nexus 7 2012
[Android Apps and Games] SOEDI:
Can you post a screenshot? And what for a router are you trying to attack?
[Android Apps and Games] ruleh:
Isn't that the key you get once you match an ssid with the wpa key?

12966d018c6715bfad0a2bc27aa54a61af8c3cca99e7829080392cbbc28cd4ab

(hope I got that right)

Since I have no better idea right now, you could bruteforce it?

With enough cooling and regular battery pulling, your phone shouldn't explode (hopefully) :)

Another idea, use the wps pin to connect to the router.
[Android Apps and Games] ricky2299:
i get same error help me

---------- Post added at 07:38 AM ---------- Previous post was at 07:16 AM ----------
[Android Apps and Games] Thunderbottom:
Tested and works successfully on Moto G (2013)

Keep up the good work!

Regards.
[Android Apps and Games] ricky2299:
plz can bcmon work on my gtp 3100 ,im total noob in this

#i have installed rfa , bcmon, aircack gui

when i try to enable monitor mod in bcmon it does nothing just get selected and does nothing ,

when i use reaver it says monitor mode activated and then it shoes as the screen shot

i have cynogenmod 10.1.3 installed and im using gt p3100

which has bcm4329/4330chipset

i dont know about custom modules or how to install firmware plz guyzzz anyone help me in this :(

i tried both with and without bcmon custom activation script
[Android Apps and Games] ricky2299:
how to install custom firmware and modules . im weak in using terminal emulator so plz help me guys

i feel ashamed of being such a noob

---------- Post added at 09:40 AM ---------- Previous post was at 08:54 AM ----------

i could install. which is ur rom try cynogen 10 it will work

---------- Post added at 09:48 AM ---------- Previous post was at 09:40 AM ----------

how did u did that .plz help
[Android Apps and Games] ruleh:
Okay if your phone is bcmon compatible we can do this.

First make sure that terminal emulator is installed and fully working. (update if needed)

Then make sure that busybox is installed by simply running

busybox

In terminal.

Uninstall bcmon and then reinstall it.

If it asks for root permission, give it.

Install all the firmware and files (it will do it for you)

Enable bcmon.

If it still doesn't work run

dmesg > /sdcard/kernel.log

and upload the file.

Also you could try the scripts of a few posts ago, set them in rfa and try again.
[Android Apps and Games] ricky2299:
i have busybox 1.23.2 stericson
[Android Apps and Games] ricky2299:
it keeps staying like this
[Android Apps and Games] ricky2299:
hey how to upload kernel.log in this

i have created it but cant upload ,i mean i dont know how to upload im total noob
[Android Apps and Games] ruleh:
Sorry it was my fault.

I think you need ten posts or so to upload anything (or post links)

Anyways I need you to do this again but this time also run "logcat -d > /sdcard/logcat.log" in terminal

Also look in your private message folder