yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] gustarballs1983:
Hello ruleh

I also made a picture of lsmod in my terminal (of wich i attached a picture) it has lots of info in it however I'm unable to tell if ith has what it takes to launch monitor mode without bcmon unfortuneatly my device has no bcm4329/4330 chipset. it's developer is also picky not only about releasing stock rom on his site neigther does he want to release kernel for his devices to public. only real benefit of this device is that it came stock rooted.

I've found iwconfig via google (not the one from bcmon) and put it in the device acordingly to a tutorial I've found it seemes to work however when trying to put my card to monitor mode by:

# ifconfig wlan0 down

# iwconfig wlan0 mode monitor

it gives me an error (8b06) that it canot set monitor mode because it is an invaild parameter. my internal card is rtl8192cu so i shouldn't complain this card always had problems with monitor mode not to mention it probably doen't have nessecary files to do so eigther...

so..

no bcmon support for me, no native support for monitor mode on my device, and no way of introducing bigfatwifi to my device.. so the only hope for me are still those user space otg drivers and then a dongle via otg cable.

So ruleh I really hope you're up for that task since it is the only way of making RfA practically available to all devices out there.

progress till now is substantial so i'm keeping my fingers crossed for this step too. I myself couldn't figure out a thing towards otg in user space though i'm not skilled in programing so no wonder in that

and SOEDI thank you for the great news I've been really looking foward for the pixiedust attack in RfA. It's a major step foward in making a use of wps vulnerability. The time is cut down from hours to literally seconds if done aginst proper device.

I do hope that one day I too shall be able to succesfully use reaver on my device. For the time beeing I wish you two and those that help you all the best on the road ahed, and hopefully in the nearby future I'll be able to test RfA too.

Best regards

Gus T.
[Android Apps and Games] ruleh:
TL;DR Won't do userspace. But other soloutions exist

I cannot do userspace drivers because of two reasons.

First I don't know how to.

There was a some kind of guide linked at pg 40-50 (somewhere there) in this thread but what I understood of it was that I need to reimplement all the logics of the wifi and usb drivers using java (maybe c and the ndk?) and the android usb APIs.

Second reason is that each userspace driver needs to be done seperately.

This again has 2 more implications.

--One the time it takes to make the drivers work for more than one device is extremely long.

--Two would be that without a testing device I can't test it .(make sense doesn't it?)

And userspace drivers rely on a reference device to be implemented correctly as I need to see what kind of data the device would usually send around.

Therefore I can't do that.

However!!!

Bigfatwifi might soon (maybe not that soon) be available to you WITHOUT recompiling the kernel.

I managed to find out how to resolve some more dependencies inside the module without relying too much on the kernel itself.

Of course a working cfg80211 is a main requirement as of right now, but we can work around that by doing a lot of trail and error and just adding the stuff that's missing.

Also I quickly read some stuff about the 8192cu

so here are some findings:

iwconfig wlan0 mode Monitor <--with a capital

iw wlan0 set monitor none

Update the firmware or use a different one.

Look for a different driver (rtl81892cu <<--I will actually include that one in the bigfatwifi module.)

If it is really needed I could make an attempt at recompiling the driver (or a different one) if I could see the modinfo of your current driver and some more kernel information (uname -r)

About not releasing kernel sources, I remember a time where that was illegal (at least with gpl code) but who knows about know.

EDIT: I also see rtl8150. Is that one required by the main driver? Is it important?
[Android Apps and Games] h4yfans:
Are you sure you have bcmon installed and your device is compatible? Please help me guys. my phone s3. this app doesnt work on samsung? do you know mirror app?
[Android Apps and Games] gustarballs1983:
as of iwconfig wlan0 mode Monitor it does'n t work i tried it both ways before my previous post

modinfo 8192cu

modinfo: can't open '/lib/modules/3.0.8+/modules.dep' no such file or directory, the rtl8150 is the same story

the: 'uname -r' command displays only mere: '3.0.8+'

now i know that the 8192cu chipset supports monitor mode i have such a card as a usb dongle and it works under kali (besides people who took apart device like mine claimed it is indeed a striped usb dongle sodered to tablet's pcb.)

the rtl8150 driver might be a leftover from repairs (my tablet was serviced twice) so i assume that the service people swithced out rtl8150 dongle for 8192cu. Now I am pretty sure the 8192cu drivers did not support monitor mode only the rtl8192cu did. The ones without rtl in front of the name had problems with this at least 'ol google is full of it.

as of why i'm sure it's 8192cu not rtl8150 it's because i've installed linux deploy and a cut down version of kali on my device and wifi was detected automatically as 8192cu by arm version of kali. Monitor mode did not work but i could download and update stuff inside my chrooted kali over by my internal wifi dongle since device came stock rooted and i did the chainfire trick to unlock write acces to external sd it was just a matter of formatting external microsdcard to ntfs fliesystem and i could fit in all the goodies i wanted. however without monitor mode i lost interest in chrooted kali

I found drivers rtl8192cu from realtek for linux/android however when i unpack them there are no android drivers just linux ones besides i'm not sure I'd be able to install them properly

as for my kernel i'll dig more info in android's developer info section of the settings..

kernel version:

3.0.8+

shixb@pfd-desktop # 129

Tue Nov 13 17:46:13 CST 2012

compilation number

nuclear_pfdq88c-eng 4.0.4 IMM76D 20121204 test-keys

and that's about it i have no idea where I could get upgrades to this. My developer does not provide any download besides maybe the manual

I don't know if there is any additional information that i could provide, but if there is don't hesitate to ask. I'd really like to get my hands on RfA on this tablet.

If you have any suggestions ruleh please post them.
[Android Apps and Games] ruleh:
okay that's enough info. I will compile the driver for you today. Standard linux drivers work on andoird afterall.

Though run modinfo /system/lib/modules/8192cu.ko in android.
[Android Apps and Games] terawyvenx:
Ok, I realized that wasn't using root access in the terminal, so I forgot to type "su". So I'm longer getting a "permission denied" error, however if I use any "iwconfig" related code then it tells me "no such file or directory" my eg. below

root@android:/ # iwconfig

sh: iwconfig: No such file or directory

The iwconfig is in the "system/xbin" folder and when I type the chmod code for iwconfig, it shows no errors and goes to the next line.

But when I type "iwconfig wlan0 mode monitor" it give the error mentioned above. Why does it say that?

Appreciate the help

Thanks
[Android Apps and Games] ruleh:
Try a different chmod such as chmod 777 (or 555 or 755 or 711)

or run the following

export PATH=$PATH:/system/xbin
[Android Apps and Games] gustarballs1983:
the output is the same as before:

can't open '/lib/modules/3.0.8+/modules.dep' No such file or directory

...

btw thank you in advance for the driver

regards

Gus
[Android Apps and Games] ruleh:
You are using android, right?

But even then since when does modinfo need that file?

Anyways here is the driver.

Just finished.

It will probably not load just yet but the error messages should help a bit.
[Android Apps and Games] lionsmatara:
Can it flash via recovery mode?

Im on Samsung Galaxy Note 4.
[Android Apps and Games] ruleh:
No it can not.

Eitherway the zip is a driver for the 8192cu wifi chip which isn't used by any samsung device (i think).

If you want to know your driver do the following:

enable wifi

run lsmod

disable wifi

run lsmod

compare the 2 results.

The one module that is missing is your wifi driver.
[Android Apps and Games] gustarballs1983:
whether belive it or not it is android 4.0.4

and i have no idea why it says it's missing

Anyways could you also say where should i put all the files from the zip and how to add them so they will be visible to the system?
[Android Apps and Games] ruleh:
Well if you read the info file, it tells you were.

Just put the .ko files to /system/lib/modules.

Also I have never seen android (or gnu/linux) use an extra files for modinfo....

The info file alao tells you how to load the modules.
[Android Apps and Games] terawyvenx:
I've tried those chmod codes, still doesn't do the trick. However when I tried a different iwconfig file from the WiFi TXpower app, I got a response in the terminal after I typed iwconfig, but still won't work coz I think it's meant for that app. Is there maybe an alternative iwconfig file I could try, coz I'm not having any luck with iwconfig I got from bcmon site, it keeps giving that no such file or directory error.
[Android Apps and Games] ruleh:
Maybe this will work.
[Android Apps and Games] terawyvenx:
I tried that iwconfig file used for Wifi TXpower along with the "iwconfig wlan0 mode monitor" line, it gave me this:

root@android:/ # iwconfig wlan0 mode monitor

Error for wireless request "Set Mode" (8B06) :

SET failed on device wlan0 ; Operation not supported on transport endpoint.

I've no idea what else to do
[Android Apps and Games] ruleh:
That means that monitor mode doesn't work on your device.

That is the end for you I guess, except if you want to use an otg cable and external wifi.
[Android Apps and Games] gustarballs1983:
Are You sure it's sepose to be /system/lib/modules?

i have no such directory there.. lol... all my ".ko" files are at:

/system/vendor/modules

maybe that's the whole mystery of modinfo not showing things properly... just because files are placed/named differently.

so can i safely place them in the /system/vendor/modules and proceed with rest of procedures or the files need to be tampered with somehow for them to run correctly??

I found this out when i was trying to put the files by file explorer.

oh and sorry for such a long period of no contact yesterdey when i found out that you wrote back it was late and i was too tiered to do anything, and today it was my family's turn to take care of our grandma so there was no time for personal pleasures just taking care of the ghoul.

regards
[Android Apps and Games] ruleh:
Ahh yes...

In stock rom the modules are in /system/vendor/modules/

You can proceed with everything fine, as long as you always replace /system/lib/modules with /system/vendor/modules in everything you do. (such as cd, modinfo or insmod)
[Android Apps and Games] gustarballs1983:
yeah but the main problem is that when i try to remove the driver with rmmod it searches evrything in /system/lib/modules and it sits in /system/vendor/modules

so how should i force it to look in /system/vendor/modules? is there some specified command to do this or should i add the full path to the removed mod?

i'm trying:

"rmmod 8192cu" (yes without .ko as learned from google and without the quotes) and terminal throws: failed (errno 2) whatever that means maybe kernel was compiled without mod removal parameter? or it looks in

system/lib/modules ?

Regards
[Android Apps and Games] ruleh:
You could try "busybox rmmod -f 8192cu"

Or simply run "svc wifi disable"
[Android Apps and Games] gustarballs1983:
busybox rmmod -f 8192cu

rmmod: can't change directory to 'lib/modules' No such file or directory

as for "svc wifi disable" it does run however does it do much else besides turning off wifi (wich i had done in the first place? I mean i know I am dumb but i'm not that dumb to not to know the basics to run rmmod module must not be in use)

obviously the problem is that all the commands are searching for lib/modules instead of vendor/modules... how to fix/circumvent that does rmmod needs to be run with some parameter in order to tell it to search in vendor/modules?

insmod has the option to provide path to the module however rmmod hasn't. And all commands look for lib/modules not vendor/modules and so i am screwed by tis tablet by not being able to remove the old module in the first place :/ .

EDIT**

ok i ran: 'svc disable wifi' once agin this time it gave the output: Killed but i did turn on and then off wifi in the meantime

however rmmod 8192cu now gives:

rmmod: delete module '8192cu' failed (errno 1)

EDIT#2

basically i got error 1 because i forgot to turn to superuser rights when launching terminal last time i tried to issue the command above dumb/sleepy me

regards
[Android Apps and Games] Curious Boy:
Bc not detected on my lg l24
[Android Apps and Games] terawyvenx:
Ah dammit lol. I thought it might come to that. Guess I'm gonna have to go external I suppose.

So what do I need? I've got an OTG cable already. Can I use any wifi dongle or does it have to be a specific brand and chipset. And which wifi kernel driver do I need to use?
[Android Apps and Games] ruleh:
I hope that most wifi cards should be fine.

As for the driver, you could use this .

A guide, on how to use it, is in the same folder.

It does require kernel recompilation, so it won't be easy.

---------- Post added at 11:33 ---------- Previous post was at 11:27 ----------

Bc?

Do you mean bcmon?

Bcmon doesn't support your chipset.

---------- Post added at 11:37 ---------- Previous post was at 11:33 ----------

svc wifi disable should also unload the wifi driver.

However I still don't understand why rmmod looks in the modules folder.

Isn't it supposed to simply unload the module (maybe through /proc somewhere).

I think your busybox could either be outdated or all *mod commands are going through modprobe in which case it does look for those files/directories (which don't exist).

Alternatively if you have write access on / you could make a symlink of /lib/modules that points to /system/vendor/modules.
[Android Apps and Games] gustarballs1983:
As i said the tablet was serviced twice (seposedly they replaced the internal flash memory) but the reason for the break was mine to begin with.. You see I've tried to install busybox in system/xbin however what i did not know is that there already was a stock busybox installed on system/bin and yes it was outdated and cut down version of busybox so when i installed another versuion to system/xbin the drive screwed.

when i wound out about this i was pissed-off not to mention that when trying to reinstall busybox over the one that was stock implemented i had to first give it proper priviledges because it did not want to delete itself and i had to do it manually through file explorer. after deleteing stock busybox there were some leftover symlink files wich i did not have patience to hunt down so i installed stericson's busybox to system/bin instead of system/xbin in fear of screwing the harddrive agin but facts are busybox is up to date but is installed in system/bin not system/xbin though it is still installed to xbin and there is only a symlink to system/bin at least that's how the stericson's busybox instaler managed to do it. no problem with busybox ever since...

as for the symlink to lib/modules it worked.. however to remove the driver needed to enable wifi first and then run 'rmmod 8192cu' and it worked this time but i have to be in a hurry with other commands because few minutes after system automatically loads 8192cu.ko driver all by itself :/

i managed to run 'insmod mac80211.ko' during the time the 8192cu.ko was unloaded while beeing cd'd in the system/vendor/modules the output was:

insmod: init_module 'mac80211.ko failed (Exec format error)

now i know you said to put output of dmesg here however it's hilariously long over a dozen pages of screen on the tablet and i'm not sure if i picture the screen with my phone that i'll have enaugh attachment slots to put it all here so i figured i'll just skip to the part that I figured might be of key importance because i do not know of a way to put it all here besides picturing the tablet with my phone screen by screen...

the key fragment at the end of dmesg:

mac80211: version magic '3.0.8+ SWP preempt mod_unload ARMv7 p2v8 ' should be '3.0.8+ preempt mod_unload modversions ARMv7 '

also there may be more in the dmesg but i don't know how to pass so much screen info to you...
[Android Apps and Games] ruleh:
Nice I was looking exactly for that line.

Okay after I will have a newer version compiled later today.

edit: swp or smp? Just in case, I will disable both.

edit2: here it is, I also included a dependencies module that I forgot last time.

Good luck
[Android Apps and Games] gustarballs1983:
Guess luck was not on my side :/

insmod: init_module 'mac80211.ko' failed (Exec format error)

dmesg bottom line statements:

mac80211: module_layout: kernel tainted <<wtf does it have a virus??

Disabling lock debugging due to kernel taint

mac80211: version magic '3.0.8+ preempt mod_unload ARMv7 ' should be '3.0.8+ preempt mod_unload modversions ARMv7 '

i hope i didn't just screwed the kernel by inputing those files lol...

regards
[Android Apps and Games] ruleh:
Kernel tainted?

That's a new one. I must have messed up some licensing stuff I guess (even though I didn't even touch that)

Okay looks like I forgot the modversions.

Next one curently in progress.

Number 3: up. Maybe this time it works...(though that taint is suspicious)
[Android Apps and Games] gustarballs1983:
No taint kernel info this time pheeew!!!!!!!

but still no progress..

insmod: init_module 'mac80211.ko' failed (Exec format error)

dmesg output of importance:

mac80211: no symbol version for module layout

whatever that means sounds of little importance but squashing such bugs might proove a real splinter in the butt

regards

p.s. oh and btw i'm not sure i haven't made any typos sorry in advance.. it is a little too late to boot my desktop with noisy huge fans so i'm writing from my win8.1 based tablet- small screen so i barely see the letters.
[Android Apps and Games] ruleh:
Instead of insmod <filename>,

run modprobe -f <filename(without.ko)>

Most probably it will say something about missing file or similar but it might work.
[Android Apps and Games] gustarballs1983:
modprobe -f mac80211

modprobe: can't change directory to '/lib/modules': No such file or directory :/

so what now, any other solutions?
[Android Apps and Games] ruleh:
Didn't you symlink /lib/modules to /system/vendor/modules?

Well it doesn't matter right now.

If modprobe doesn't do it, we need to go back to insmod.

insmod -f mac80211.ko

However android insmod does not support the -f argument, so you might need to find an alternate one.

also try

toolbox insmod -f mac80211.ko

and

busybox insmod -f mac80211.ko
[Android Apps and Games] gustarballs1983:
symlink was done yesterday just as you asked. I have no ide why it threw this error maybe it looks for a hardlink.. beats me...

toolbox insmod -f mac80211.ko

gives:

insmod: can't open '-f'

so i guess it does not support the -f parameter via 'toolbox'

however:

busybox insmod -f mac80211.ko

throws the same error as insmod without busybox .. namely:

insmod:can't insert 'mac80211.ko' : invalid module format

interesting line in dmesg output for "busybox insmod -f mac80211.ko is:

"mac80211: no symbol version for module_layout"

so maybe it needs a symbol version in module_layout section of driver.. >>i'm no expert it's just a dumb guess

but i assume if this is not fixed it's not going to work :/

regards
[Android Apps and Games] ruleh:
The module is basically complaining that the kernel it was built on is not the kernel it is being loaded it (since I don't have those sources).

I could work around this problem by getting rid of modversion but then the module won't load either becuase of the magicversion mismatch.

So instead we need to find a way to force the module to load no matter if it complains or not.

For that we need an insmod binary that allows forcing (busybox and toolbox don't).

A very long and annoying soloution would be to set up a gnu/linux chroot and load the module from there with the -f option.

However that is a rather tiresome process and I am not sure if you are actually willing to do that.

Maybe copying the insmod binary over to android could work. (I will test this tomorrow)
[Android Apps and Games] skymario8:
Hello there,

. I am trying to install reaver for android for my U51GT tablet or also called Cube 7x Talk , well, maybe you never heard of it . It doesnt support bcmon and i tryed second post tutorial . I used root explorer to get bcmon files and copy them to /data/data/com.bcmon.bcmon/files and gave them 777permissions . Also added your start, warmup and stop script as your tutorial says . My wifi interface is wlan_mt . When i try start attack it says Monitor mode activate but there are errors after it . can you pleae tell me what is the issue? here i made a screenshot.

please give me some help .

a very best regard.
[Android Apps and Games] ruleh:
First I think you spelled "disable" wrong.

You might also want to change

#!/bin/bash

to

#!/system/bin/sh

Also make sure that the bcmon path is correct. So that there are no uppercase/lowercase differences and no spelling mistakes.

However all that won't help if you don't have bcmon support as the scripts only represent activate bcmon without opening the bcmon.apk

If you still want to use RfA look at this.

It allows you to use an external usb dongle to get monitor mode working etc.
[Android Apps and Games] ricky2299:
ruleh u remember me , plz find me solution
[Android Apps and Games] skymario8:
Hello,

Thank you for the reply.

So you mean that eventhough if i change bin/bash to system/bin/sh that wont help me to start attack and reveal passwords of wifi networks around me?
[Android Apps and Games] ruleh:
Yes because your internal wifi card does not support monitor mode as it does not support bcmon.

It might support monitor mode if the following works correctly

ifconfig wlan0 down
iwconfig wlan0 mode monitor
ifconfig wlan0 up

Run them one by one and if all of them execute without an error, your wifi card supports monitor mode and I will give you the scripts needed to use it in RfA.
[Android Apps and Games] skymario8:
Thank you again for the reply.

All running fine. Please,check the screenshot.
[Android Apps and Games] ruleh:
The second comand should be "iwconfig wlan0 mode monitor" not ifconfig

Anyways, I looked at your screenshots and found out your problem.

You missed a directory in the bcmon folder.

It is supposed to me like this

com.bcmon.bcmon/files/tools/

but you have like

com.bcmon.bcmon/tools/

you have to make a new directory in com.bcmon.bcmon called files and but everything in there instead of putting everything in com.bcmon.bcmon.
[Android Apps and Games] skymario8:
Oh my god, finally fixed .but how much does it take to retrieve the key? It is hanging here .

Snapshot.
[Android Apps and Games] skymario8:
Oh, second command failed... in terminal . What does this mean?
[Android Apps and Games] gustarballs1983:
by setting up gnu/linux chroot you mean installing linux deploy and a linux distro image and then chrooting into it? if not than i have even no idea how to perform what you're talking about without screwing up somenthing..

but if so than I'd need more detailed instructions on howto insert nessecary files inside linux image flie...

anyways anxiously waiting for the news