yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] ruleh:
Yes a simple install with linux deploy should do it.

Simply ssh or chroot into it and run insmod -f <path/to/mac80211.ko>

Right now copying the insmod binary doesn't work for me because it actually uses a symlink to kmod which for some reason gives me a file not found error. Still looking into it.

---------- Post added at 19:50 ---------- Previous post was at 19:45 ----------

It means that you need to install iwconfig....there is a link to a good guide a few posts ago.

As for the waiting for beacon problem:

It either means that you are too far away from your router or that monitor mode doesn't work on your device using this method.
[Android Apps and Games] skymario8:
Done that buddy but.. it says error now . D
[Android Apps and Games] ruleh:
run simply "iwconfig" to find the correct name
[Android Apps and Games] skymario8:
Great . One last questuion about beacon . Which is the lowest value in % of all wireless networks around so i can start attack? 20% , 40%?

---------- Post added at 11:00 PM ---------- Previous post was at 10:55 PM ----------

Wifi interface is cmni0 but i tryed a green tick wifi network with 52% signal and it stayed at waiting for beacon.... how much should i wait? 5mins?less ? More?
[Android Apps and Games] ruleh:
50% is pretty good spot to be in.

Therefore I can say that the waiting for beacon problem is caused by not having a working monitor interface.

For now run "iwconfig cmni0 mode monitor".
[Android Apps and Games] skymario8:
Just to be sure... which of these wlan interfaces to choose :

ccmni0 ... isnt good at all . Waiting for beacon issue...
[Android Apps and Games] skymario8:
Well ... ccmni0 is accepted from iwconfig ccmni0 mode monitor . Others not working ... but beacon waiting means not cracking any key..
[Android Apps and Games] skymario8:
Hm. I enabled debug mode in rfa and i click start attack shows the dialog box than shows the second snapshot.
[Android Apps and Games] SOEDI:
Your scripts have a windows line ending encoding. Use tofrodos to convert them into linux format.
[Android Apps and Games] ricky2299:
plz help me I'm stuck ' cud u say how to find if my phone can have monitor mode

---------- Post added at 01:38 AM ---------- Previous post was at 01:37 AM ----------

should I buy 1plus1?????
[Android Apps and Games] skymario8:
well, need to add some libraries of tofrodos. Can i do the convert from busybox telnet? Is there any command? Why it stucks in waiting for the beacon? I The wireless network is 52% range? Can you please tell me what i have mistaken?

Thank you.

---------- Post added at 01:27 PM ---------- Previous post was at 01:23 PM ----------

Hello,

Check this: http://xdaforums.com/showthread.php?t=1899272

after following steps in that thread open busybox terminal:

type su

than iwconfig

Done!
[Android Apps and Games] aod990:
Hey all!

I'm using LG Optimus L9 with bcm4329 chipset and I can't make this work :(

When I opet bcmon everytime it asks me to instal firmware and tools..

When I try to use bcmon terminal it crashes app.

Can you help me troubleshoot the problem?
[Android Apps and Games] osd_daedalus:
It is needed a logcat to understand why bcmon crashes.

You can use Catlog or aLogcat to catch it directly from device
[Android Apps and Games] ricky2299:
not working same error plz dude find any solutions
[Android Apps and Games] ruleh:
Do you have terminal emulator installed and are you root?
[Android Apps and Games] aod990:
Yes.

I managed to start bcmon terminal and run iwconfig but in RfA still the same errors...

EDIT:

Looks like it works now.. I missed the tofrodos step :) I'll share my results ;)
[Android Apps and Games] haseogu:
Can we use external wifi for this app? i have awus036h . Can I use it for this app
[Android Apps and Games] skymario8:
What error exactly? You didnt mean you had error in earlier post but you wanted to know how to .
[Android Apps and Games] ruleh:
YES you can.

Though right now it is a bit hard to get it installed but it is well worth it.

https://github.com/ruleh/bigfatwifi

The appropriate scripts are also included.
[Android Apps and Games] haseogu:
Well I already open the link but I don't have any idea what to do, and i don't understand the readme.md that you leave there
[Android Apps and Games] ruleh:
ooops wrong link...

The readme is probably the most confusing one you can find.

Here these 2 should be a bit more helpful

guide

info
[Android Apps and Games] haseogu:
So do we need to find our kernel source to compile the module ?
[Android Apps and Games] ruleh:
You can compile the module by itself (and should do so) but you ned to make changes to your current kernel so the module works on it.

The changes are really just changing 4 lines in the .config file.

Also you need your kernel's .config file to copy over to the bigfatwifi source so that the module has the same magic version as the kernel (otherwise it won't load).
[Android Apps and Games] ricky2299:
u still haven't helped me ' did u for got me :) :) :)
[Android Apps and Games] ruleh:
No not at all....

I was actually updating the scripts that will definately enable monitor mode if you have it.

Wait a bit longer....

In the meantime.

try this scripts

#!/system/bin/sh
for iface in wlan0 wlan_mt ccmni0 ccmni1 ccmni2
do
svc wifi disable
sleep 2
svc wifi enable
sleep 2
ifconfig $iface down
sleep 1
iwconfig $iface mode monitor
ifconfig $iface up
echo $(iwconfig) | grep $iface
done
svc wifi enable
exit

save this as script somewhere set 755 (or any execute) permission and run it.

Make a screenshot of the results.

(do tabs not work when posting code?)

---------- Post added at 16:27 ---------- Previous post was at 16:03 ----------

Some people (including me) have difficulties running RfA with the scripts I supplied. (waiting for beacon)

So I looked over them and tested them (on different devices) to make sure that they WILL work this time IF your chip supports monitor mode using the bcmon firmware.

activation

#!/system/bin/sh
svc wifi disable
sleep 2
rmmod dhd 2&>/dev/null
insmod /system/lib/modules/dhd.ko iface_name=wlan0 firmware_path=$(ls /data/data/com.bcmon.bcmon/files/*.bin) nvram_path=/system/etc/wifi/nvram_net.txt
export LD_LIBRARY_PATH=/data/data/com.bcmon.bcmon/files/libs:$LD_LIBRARY_PATH
export LD_PRELOAD=/data/data/com.bcmon.bcmon/files/libs/libfake_driver.so
cd /data/data/com.bcmon.bcmon/files/tools
./enable_bcmon 2&>/dev/null
echo "rfasuccess"
exit

warmup

cd /data/data/com.bcmon.bcmon/files/tools
export LD_LIBRARY_PATH=/data/data/com.bcmon.bcmon/files/libs:$LD_LIBRARY_PATH
export LD_PRELOAD=/data/data/com.bcmon.bcmon/files/libs/libfake_driver.so

stop

#!/system/bin/sh
rmmod dhd
svc wifi enable
echo "rfasuccess"
exit

seems like pushing everything to warmup script wasn't required afterall, it was just missing export LD_PRELOAD

If you are using the bcm4329 driver (or whatever it is called) make sure to replace every instance of dhd with that said driver.

Also make sure that you only have one file in /data/com.bcmon.bcmon/files/ that ends with .bin. (if possible only leave the one for your chipset)
[Android Apps and Games] haseogu:
Oppo hasn't publish the source kernel for lollipop kernel :(. Any idea without kernel ?
[Android Apps and Games] ruleh:
Well this is bad.

There is a possibility that you can compile the module and load it without having kernel sources however most of that is trail and error and a lot of luck. You would need to disable cfg80211 from the module through menuconfig and remove parts from load.c

Getting the magicversion right can be done by running modinfo on any current module that loads.

However I don't think much changed in kernel sources between kitkat and lollipop.

If you have kitkat kernel source and manage to extract the ramdisk (hardest part) from your current kernel, you can use kitkat kernel sources and inject the ramdisk into that.

Other than that, I am still working on the module to make it independent of the kernel so you could try this again some point later (much later).

But for now I see no other way.
[Android Apps and Games] osd_daedalus:
To everyone gets in RfA or in another bcmon tool errors about libssl.so.1.0.0 and libcrypto.so.1.0.0, try to make a symbolic link to them:

- go in /system/lib/

- check what's inside. If you have libssl.so and libcrypto.so, make a link to them.

To create a link: if /system is mounted read-write, enter in /system/lib/ and type in terminal ln -s libssl.so libssl.so.1.0.0 and same with libcrypto.

Otherwise, use Root Explorer with long press on libssl.so --> create shortcut --> rename the shortcut as libssl.so.1.0.0. Same for libcrypto.

This, to say I am sure on CM12.1, if SELinux kernel is set to permissive, bcmon can work. Just I still cannot manage to put that thing outside managed mode....

Uff... :(

I reached again also to recompile a kernel, hoping it works without downloading the entire ROM source, otherwise I have to wait at least another month to reach a connection without limits. This weekend I'm going to try to flash and if it works I'm going to check also bigfatwifi.

Still anyway I'd like to see why my device, working perfectly with CM 10.1.3, won't work with CM12.1 even with SELinux as permissive, no complains about PIE...

In these days I'll have a better look on previous posts.

Besides, let me know if the symlink trick will help.
[Android Apps and Games] SOEDI:
Hey folks, just a little update from my side:

My modified reaver with pixiewps worked great on my notebook, however it is a segfaulting piece of crap on android. It works, sometimes, very very sometimes. Took me 2 days to debug, but no success at all.

I decided to abandon the project, ReaverFor Android won’t be developed anymore.

Don’t be sad, you may like my new project: BullyForAndroid :D

It’s an alternative for reaver. Faster and more stable.

The binary cross-compiled and worked within 10 minutes. Seems stable and very fast, but i didn’t tested much. I’m going to integrate pixiewps and rewrite RfA. Won’t take too long, I guess.

Stay tuned!
[Android Apps and Games] lionsmatara:
Wow.. sounds great..

Only one problem i had.. is it supports for Samsung Galaxy Note 4 (N910c)??

BTW.. Wish you good luck with Success.

Thanks.
[Android Apps and Games] osd_daedalus:
Bully is just the tool like reaver, besside-ng, airodump-ng... I believe requisites will be same as RfA.

At least with BfA you should be able to bruteforce the 8th pin digit as various routers don't have it as a checksum of previous digits.

Besides, Bully is younger than Reaver, and on pc I prefer it.
[Android Apps and Games] ruleh:
Bigfat wifi, its future

So I tried and went ahead with trying to implement every single kernel feature that changed over the kernel versions (up to 3.15) inside the module.

I failed.

I got overwhelmed with the init functions because they seem to register the same things over and over again (no idea why?).

Also it seemed rather hard tring to redo the whole interrupt and scheduler inside a single module (considering they are inbuilt).

For that, user mode linux would be a more appropriate choice.

So instead I will only include the functions that changed and keep everything else out of the module.

When looking back, this seems much smarter than the original idea.

Also I am thinking of a few features that might help people out (or not).

--integrating changed functions -->the thing I talked about above

--compatibility settings -->allow limited use without recompiling kernel

--wider selection of dirvers -->more choice for some with rare devices

--bcmon integration --> for those who want to use monitor mode in chroot

--full automatisation -->compiles itself with correct settings directly on the phone -->maybe 1gb app?

This list is ordeed roughly on the importance of each task.

Since I've got more time now, you can expect to see some of those feature very soon (even when not fully working).
[Android Apps and Games] skymario8:
What can i do for this: ruleh

may i use the scripts you posted some replies ago?
[Android Apps and Games] AKATOSHE:
pocket neo gt-s5310i (rooted)

u0_a219@corsicave3g:/ $ iwconfig

/system/bin/sh: iwconfiig: not found

127|u0_a219@corsicave3g:/ $ iwconfig

wlan0 no wireless extensions.

p2p0 no wireless extensions.

sit0 no wireless extensions.

rmnet0 no wireless extensions.

lo no wireless extensions.

rmnet1 no wireless extensions.

rmnet2 no wireless extensions.

ip6tnl0 no wireless extensions.

u0_a219@corsicave3g:/ $
[Android Apps and Games] ruleh:
Yes, they should work this time.

Looks like your wifi chip doesn't support the old wireless extensions

Try it with the newer iw instead iwconfig.
[Android Apps and Games] ricky2299:
help
[Android Apps and Games] ruleh:
check that iwconfig is iwconfig annd ifconfig is ifconfig.

Then again, what scripts are you using?
[Android Apps and Games] ricky2299:
yup its
[Android Apps and Games] skymario8:
ruleh, one last question before i try your scripts, can you please give me the command to convert sh files from dos2unix compatible with android?

Thank you.
[Android Apps and Games] skymario8:
well, i tryed the scripts smth changed in terminal mode but nothing else . it seems quite impossible to pass through waiting for beacon . screenshot attached **
[Android Apps and Games] ruleh:
dos2unix -o <name_of_script> -c ASCII

I have never used this before but the man pages say that this might work.

Yes, I mixed them up by mistake.

I think I corrected it now.

However I still don't see where the bcmon_wrapper stuff comes from.

Did you run any scripts before it?

The best would be to reboot your phone and then run the script (as root) without doing much else.

This isn't an activation script but instead it tests which of your interfaces supports monitor mode so we can work with that.
[Android Apps and Games] skymario8:
done that and worked.

well, i tryed the scripts smth changed in terminal mode but nothing else . it seems quite impossible to pass through waiting for beacon . screenshot attached **

now it says just switching to channel and waiting for beacon dont appear..
[Android Apps and Games] an0x:
is it work in galaxy grand and android 5.1.1 ?
[Android Apps and Games] ricky2299:
guyz now u don't need monitor mode enabled device. I just found the best solution, buy WiFi adapter or alpha r8l8t it cost about 1000rs connect with a otg , and use pcap it works gr8 , but the problem is I can't have it coz my brother took it from me ,so ruleh keeep finding me solution plz :)
[Android Apps and Games] skymario8:
What is pcap buddy? wifi adapter costs 3$.
[Android Apps and Games] magooo:
monitor mode on note 2

i'm running dn4 rom on my note 2. is there any way to get monitor mode? i also have an external wifi card
[Android Apps and Games] ricky2299:
download pcap from play store u shud have a otg cable too
[Android Apps and Games] kokolabs:
thanks

thanks for sharing very good program and useful

---------- Post added at 05:20 PM ---------- Previous post was at 04:39 PM ----------

thanks for the app :good:
[Android Apps and Games] ricky2299:
mention not :) :) :) :D:)
[Android Apps and Games] haseogu:
And how we get the password?
[Android Apps and Games] sam619:
reaver not saving custom scripts, when i fill activation,warm up,stop script and save and go back,all settings will be gone. how to save these scripts?

i have xperia x8 it has bcm4329 chipset. how to enable monitor mode? bcmon shows firmware model: not detected. i am running android2.3.7
[Android Apps and Games] ricky2299:
after enabling monitor mode on pcap run RFA it worked for me
[Android Apps and Games] sam619:
will it work on lollipop?
[Android Apps and Games] ricky2299:
I don't know do one thing Google it
[Android Apps and Games] haseogu:
Can you tell me the detail about it ? I already start logging in pcap. How to configure the rfa to work with external wireless because I don't use the device that compatible with bcmon
[Android Apps and Games] ihsan101:
Which Wi-Fi adapter should you use? Do only certain ones work or do they all work?
[Android Apps and Games] osd_daedalus:
Returning to bcmon-compatible devices and internal wifi (sorry, I forgot!):

When monitor mode is enabled, what iwconfig should say?

I have some difficulties in pinpointing my issue, whether if there is a problem with monitor mode or the tools, and I forgot if wlan0 should be "monitor" or if it is ok it is "managed" and some library lets the device think it is monitor.

Thanks... sorry to be so obscure :)
[Android Apps and Games] ruleh:
It should be managed but LD_PRELOADing the libefakedriver.so (or something like that) makes everything think that the device is in monitor mode.

Just a random guess, but did you try to export LD_PRELOAD? It solved some of my problems.
[Android Apps and Games] osd_daedalus:
By scripts I'd say yes, but maybe something goes wrong in there.

Later I'm going to have a look more at that aspect.
[Android Apps and Games] ruleh:
it just had to happen

Okay soooo........

I recompiled the bigfatwifi kernel with the missing symbols defined inisde the module itself.

It should work on kernels 3.0. to 3.15 if not more.

It was actually easier than I expected.

However I have not tested it (because we all know that it will fail at least a few hundred times).

When I tried to compile my kernel, I ran out of space on my hard drive.

(It didn't give me an error at first, so I tried looking over the kernel sources over and over for why it simply stopped)

After some cleaning up I will post a proper progress of the module and some other related stuff.

Oh, and the bcmon module loads perfectly on the bigfatwifi module which is quite nice if you want to use the internal wifi in monitor mode from chroot.

edit doesn't work yet
[Android Apps and Games] xXxDontknowmexXx:
Do you maybe know is there a way to run airbase-ng on bcmon, trying to do a evil twin attack :/

---------- Post added at 09:57 PM ---------- Previous post was at 09:50 PM ----------

Can I use external wifi on my galaxy s2? (driver - ath9k)
[Android Apps and Games] ruleh:
you can download airbase-ng from here

you can also use the ath9k driver as it is part of the bigfatwifi module.

here

You can't use it on dorimanx kernel yet but others work fine.
[Android Apps and Games] ricky2299:
which dongler should I buy
[Android Apps and Games] xXxDontknowmexXx:
Can I do it on 3.0.64-CM kernel and could you describe me a little bit how can I make it work or is there a nice guide or tutorial maybe?

Thanks anyway! :)
[Android Apps and Games] osd_daedalus:
I tried to export manually LD_PRELOAD, but all I obtained more is a series of "bmon_wrapper loaded" when I launch airodump, besside etc...

No other idea right now where the issue could be
[Android Apps and Games] ruleh:
Maybe this can help.

Really, I should update the readme file.

What happens when ypu launch ping_bcmon (or similar)?

Also at what point do you export it?

And does enable_bcmon produce any output?
[Android Apps and Games] fasihgul:
can you help me bro

I am using Lg optimus g pro ans BCmon is not working in it So i tried custom scripts, I have created ".sh" files so bro in which directory these three scripts be kept ? can you simplify please Or Any VIdeo?
[Android Apps and Games] ricky2299:
ruleh did u forgot meh
[Android Apps and Games] ruleh:
Of course not but....

...didn't that solve your problem?

If RfA works then what do you need help with?
[Android Apps and Games] ricky2299:
no it didn't it says module error something like that
[Android Apps and Games] ruleh:
Where does it say that?

RfA?

Pcap?

Can you upload a screenshot?
[Android Apps and Games] osd_daedalus:
I'll show you all of my passages:

- I run this script as root:

(Funny that ./script1.sh returns permission denied, and sh script1.sh instead runs.)

#!/system/bin/sh
svc wifi disable
sleep 2
rmmod dhd 2&>/dev/null
insmod /system/lib/modules/dhd.ko iface_name=wlan0 firmware_path=$(ls /data/data/com.bcmon.bcmon/files/*.bin) nvram_path=/system/etc/wifi/nvram_net.txt
export LD_LIBRARY_PATH=/data/data/com.bcmon.bcmon/files/libs:$LD_LIBRARY_PATH
export LD_PRELOAD=/data/data/com.bcmon.bcmon/files/libs/libfake_driver.so
cd /data/data/com.bcmon.bcmon/files/tools
./enable_bcmon 2&>/dev/null
echo "rfasuccess"

However, I feel something is not good because the exports are not applied:

root@GT-N7000:/storage/sdcard0 # echo $LD_PRELOAD
libsigchain.so
root@GT-N7000:/storage/sdcard0 # echo $LD_LIBRARY_PATH

So I'm going to redo the whole thing without running the script.

I have to strip out the /dev/null things not to have a "permission denied" even if I became root with su.

Apart that, all goes well.

Echoes do return:

root@GT-N7000:/storage/sdcard0 # echo $LD_LIBRARY_PATH
/data/data/com.bcmon.bcmon/files/libs:
root@GT-N7000:/storage/sdcard0 # echo $LD_PRELOAD
/data/data/com.bcmon.bcmon/files/libs/libfake_driver.so

Then the whole thing concludes itself this way:

root@GT-N7000:/data/data/com.bcmon.bcmon/files/tools # ./enable_bcmon
bmon_wrapper_loaded
bmon_wrapper_loaded
bmon_wrapper_loaded

and whatever tool I launch, this is the effect:

1|root@GT-N7000:/data/data/com.bcmon.bcmon/files/tools # ./airodump-ng wlan0
bmon_wrapper_loaded
bmon_wrapper_loaded
bmon_wrapper_loaded
bmon_wrapper_loaded
bmon_wrapper_loaded
bmon_wrapper_loaded
bmon_wrapper_loaded

ping_bcmon returns this: I start to play with it as I don't know how to use it...

1|root@GT-N7000:/data/data/com.bcmon.bcmon/files/tools # ./ping_bcmon
bmon_wrapper_loaded
wrong number of arguments
255|root@GT-N7000:/data/data/com.bcmon.bcmon/files/tools # ./ping_bcmon 1
bmon_wrapper_loaded
1|root@GT-N7000:/data/data/com.bcmon.bcmon/files/tools # ./ping_bcmon 1000
bmon_wrapper_loaded

Any idea?
[Android Apps and Games] ruleh:
Did you try to source the script?

run it with

. script1.sh

(not ./script1.sh) and see what happens...

Also it seems like your "echo $LD_LIBRARY_PATH" is missing the rest of the library path (for standard library functions --or maybe you just didn't paste it all)

As for ping_bcmon, I think you need to pass it your wifi interface like this

ping_bcmon wlan0

For now it seems like libfake_driver.so replaces every single error (and other) message with "bcmon_wrapper loaded"

Not sure why though

However check the firmwares in your bcmon folder to make sure that only one .bin is there.

Also what rom are you on? (why would it restrict access to /dev/null ?)
[Android Apps and Games] osd_daedalus:
Hi,

Sorry for the delay,

Trying to source the script ends with "not found" error.

I'll try to verify the rest, although I'm out for work and I'm going to try in next week.

As for the rom, I am using CM12.1 NightOwl for N7000. (There are no PIE alerts and SELinux is set to permissive)
[Android Apps and Games] ruleh:
Did you set the correct permissions for the script?
[Android Apps and Games] osd_daedalus:
Script permissions are set as rwxrwx---
[Android Apps and Games] syedtufailahmed:
error: can't execute enable_bcmon permission denied

[MENTION=4096618]SOEDI[/MENTION] I am using a rooted moto g xt1033 running cm12.1. I disabled bcmon and defined paths for start, warm, stop. When I start attack I get RFA success but also get the above error. Pls help!
[Android Apps and Games] terawyvenx:
I managed to get my hands on a Tenda W211MI WiFi adapter. Now I have no idea what do next, whether I need to install a CM rom or flash a Kernel. I don't know how a compile kernel.

How can i test to see whether this WiFI Adapter will work?

i read about its chipset info showing: Ralink RT5370 and linux driver rt2800usb

I dont know if that means anything but I sure could use the help.

Thanx
[Android Apps and Games] ruleh:
You can use the bigfatwifi module which includes the rt2800usb driver.

However you need to recompile your kernel for it work properly.

Bigfatwifi

Guide