Database Develop

[DEV] Get Monitor Mode/Injection/Aircrack working on Galaxy S Devices(bcm4329)

Surprisingly we dont yet have monitor mode, airsniffing, or aircracking capabilities within android. The drivers are open source and require some modifications for these features to be taken advantage of. How hard would it be for the dev's here to rewrite the wireless drivers to enable monitor mode? Also wouldnt it be neat to have a android/debian mix'ed rom where we can apt-get things right to the phone instead of a chrooted environment? It would be cool to see some more hacking at this and other things. Let's unleash the wireless functionality of these devices.
It would be cool to get aircrack working on our devices, people with iphones got monitor mode working, just not injection. From what I have seen injection is possible for us, so whats keeping us back from unleashing it?
Also Metasploit Mobile would be a killer addition to android if it only requires python
Ok It seems monitor mode is possible on the bcm4329 chipset which is in our devices and needs a rewrite
Kernel.org Source for nexus one's bcm4329 chipset
Aircrack-Ng Kernel thread on this
Old XDA Wep Cracker for Android Thread
Nexus One Wireless Monitor Mode Thread
Anyone want to post a link to the Vibrant wifi driver source code? It may need to be taken out of samsung's source

Bump. I would like to see this, albeit it would suffice with just the monitor mode for me (wireshark type app would be pretty awesome (
Sent from my SGH-T959 using XDA App

CharonIDRONES said:
Bump. I would like to see this, albeit it would suffice with just the monitor mode for me (wireshark type app would be pretty awesome (
Sent from my SGH-T959 using XDA App
Click to expand...
Click to collapse
yea it would be really nice to be able to sniff via monitor mode

Yep. if anyone knows much about this sort of thing. This would be a nice add-on

This will be one of the best feature of the phone =D

Noob here. Can someone break down what all this can do for us?
Thanks!

WilliamStern said:
Noob here. Can someone break down what all this can do for us?
Thanks!
Click to expand...
Click to collapse
For once it will allow the phone to act as a packet sniffer. Pretty useful if you are into monitoring network activities
I'd love to see a port for our phones.

Yes, this is exactly why I made a thread asking for help getting Debian running on our phones
BTW which someone already has done and has a how-to guide here http://blog.coralic.nl/2010/08/17/ubuntu-on-samsung-galaxy-s-android/
Don't want to lead anyone off with that link, just wanted to plug that in in case anyone else wanted to try it.
But truly this is where the true FUN is, you know. I would love to use a wireshark like type app or aircrack for that matter. I would die to have apt-get built in to the OS.

I have actually been considering working on a project like this for a few weeks. I'll see what's involved next week when I'm on vacation. Ultimately I was hoping to port something similar to kismet to the Galaxy S phone with nice GUI for wireless network penetration testing.
If anyone else has systems development experience and wants to work with me on this, PM me and we can get in touch.

To be honest with you guys.
It would be best to get in contact with HD MOORE of Metasploit or the authors of this software and request for a port.
The metasploit port woul be easy. as it only requires python.
I am personal friends of his.

rhcp0112345 said:
To be honest with you guys.
It would be best to get in contact with HD MOORE of Metasploit or the authors of this software and request for a port.
The metasploit port woul be easy. as it only requires python.
I am personal friends of his.
Click to expand...
Click to collapse
Metasploit, if it only requires Python, is probably trivial to port to Android. I'm personally interested in working on Aircrack, Monitor Mode, and Packet Injection. These are very different projects and perhaps should be two separate threads.

rhcp0112345 said:
To be honest with you guys.
It would be best to get in contact with HD MOORE of Metasploit or the authors of this software and request for a port.
The metasploit port woul be easy. as it only requires python.
I am personal friends of his.
Click to expand...
Click to collapse
get ahold of him and see what he can do, metasploit would rock
metasploit mobile, I like the sound of that

quote from HDmoore
via Twitter
HDMoore: @androidunleashd would be slick, we need a solid ruby, persistent daemon, less mem use

Correct. Get those things ported to android. and his frame work will work. Which includes WEP cracking.

I think this is one of my most favorite threads so far. I'm excited to see what comes of all this, I too would love to see metasploit ported to Android, how pwerful would our precious little vibrants be then?

I have been wondering when a project like this would happen. Thinking of all the possibilities makes me giddy.
Sent from my Vibrant

Quick question would this be likened to the kismac application on OSX?
Sent from my SGH-T959 using XDA App

gehlersjr said:
Quick question would this be likened to the kismac application on OSX?
Click to expand...
Click to collapse
Yes, exactly.

So, does anyone feel like hacking the wifi firmware ala madwifi and getting this ball rolling? I'm happy to donate to the cause if someone has the skills.
Sent from my Vibrant

same here. id gladly drop some cash if the devs need it to get the ball rolling.

PSFreedom or PSGroove For Vogue

Basically this allows you to run homebrew on PS3. It has been released for other Android devices and even a release is coming for a TI calculator. I was seeing if any of the great devs here could get this to work on the HTC vogue? Here is some more info http://kakaroto.homelinux.net/tag/psfreedom/

Also, this is how it works on Nexus One if it might help someone port it
http://dukio.com/tutorials/psgroove-htc-google-nexus.html

I too would love for someone to look into this. I'll help any way I can!

i would also love this
please someone atleast look into it
Moral support +1

Sadly with the last firmware update from sony (3.42 mandotory) it "fixed" the PS3 hacks

crackeyes said:
Sadly with the last firmware update from sony (3.42 mandotory) it "fixed" the PS3 hacks
Click to expand...
Click to collapse
Just don't update lol
Besides, now that the system is actually broken into, I'm sure new methods and work-arounds will be found.

vinny13 said:
Just don't update lol
Click to expand...
Click to collapse
this guy has the right idea, i mean modern warfare 2's single player is totally worth ignoring the multiplayer for.
and resident evil 5's AI is way better than playing with a friend
sarcasm generously implied.

So any thoughts if this can be done? I haven't seen any of the devs say anything, but of course they might not have ps3 units.

aa

th3lolz said:
i don't have a PS3, but what happens if you do the usb mod and then update the firmware?
Click to expand...
Click to collapse
the new firmware fixes the exploit used to make the mod work, so the answer is when you update the firmware it will undo the mod

I'm surprised no1 has ported this to the vogue yet, the HD2 got it already, maybe that file works with the Vogue??
I have a sprint vogue lying around but the screen is broken so I can't see anything

sp1kez said:
I'm surprised no1 has ported this to the vogue yet, the HD2 got it already, maybe that file works with the Vogue??
I have a sprint vogue lying around but the screen is broken so I can't see anything
Click to expand...
Click to collapse
if its anything like the playstation emulator as far as for performance, we just dont have the specs to run it even with the GPU, and CPU overclocked. That playstation emulator still was unplayable i expect the same result

thoughtlesskyle said:
if its anything like the playstation emulator as far as for performance, we just dont have the specs to run it even with the GPU, and CPU overclocked. That playstation emulator still was unplayable i expect the same result
Click to expand...
Click to collapse
This is not an emulator, it's just an edited android boot that sets the device as a usb hub
Can someone put the files from the hd2 on their vogue and follow the directions listed
http://forum.xda-developers.com/showthread.php?t=777120#

sp1kez said:
This is not an emulator, it's just an edited android boot that sets the device as a usb hub
Can someone put the files from the hd2 on their vogue and follow the directions listed
Click to expand...
Click to collapse
Just tried it and it didn't work... not surprising considering its for a totally different piece of hardware

Now that HD2 code is out, couldn't someone port it to Vogue? seems like it wouldn't be that hard

PSFreedom has also been ported to the Droid Compiled against 2.6.32 kernel
i dont know how easy it would be but im assuming with more and more droid devices being ported to someone will make a vogue port hopefully

you do not need 3.42 to continue playing online. There are several proxy servers you can run on your windows machine that will let your ps3 continue to work online reporting to psn that you have 3.42 even tho your only on 3.41.
This only works because the only thing 3.42 did was fix psfreedom so there is no real reason to have it.

I was reading up on this a little bit. From what I see for other phones, it seems like you need to flash your rom to PSGROOVE everytime you want to use it to play a game? Is that right?
If so, can the phone still work as a phone in the meantime?

i think as long as the kernel makes the usb device look like a hub then the rest is scripts i could be wrong though
if thats the case it would only need 1 flash, but i believe i read somewhere you loose usb mass storage capability something like that
some phones i think do have a rom dedicated for just PSFREEDOM
eitherway i would still use it and run a seperate copy of android from the SD when i wanted to play the ps3

the ones i've been looking at they arn't flashing, they are temporarily booting from a new image (using adb) that has insmod enabled and working so they can load the usb module and change the usb port on the phone to register as a hub instead. I havn't tried it myself yet but I do know we have insmod already enabled... or at least the command is there so we might not need that step.
Sony seems to be right ontop of everything tho, closing down things as they are discovered.

YAY! I got my Streak 7 Today, Rooted just now.

Ok YAY I decided to get the Streak 7 vs the Sam Tab. Why? Dual core ftw. That is root and future ready right there. =)
So I will be joining this section too now to see whats up and learn and pass that info on to others too.
Btw for those using the 1 click root. I had to disable my AV (Kaspersky), Used 1.5.5 (not 1.7.0) and SOMETIMES You need to unplug and turn off the streak 7 and back on to try again till it works the root. In the end it will root.
Now to figure out which rom to use..

Good to hear that buddy. actually there is no ROM s, only tweaks. I'm trying the figure about compiling a ROM (porting of course). But, hey, how the DS7 is working for you?

Its working well. No regrets and N64 emulator works well on it. =D Also waiting on new custom roms, or more importatly. Debian or some form of Linux. I mean A dual core tablet should be able to perform decently. Or is there something now for Linux?

Mysticales said:
Its working well. No regrets and N64 emulator works well on it. =D Also waiting on new custom roms, or more importatly. Debian or some form of Linux. I mean A dual core tablet should be able to perform decently. Or is there something now for Linux?
Click to expand...
Click to collapse
tried to root mine but my ancient computer wouldn't let me set up with adb

It will, if its XP. Just gotta install drivers, reboot, then connect.

[Q] Using a USB Wireless Adapter...

Ok guys, maybe this question has been asked and maybe it has not. I'm typing this on the fly via mobile of course and don't have the time to scour through related forum threads which may or may not be able to help me out.
That said, I have several adapters that I use for packet injection. I have one which has an SMA port for antennas and I bought a 16dBi high gain antenna to use with another project and I am also using with this adapter.
Anyway, I woukd like to be able to use this adapter with its extended range while I'm wardriving.
I have microUSB to Female USB cables for my phone. But connecting a device does little other than power it on.
I need a script that disables the on board WiFi and installs a driver for the secondary adapter and then enables it. Or perhaps there is an app out there that makes this easier.
Anyone have any suggestions or solutions to this dilemma I'm facing?
Thanks in Advance!
PAinguIN

C'mon guys, this is the TOP mobile device (particularly Android) forum in the world. I've been a member for years... I know someone on here has something I can try or a complete solution. I know that this has been successful on the Droid Milestone but that's a bit of an older phone.
Any help would be appreciated...
Thanks again..

PAinguINx said:
C'mon guys, this is the TOP mobile device (particularly Android) forum in the world. I've been a member for years... I know someone on here has something I can try or a complete solution. I know that this has been successful on the Droid Milestone but that's a bit of an older phone.
Any help would be appreciated...
Thanks again..
Click to expand...
Click to collapse
google "pwnpad" maybe you find something you can use, also the wifi adapter they use is cheap and support packet injection and external antennas.

milad407 said:
google "pwnpad" maybe you find something you can use, also the wifi adapter they use is cheap and support packet injection and external antennas.
Click to expand...
Click to collapse
Thanks milad407... Your input is appreciated. I am looking in to it right now... If I find a good solution I will be sure to post it here in the forums.
Again, thank you!

You're welcome, i'll be keeping my eye on the thread, if you find something..

milad407 said:
You're welcome, i'll be keeping my eye on the thread, if you find something..
Click to expand...
Click to collapse
Ok, I have not tried this yet but if it works in anyway similar to how it would on a laptop then I should succeed. Using either "Linux Deploy" or Complete Linux Installer" I can install various Linux distros on my phone virtually. Even custom images can be used. But by stock you can install Ubuntu, Debian, (not sure why they offer both), Backtrack, Kali (again, unsure why they offer both) and several other Linux distros.
If I install Backtrack, which I know supports the adapter I want to use when running from live cd or live usb from a laptop (or even Kali Linux) then it should also work on my device. It's all about the drivers and disabling the devices built in WiFi adapter....
I have to take my phone back to stock due to some issues which have recently occurred. I will S-Off first probably, then return to Stock, re-root and after I recover my contacts, programs, etc, etc, I will attempt to install a virtual image of either BT5 or Kali and see what happens.
Again, I will keep updated this thread. If it works then everyone with an M7 from Sprint will be able to utilize this method.
:fingers-crossed:

Have a look here as well: http://www.toolswatch.org/2013/05/installing-my-own-pwnpad-community-for-fun-and-for-less-than-300/
I think the problem with the Pwnpad source code is that, it's written for Nexus 7

milad407 said:
Have a look here as well: http://www.toolswatch.org/2013/05/installing-my-own-pwnpad-community-for-fun-and-for-less-than-300/
I think the problem with the Pwnpad source code is that, it's written for Nexus 7
Click to expand...
Click to collapse
Hmmm, interesting... I actually have a Nexus 7 - 32GB 1st gen, it's a nice, smooth tablet but doesn't hold a candle many other devices out there. If I had my choice of device to turn in to a "hacking" tab, uh, Phablet... I would choose the Galaxy Note 3.
Check out the arena....
http://www.phonearena.com/phones/compare/Google-Nexus-7-2013,Samsung-Galaxy-Note-3,Samsung-Galaxy-Mega-6.3/phones/8021,7984,7805
But, aside from that... You would think that you would only be limited to any devices hardware capabilities... Technically, we could probably take an old Toshiba or Acer Iconia tablet, install and/or run either BT5 or Kali virtually on top of whatever version of Android the device is running and have near the same capabilities that you would with a laptop.
If/when I figure out a way to use my Alpha AWUS036NH on any of the devices I own I'll be able to wardrive and pick up networks from nearly and 1/8th - 1/4 of a mile away. No exaggeration. Utilizing a 16dBi omni directional antenna instead of the measly 5 dBi that's included make an enormous difference.
But, rather or not it will work so easily running BT5 or Kali virtually over JellyBean or ICS compared to the ease of a live/virtual/physical installation of either OS on a laptop or PC will only be known once it has been tried. I wish I had more free time to do what I truly love to do with technology instead of the repetitive and thankless administration tasks I perform at work... The grass is always greener though... Lol!
One of these weekends I'll get something going, and I'll post it and hopeflly save peeps that $899. The only thing they will have to pay for will be the adapter(s) they choose to utilize and the tablet, phablet, or even phone that they want to use The rest will be open source and included with (hopefully) current and future releases of Kali Linux now that BT5 is suddenly and abruptly "dead". Did that catch anyone else by surprise or just me? Lol!

using as IOT board advice

I have a broken screen S6 that I've been using as an IOT device. I've been having fun with it, but really want to do a little more with it. I'm using But adb and my Chroot I can do quite a bit with it, including using sidesync. But, I'm just not able to access a lot of the hardware with the Chroot setup, and having problems with typical Chroot conflicts with running things. Busybox and ports for pkgs like brew are okay-ish, but then I still have all Android doing everything in the BG and IPtable issues. (idk why I have IPtable problems with only my Samsung devices, never hard the issue with my Nexus's)
Has anyone tried janos.io on the S6? Is there a native Linux I can flash that I'm unaware of.
Basically if someone could please point me in a direction that gives me a better experience for using it as better linux box. Something that allows me to make it more of a IOT board alternative. Thanks!!

Sell it and get proper iot boar with linux support that you need. You may buy few for that.
Or fix the screen, sell and then buy even more.
It's hard even to get MM update on S6, not to mention any other linux os. It is quite useless as IoT board and quire expensive.

Hi,
After some goof'n around I actually have a decent setup. I'll do a write up and provide files on here if people want, regardless I'll post them on my site when i get to it. Basically, paws, brew, full busybox, adb, ssh give me everything I need. Anything missing my chroot seems to take care of. i wanted LAMP, MEAN and dnsmasq. works great and paws gives me hardware access, gps,mic,cam, even accelerometer. I'm pretty happy with it and its a hell of a lot faster than a Pi. Flashing in the future will be strange, if not frustrating. does fastboot work on Samsung's?
thanks for the reply! under normal circumstances i'd just get a proper one, but it was just sitting there screaming to be used.

edounn said:
Hi,
After some goof'n around I actually have a decent setup. I'll do a write up and provide files on here if people want, regardless I'll post them on my site when i get to it. Basically, paws, brew, full busybox, adb, ssh give me everything I need. Anything missing my chroot seems to take care of. i wanted LAMP, MEAN and dnsmasq. works great and paws gives me hardware access, gps,mic,cam, even accelerometer. I'm pretty happy with it and its a hell of a lot faster than a Pi. Flashing in the future will be strange, if not frustrating. does fastboot work on Samsung's?
thanks for the reply! under normal circumstances i'd just get a proper one, but it was just sitting there screaming to be used.
Click to expand...
Click to collapse
Hi, I am very interested in this. Surprised there is so little intrest on XDA. "old" phones have some excellent hardware that can be very useful and cheap. I am playing around with an old S4 and IBM Watson\Bluemix at the moment and a little frustrated with the limitations.
Actually just ordered a Nexus with a broken screen to load JanOS or Firefox OS. Sadly I am a noob, and just getting started. Can you please post anything you have, code, links, resources.. anything at all?

tman6919 said:
Hi, I am very interested in this. Surprised there is so little intrest on XDA. "old" phones have some excellent hardware that can be very useful and cheap. I am playing around with an old S4 and IBM Watson\Bluemix at the moment and a little frustrated with the limitations.
Actually just ordered a Nexus with a broken screen to load JanOS or Firefox OS. Sadly I am a noob, and just getting started. Can you please post anything you have, code, links, resources.. anything at all?
Click to expand...
Click to collapse
Hey, sure! Here's the thing about the S6. I couldn't get anything like janOS on it. Eventually I got Android to stop booting and i could get into a chroot shell via adb. This is after I experimented with PAW and other apps.
The advice above; get a proper board, is damn solid advice. I spent so much time trying to just get an environment I liked. Raspberry Pi might not be as powerful, but after getting my zero I had it running headless and transmitting fm/am in less than 15-20min. I learned shortly after this frustrating experience that using something that has a large community behind it is extremely valuable. Doing it alone I was constantly over my head and had little places to turn for help. Plus, honestly; After really really thinking about it, a rooted android with chroot linux can handle almost everything I needed.
My nexus 5. JanOS was a fun experiment. I put it back together and just kept ubuntu on it. Again, a lot you can do there as well.
Seriously consider a dev board like the guy above said. More powerful boards and probably better suited for deep learning
-ODROID-C2 armv8 cortex A53 64bit
-UDOO x86
** TLDR;
Take demon_xxi's advice.
get proper iot boar with linux support that you need. i
Click to expand...
Click to collapse
Go to adafruit or something and get a starter kit. I learned more and found it to be way more fun. My S6 is sitting as a flaky web server and it's a serious pain to do things on. @demon_xxi was 100% right!