有没有可能为Android手机写一个wifi破解工具?监控模式与组播模式?
考虑写一个wifi破解(wep,wpa) 适用于 android 平台的审核工具,但我想知道是否可以在没有 root 的手机的情况下进行操作。 我原以为不可能在未root的手机上运行,因为手机的wifi芯片会忽略未发送至手机的数据包。也就是说,如果无法将 wifi 芯片设置为监控模式,许多攻击将无法发挥作用。
我很惊讶地发现 Android 支持 多播数据包 。也就是说,Android 手机可以设置为接收不是发给它们的数据包。
我的问题是:
拥有多播锁是否意味着我可以接收所有广播数据包,还是仅适用于具有多播标志的数据包(如果存在这样的事情)?
监听模式和多播有区别吗?
android api有切换频道的系统吗?
更一般地说,我很好奇:
有人熟悉在 android 上运行的其他 wifi 破解项目(谷歌搜索很少出现)吗?
我可能会遇到什么困难?
这个问题与SO问题有没有办法将Android WIFI(机器人手机)设置为允许监听模式?
Considering writing a wifi cracking (wep, wpa) auditing tool for the android platform, but I am wondering if it is possible to do without a rooted phone.
I had thought it would be impossible to run on an unrooted phone due to the phones wifi chip ignoring packets not addressed to the phone. That is, without the ability to set the wifi chip to monitor mode many of these attacks wont work.
I was surprised to learn that android supports multicast packets. That is, android phones can be set to receive packets not addressed to them.
My questions are:
Does having a multicast lock mean I can receive all packets broadcast, or does it only apply to packets with a multicast flag (if such a thing exists)?
Is there a difference between monitor mode and multicast?
Does the android api have a system for switching channels?
More generally I'm curious:
Is anyone familar with other wifi cracking projects running on android (google searches turned up very little)?
What difficulties am I likely to run into?
This question is related to SO question Is there anyway to put Android WIFI (droid handset) into permiscuous monitoring mode?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
不,它会在连接到 AP 时选择通道。如果您可以使监控模式正常工作,则用于设置该模式的 API 将提供用于选择通道的内容。
是的。多播意味着数据包被发送到多播地址,在监控模式下,您可以拾取在通道上传输的所有内容。
是的,但这不是监控模式,“通常 Wifi 堆栈会过滤掉未明确寻址到该设备的数据包。获取多播锁将导致堆栈接收寻址到多播的数据包”
您的主要障碍是监控模式工作,(您需要使用 NDK...并且您的无线固件必须支持监视器模式。有人已经能够做到这一点),然后您可以记录流量(WEP IV、WPA 4 方式握手等)并在手机上分析它或将其发送到更强大的东西。对于非被动攻击,您可能需要能够在网络堆栈的较低层进行写入...这可以使用 Linux 系统调用(
packet(7)
、raw(7)
),不幸的是,我在 Android API 中没有看到任何内容。Nope, it will choose the channel when it connects to an AP. If you can get monitor mode working, the API to set that up will provide something to select the channel.
Yes. Multicast means the packet was addressed to a multicast address, in monitor mode, you can pick up everything that is transmitted on the channel.
Yes but this isn't monitor mode, "Normally the Wifi stack filters out packets not explicitly addressed to this device. Acquring a MulticastLock will cause the stack to receive packets addressed to multicast"
Your main obstacle is getting monitor mode working, (you'll need to use the NDK... and your wireless firmware has to support monitor mode. someone's been able to do it) then you can record traffic (WEP IVs, WPA 4 way handshake, etc) and analyze it on the phone or send it off to something more powerful. For non-passive attacks you may need the ability to write at lower layers of the network stack though... which is possible using Linux system calls (
packet(7)
,raw(7)
), I don't see anything in the Android API unfortunately.