ESP32-WiFi-Hash-Monster icon indicating copy to clipboard operation
ESP32-WiFi-Hash-Monster copied to clipboard

Gps support and on demand deauth

Open bking46 opened this issue 4 years ago • 14 comments

Hi All,

I am quite new to the m5stack platform and wanted to ask for your support on this please. I am enjoying this device a lot and wanted to check whether there is a possibility to add gps support or on demand deauth? For the on demand deauth I was thinking of for example on using the long press on the middle button to deauth a network if that would be possible? Many thanks for sharing this project, I am enjoying it quite a lot.

Apologies for posting this in the issue section. This is not an issue, it is more of a functionality request.

bking46 avatar May 07 '20 18:05 bking46

ESP32 can't do deauth (only sniffing) so basically you'd need a dedicated ESP8266 to do the deauth job for you, quite easy to setup with a regular M5Stack proto board but possibly problematic (e.g. brownout) when both WiFi interfaces are enabled

image

tobozo avatar May 07 '20 19:05 tobozo

Thanks so much for the prompt response. Is the picture you are showing a deauther on an m5stack pronto? Is the deauth done from software or from one of those two buttons? Looks very compact and would definitely be interested to try if it works. Also how do I revert back the m5stack fire to have uiflow? Just got the m5stack fire today and the first project to upload was the hash monster😁

bking46 avatar May 07 '20 20:05 bking46

The recent version of the deauther has a serial command interface, so it's technically possible to use a button on the M5Stack to start a scan + deauth on the ESP12, but using this shield with @G4lile0's WiFiHash Monster gave me a lot of packet loss and brownout errors, maybe the 3d antenna on the M5 is very ticklish, or maybe using the serial while capturing packets is a bad idea ?

M5Stack-ESP12-Shield

tobozo avatar May 07 '20 22:05 tobozo

Thanks so much for sharing this with me. Would you happen to know if I can use the Lovyan Launcher to run Hash Monster?

bking46 avatar May 08 '20 21:05 bking46

if it's compiled with m5stack-sd-updater, it works with the lovyan launcher

tobozo avatar May 08 '20 21:05 tobozo

ESP32 can't do deauth (only sniffing) so basically you'd need a dedicated ESP8266 to do the deauth job for you, quite easy to setup with a regular M5Stack proto board but possibly problematic (e.g. brownout) when both WiFi interfaces are enabled

image

i'm confused?! https://github.com/GANESH-ICMC/esp32-deauther

zenonasz avatar May 15 '20 20:05 zenonasz

oh it finally happened, thanks for pointing this out !

[edit] doesn't look like it can be used out of the box with the WiFi-Hash-Monster

tobozo avatar May 15 '20 20:05 tobozo

if it's compiled with m5stack-sd-updater, it works with the lovyan launcher

Thanks so much, have tested and it works perfectly with the launcher.

bking46 avatar May 16 '20 05:05 bking46

oh it finally happened, thanks for pointing this out !

[edit] doesn't look like it can be used out of the box with the WiFi-Hash-Monster

esp-idf sdk though, not sure if it can be ported but still there a way of doing it

zenonasz avatar May 16 '20 08:05 zenonasz

A short term solution for deauth is to use a pwnagotchi in combination with the hash monster, seems to be working "okay" for now.

bonedaddy avatar Dec 02 '20 08:12 bonedaddy

there's an ongoing discussion about some hybrid ESP32/ESP8266 build on ESPMarauder's gitter

pwnagotchi is neat, but it constantly tries to call home and enroll, even with grid disabled

I stopped playing with that after it blew one of my micro sd cards by filling up the logs with useless messages

image

tobozo avatar Dec 02 '20 09:12 tobozo

@tobozo any advice in trying to instal the deauth via Arduino? many thanks :)

tonysoprano187 avatar Jan 13 '21 03:01 tonysoprano187

Is adding an ESP8266 an implemented method of deauth, or more of a theoretical thing? Did you try putting caps across 3.3V and Gnd at the ESP8266?

RChadwick7 avatar Jan 19 '21 07:01 RChadwick7

This article highlights two new ways to achieve deauth on ESP32, the Rogue AP solution seems to be the best choice for Arduino as it doesn't need to be maintained across sdk's.

https://hackaday.com/2021/05/27/wifi-penetration-testing-with-an-esp32/

https://github.com/risinek/esp32-wifi-penetration-tool

Has anyone stumbled across an Arduino POC using the Rogue AP solution? Found this or this but found no traces of esp_wifi_deauth_sta() so far.

tobozo avatar May 27 '21 14:05 tobozo