abaddon

there is no hardware address for the airjack driver, its a netrom device, the setmac utility is for seting the mac address on the lucent card running on orinoco_cs drivers modified with the patch included in the package...

secondly the howto shouldnt have said redhat 7.3, 7.3 has been causing alot of people problems with airjack, id suggest something other than 7.3...

last of all, um...please go read the documentation that i and cornholio took the time to write up, it would have answered this and im sure other questions...

--Abaddon

QUOTE]Originally posted by novocane
I am having some issues getting airjack to work.

It compiled fine on a Gentoo Linux based system,
gcc 2.95.3
pcmcia-cs-3.2.1
airjack-v0.6.2-alpha-defcon (also tried non defcon rls)
SMC2632W Prism2 card (also tried Linksys, Senao, and Lucent cards).

The card appears to initialize ok:
$ lsmod
Module Size Used by Not Tainted
airjack_cs 16800 0 (unused)
ds 6752 2 [airjack_cs]
i82365 23376 2
pcmcia_core 43936 0 [airjack_cs ds i82365]

$ ifconfig aj0
aj0 Link encap: AMPR NET/ROM HWaddr
BROADCAST MULTICAST MTU:1600 Metric:1
RX packets:178 errors:13 dropped:0 overruns:0 frame:13
TX packets:0 errors:5 dropped:0 overruns:0 carrier:0 RX bytes:11392 (11.1 Kb) TX bytes:0 (0.0 b)
Interrupt:9 Base address:0x140

(notice no HWaddr found)
$ ./setmac aj0 aa:bb:cc:dd:ee:ff
ioctl: SIOCSIFHWADDR: Operation not supported

$ dmesg
airjack_cs: Initialization complete.
cs: IO port probe 0x0100-0x04ff: excluding 0x3c0-0x3e7 0x4d0-0x4d7
cs: IO port probe 0x03e8-0x04cf: clean
cs: IO port probe 0x04d8-0x04ff: clean
cs: IO port probe 0x0800-0x08ff: clean
cs: IO port probe 0x0a00-0x0aff: clean
cs: IO port probe 0x0a70-0x0aff: clean
cs: IO port probe 0x0c00-0x0cff: clean
cs: memory probe 0xa0000000-0xa0ffffff: clean.
aj0: index 0x01: Vcc 5.0, Vpp 5.0, irq 9, io 0x0140-0x17f

I also tried on a Redhat 7.3 /w pcmcia-cs-3.1.31 (as suggested in howto). Exactly the same errors.

Any ideas?
What cards have been tested and known working? [/quote]

highfrequency

I've been trying for the better part of a day now to get it to run as well. Unfortunately it's on RedHat 7.3.

I'm trying to see the effect on our IPSec protected network.

I seem to be able to get eth0 configured properly with SetMac, and ifconfig shows the aj0 and eth0 interfaces but when I try any of the programs like hunter_killer or wlan_jack I get the message 'the network is down' and I don't see anything while monitoring using Airopeek and the network stays up.

The log files seem to indicate that the interfaces are looking for a DHCP server.

Any thoughts or suggestions?

c0rnholio

just type a simple ifconfig aj0 up

cheers

__________________
You mean...there is life outside my lab?

abaddon

ok enough people had this problem that i pulled out an email i got from an airjack user explaining how to make it work on redhat 7.3...(thanks to one Jason Holt for the instructions)...

it can be found on the main airjack site

http://802.11ninja.net

as for testing your ipsec wireless setup airjack isnt likely to break it out of the box, but it will work as a toolkit to beat it if you write the code...the implimentation we broke was wavesec (http://www.wavesec.org, and they still havnt replied to my posts on their list about it, not sure they are even still working on it)...so you'll find that the attacks there in are very taylored to just one implimentation (we didnt want to release code to break VPNs that are in wide spread use, we just wanted to show you that we could have, while at the same time not having every kiddy in the world breaking into your network at the click of a mouse...

--Abaddon

highfrequency

Great. Thanks very much. I'm interested in finding out how well a wireless VPN client behaves while subject to an Airjack type attack.

I'll let you know when I get it up and running in my lab next week.

Regards

abaddon

well it's like i said before, if you're reffering to breaking the crypto then unless you are using wavesec it wont do it out of the box, it's just a proof of concept for that class of attacks, we quite intentionally didnt release anything to break widely used VPN solutions, just one based on the same technoledgy...

so in other words airjack will probably not break your VPN out of the box, it isnt ment to, what it is ment to do is to show you how easily someone else could (this code took only a few nights to write, imagine if your attacker has more than a few nights)...

so if you run kracker-jack and you dont see it break your VPN dont be luled into a false sense of security, if you are not using strong two way authentication and imploying some sort of monitoring then you are very much vulnerable to this sort of attack...

on the other hand, if you were reffering to the wlan-jack tool, then well, your network shouldnt be able to hold up at all if done correctly, if you are using leap and all cisco 350 hardware then ive found that deauth's to broadcast have little effect but deauths to specific stations/AP's work just the same..its a protocol flaw and unfortunatly one not easily fixed...the up side is that with proper monitoring it is something very easily detected and the attacker is nessisarily close (in the grand scheme of things)...

--Abaddon

Dr3D1zzl3

Ok im having issues with comping airjack on my system (redhat 8.0)

thsi is what i get when i type make in the folder.
(i can run a make fine in the tools dir)

Please note that i changed the path to pcmcia-cs in the make file to point to .34 instead of .31

I have both source trees on my lappie nad have tried both to no avail i get the same error.


[root@laptop airjack-v0.6.2-alpha]# make
rm -f airjack_cs.o airjack.o hfa384x.o
gcc airjack.c -O2 -Wall -DMODULE -D__KERNEL__ -I. -I- -I/usr/src/pcmcia-cs-3.1.34/include -I/lib/modules/`uname -r`/build/include -c
airjack.c:43:27: pcmcia/config.h: No such file or directory
In file included from /lib/modules/2.4.18-14/build/include/linux/fs.h:26,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/lib/modules/2.4.18-14/build/include/asm/bitops.h:133: conflicting types for `set_bit'
/lib/modules/2.4.18-14/build/include/asm/bitops.h:38: previous declaration of `set_bit'
airjack.c: In function `airjack_interrupt':
airjack.c:825: parse error before "__func__"
airjack.c:831: parse error before "__func__"
airjack.c: In function `airjack_ioctl':
airjack.c:944: parse error before "__func__"
airjack.c:955: parse error before "__func__"
airjack.c:965: parse error before "__func__"
airjack.c:973: parse error before "__func__"
airjack.c:985: parse error before "__func__"
airjack.c:998: parse error before "__func__"
airjack.c:1012: parse error before "__func__"
airjack.c:1028: parse error before "__func__"
airjack.c:1035: parse error before "__func__"
airjack.c:1043: parse error before "__func__"
airjack.c: In function `enable_mac':
airjack.c:1155: parse error before "__func__"
airjack.c: In function `finish_bootstrap':
airjack.c:1182: parse error before "__func__"
airjack.c: In function `initial_config':
airjack.c:1233: parse error before "__func__"
airjack.c:1239: parse error before "__func__"
airjack.c:1251: parse error before "__func__"
airjack.c:1261: parse error before "__func__"
airjack.c:1271: parse error before "__func__"
airjack.c:1282: parse error before "__func__"
airjack.c:1290: parse error before "__func__"
airjack.c:1298: parse error before "__func__"
airjack.c:1308: parse error before "__func__"
airjack.c:1320: parse error before "__func__"
airjack.c:1326: parse error before "__func__"
airjack.c: In function `airjack_attach':
airjack.c:1687: parse error before "__func__"
make: *** [airjack.o] Error 1

Dr3D1zzl3

ok update time.
(im just going to update this as much as i can till ige thtis to work, sort of like a journal for everyone else)

In RH /usr/src dir there is a link to the linux source tree (if you install the linux source pacakges that is)
called linux-2.4. I made a copy of tha tand called it linux . This fixed one problem and gave me a few more.

This is what i get now. (note i couldnt cut and paste all of it)

from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/config.h:4:1: unterminated #ifndef
In file included from /usr/src/pcmcia-cs-3.1.34/include/linux/wait.h:4,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:12,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/version.h:4:1: unterminated #ifndef
In file included from /lib/modules/2.4.18-14/build/include/linux/wait.h:17,
from /usr/src/pcmcia-cs-3.1.34/include/linux/wait.h:5,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:12,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/config.h:4:1: unterminated #ifndef
In file included from /lib/modules/2.4.18-14/build/include/linux/fs.h:12,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/wait.h:7:41: missing binary operator before '('
In file included from /lib/modules/2.4.18-14/build/include/linux/net.h:21,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:15,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/config.h:4:1: unterminated #ifndef
In file included from /lib/modules/2.4.18-14/build/include/asm/string.h:5,
from /lib/modules/2.4.18-14/build/include/linux/string.h:25,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:23,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/config.h:4:1: unterminated #ifndef
In file included from /lib/modules/2.4.18-14/build/include/asm/bitops.h:8,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:26,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/config.h:4:1: unterminated #ifndef
In file included from /lib/modules/2.4.18-14/build/include/linux/fs.h:26,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/lib/modules/2.4.18-14/build/include/asm/bitops.h:133: conflicting types for `set_bit'
/lib/modules/2.4.18-14/build/include/asm/bitops.h:38: previous declaration of `set_bit'
In file included from /lib/modules/2.4.18-14/build/include/asm/system.h:4,
from /lib/modules/2.4.18-14/build/include/asm/semaphore.h:39,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:200,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/config.h:4:1: unterminated #ifndef
In file included from /usr/src/pcmcia-cs-3.1.34/include/linux/init.h:4,
from /lib/modules/2.4.18-14/build/include/asm/system.h:6,
from /lib/modules/2.4.18-14/build/include/asm/semaphore.h:39,
from /lib/modules/2.4.18-14/build/include/linux/fs.h:200,
from /lib/modules/2.4.18-14/build/include/linux/capability.h:17,
from /lib/modules/2.4.18-14/build/include/linux/binfmts.h:5,
from /lib/modules/2.4.18-14/build/include/linux/sched.h:9,
from /usr/src/pcmcia-cs-3.1.34/include/linux/sched.h:5,
from /lib/modules/2.4.18-14/build/include/asm/uaccess.h:8,
from /usr/src/pcmcia-cs-3.1.34/include/asm/uaccess.h:49,
from /usr/src/pcmcia-cs-3.1.34/include/pcmcia/k_compat.h:119,
from airjack.c:44:
/usr/src/pcmcia-cs-3.1.34/include/linux/version.h:4:1:

abaddon

ok, short answer, your compiler must be new enough to have cought my bad syntax, c99 says that __func__ is like a const variable, i am using it as a string constant there because i was smoking crack i suppose, so to fix, apply some regex to change ever format string that has __func__ unsuccessfully concatinated to it, and change it to a %s inside the format string then add __func__ as an arguement to the function call...

ok thats the annoying way, the lazy way will simply be to delete any line that has that in it...

--Abaddon

Dr3D1zzl3

Sweet thanks for the reply man, ill have to bone up on my c (im a newbie take it easy on me), hell ill call up a freind of mine to come over and im sure he can help me (he amazes me when it comes to nix stuff). Do you want me to email you the files if it all works out?




**UPDATE***
took my lappie to freinds house, he got it to compile right so now i have to go out and test with it, Hey abaddon, have you tested this code with a prism 2.5 chipset? Currently dont have a prism 2 card that has an ext ant connector, so i was looking at one of those 200mw prism 2.5 cards. (i rember vaguely that you dont have a 2.5 card so this questions is mroe therotical i suppose)


cheers

dr3

Dr3D1zzl3

gawd 8.0 is a pita....

Still working on it im a n00b so dont hold your breath.

cant figure out what file rh 8.0 uses to "bind" drivers to specefic devices. And since they dont use wlan-ng i cant find any damn instructions. so any help anyone can give me is more then welcome. Come one help a n00b out

novocane

/etc/pcmcia/config

add:
device "airjack_cs"
class "network" module "airjack_cs"

&&

card "CARD IDENTIFIER"
manfid 0x...., 0x....
bind "airjack_cs"

If you're using an SMC2632, it should look something like this:

card "SMC 2632W 11Mbps 802.11b WLAN Card"
version "SMC", "SMC2632W", "Version 01.02"
bind "airjack_cs"

Cheers,
novocane

abaddon

no i have not, let me know how it goes, it will probably either just work, or just not work at all...

--Abaddon

abaddon

check out the site, i put up and example pcmcia config file, put this in /etc/pcmcia/config and it should work...

--Abaddon
http://802.11ninja.net

Dr3D1zzl3

THANKS!

thanks to everyone for there help, it would have taken me a helluva along time to figure this out in a timely manner. I will try the things that you guys posted. I have allready copied the module (airjack_cs.o) to all the right locations.

Just need to get these last few loose ends tied up.

Well here is an update.

Modules wont load due to some issues with invalid symbols.

So not sure if this was due to the way my freind got it to compile or what.

here is what it spits out.


insmod airjack_cs
Using /lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol __kfre
e_skb
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol alloc_
skb
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol flush_
scheduled_tasks
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol kmallo
c
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol _ctype
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol create
_proc_entry
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol regist
er_pccard_driver
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol netdev
_finish_unregister
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol unregi
ster_pccard_driver
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol boot_c
pu_data
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol netdev
_state_change
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol cpu_ra
ise_softirq
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol free_i
rq
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol unregi
ster_netdev
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol __out_
of_line_bug
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol del_ti
mer
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol regist
er_netdev
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol mod_ti
mer
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol kfree
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol remove
_proc_entry
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol reques
t_irq
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol netif_
rx
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol __veri
fy_write
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol skb_ov
er_panic
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol proc_r
oot
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol sprint
f
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol dev_al
loc
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol jiffie
s
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol softne
t_data
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol printk
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol __cons
t_udelay
/lib/modules/2.4.18-14/kernel/drivers/net/airjack_cs.o: unresolved symbol CardSe
rvices