Author Topic: AirPort  (Read 2186 times)

BooCocky

  • Leader
  • Hero Member
  • *****
  • Posts: 875
  • Reputation: 81
  • All your base are belong to ininjas
  • Badges:
  • Computers: Dell Inspirion
  • iDevices: ipod shuffle
AirPort
« on: March 11, 2012, 08:13:49 pm »
Been looking into AirPort lately, Big MacOSX uses AirPort to suport monitor mode.  We cant begin to compile AirPort without the closed source Apple80211 private framework, which iOS does not come with.  Fortunatly GeoHot, Pumkin, and Lokkju worked on this slightly a while ago here:

http://code.google.com/p/iphone-wireless/

And you can grab the source code of the Apple80211.framwork with svn:

Code: [Select]
svn checkout http://iphone-wireless.googlecode.com/svn/trunk/ iphone-wireless-read-only
It compiles nicely, I have found that the Apple80211.h in GeoHotz version is alot smaller than the one that comes with AirPort source.  Although if you replace the header that comes with GeoHotz Apple80211 hack with the one that comes with AirPort source the framework still compiles nicley and is the same size. 

here you can download the open source airport:       

http://distfiles.macports.org/airport/airport.tar.gz

The Makefile gave me errors so I fixed it here:

Code: [Select]
CC= gcc
CFLAGS= -Wall -Os
LDFLAGS= -lobjc -framework Foundation -framework CoreFoundation -F/System/Library/PrivateFrameworks -framework Apple80211

all: airport

airport: airport.o hermes_info.o
       $(CC) $(CFLAGS) $(LDFLAGS) airport.o hermes_info.o -o airport

airport.o: airport.m
       $(CC) $(CFLAGS) $(LDFLAGS) airport.m -o airport.o

hermes_info.o: hermes_info.m
       $(CC) $(CFLAGS) $(LDFLAGS) hermes_info.m -o hermes_info.o

clean:
/bin/rm -f $(OBJS) *~ errs.* core a.out *.o
ci:
ci -l *.c *.h *.m Makefile

SRCFILES:=airport/Makefile airport/airport.m airport/Apple80211.h
SRCFILES:=$(SRCFILES) airport/hermes_info.m airport/hermes_info.h airport/hermes_more.h
SRCFILES:=$(SRCFILES) airport/linux_hermes_rid.h
tar:
(cd ..; tar zcvf airport/airport.tar.gz $(SRCFILES))

I actually have Kismet semi-working after installing Apple80211.  The kismet_server is giving me trouble so I used netcat to open a port and connect just for show:







Thats all it does :P.

We really should look at AirPort though to achive monitor mode.  Changes to Apple80211 main.c will have to be made though.  I all out of magic tricks.

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #1 on: March 11, 2012, 08:19:58 pm »
This is very cool Boo i had an idea about monitor mode but i dont know if its possible. Heres my idea we somehow make a virtual card that is not hardware and it will have all the things like packet injection monitor mode i dont think this will actually be possible but its an idea. Thanks Boo for helping us get one step more away from apples stronghold!!!!
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork

BooCocky

  • Leader
  • Hero Member
  • *****
  • Posts: 875
  • Reputation: 81
  • All your base are belong to ininjas
  • Badges:
  • Computers: Dell Inspirion
  • iDevices: ipod shuffle
Re: AirPort
« Reply #2 on: March 11, 2012, 08:30:49 pm »
Tomorrow I will upload pylorcon, which is a python wrapper around the Lorcon C library.  Which no one has really made use of.  It is useful for packet injection specifing a specific driver.  Its easy to use but we need to compile a driver first :(

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #3 on: March 11, 2012, 08:34:17 pm »
Tomorrow I will upload pylorcon, which is a python wrapper around the Lorcon C library.  Which no one has really made use of.  It is useful for packet injection specifing a specific driver.  Its easy to use but we need to compile a driver first :(
Very awsome. Are you gonna compile that driiver cuz i shure as hell not ;)
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork

BooCocky

  • Leader
  • Hero Member
  • *****
  • Posts: 875
  • Reputation: 81
  • All your base are belong to ininjas
  • Badges:
  • Computers: Dell Inspirion
  • iDevices: ipod shuffle
Re: AirPort
« Reply #4 on: March 11, 2012, 08:40:30 pm »
Not even sure if its even possible :(

Don't like seeing ads? Click here to register!

C0deH4cker

  • Hero Member
  • *****
  • Posts: 2849
  • Reputation: 129
  • I am leaving iNinjas. Contact me via email.
  • Badges:
  • iDevices: iPhone 4S 16gb Black (5.1.1), iPad 2 32gb White (5.0.1), iPod Touch 2G 8gb (4.2.1)
Re: AirPort
« Reply #5 on: March 11, 2012, 09:25:18 pm »
on ios and macosx, drivers are kexts, and unfortunately, kexts cannot currently be loaded on ios.

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #6 on: March 11, 2012, 09:28:52 pm »
on ios and macosx, drivers are kexts, and unfortunately, kexts cannot currently be loaded on ios.
Coould you change one of the ones that are allready on there?
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork

C0deH4cker

  • Hero Member
  • *****
  • Posts: 2849
  • Reputation: 129
  • I am leaving iNinjas. Contact me via email.
  • Badges:
  • iDevices: iPhone 4S 16gb Black (5.1.1), iPad 2 32gb White (5.0.1), iPod Touch 2G 8gb (4.2.1)
Re: AirPort
« Reply #7 on: March 11, 2012, 09:32:18 pm »
you can, but it is incredibly difficult to do as all of the kexts are cached with the kernel in a file.

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #8 on: March 11, 2012, 09:48:32 pm »
Would that be in the kernelcache or in just a random place
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork

Trcx528

  • Haxor
  • Hero Member
  • *****
  • Posts: 4502
  • Reputation: 166
  • Google it!
    • iNinjas
  • Badges:
  • Computers: 13" 2011 Macbook Pro, 120 GB SSD and 16 GB of Ram
  • iDevices: None
Re: AirPort
« Reply #9 on: March 11, 2012, 10:05:21 pm »
on ios and macosx, drivers are kexts, and unfortunately, kexts cannot currently be loaded on ios.
I though you could load an uload kext's with the kext's tool on cydia....

Don't like seeing ads? Click here to register!

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #10 on: March 11, 2012, 10:33:19 pm »
I though you could load an uload kext's with the kext's tool on cydia....
Would a uload kext work? Because i know you can add them cuz ive seen that on cydia before
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork

C0deH4cker

  • Hero Member
  • *****
  • Posts: 2849
  • Reputation: 129
  • I am leaving iNinjas. Contact me via email.
  • Badges:
  • iDevices: iPhone 4S 16gb Black (5.1.1), iPad 2 32gb White (5.0.1), iPod Touch 2G 8gb (4.2.1)
Re: AirPort
« Reply #11 on: March 12, 2012, 08:46:35 am »
You can try.

h4ck3rpr0n3

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3063
  • Reputation: 130
  • Developer, Genius :P :P
  • Badges:
  • Computers: HP Pavillion g7: Windows 7, BT5 R1, Ubuntu 12.04, Windows 8, Linux Mint
  • iDevices: ipod touch 3g, ipod touch 2g
Re: AirPort
« Reply #12 on: March 12, 2012, 08:51:56 am »
What does main.c need to do?
goals:
[] get developer status
[X] get 30+ karma
[X] get to hero member
[X] become part of the staff

languages i know:
JavaScript
CSS
HTML
PHP
C
C++
Cython
Python

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #13 on: March 12, 2012, 04:36:34 pm »
Okay well theres another thing if we do
Get the kext there is a ifconfig command that lets you create your own interface which you point it to your file (the kext) so idk if this helps just an idea :)


EDIT: ok i found this thing on how to make a kext for mac osx which is made by apple so it should be spot on whoever feels like making this good luck https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/KEXTConcept/KEXTConceptIntro/introduction.html
« Last Edit: March 12, 2012, 11:43:36 pm by Apetrick »
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork

Apetrick

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3512
  • Reputation: 90
  • <Apetrick> lank is 1337
  • Badges:
  • iDevices: Ipod Touch 4g
Re: AirPort
« Reply #14 on: March 13, 2012, 05:37:25 pm »
Hey can you make a deb cuz i have a ton of stuff to do and i have no time to download and find the proper dirs
<%a12danrulz> Idk, but doing a DoS from an apple device is like fighting a bear with a plastic spork