Aircrack NG
Aircrack NG
Airodump-ng: Revamped GPS logging functionality and added new logging format (logcsv)
Aircrack-ng: Only load the maximum supported and available crypto engine
Aircrack-ng: Serious speed up and memory usage decrease when loading large files (multiple Gb) using
AVL trees
Airmon-ng: Better check for lspci requirement on systems that don't have PCI/PCIe devices
Build: Automatic development packages build for multiple Linux distro and upload to PackageCloud.io
General: Fixed memory leaks and issues reported by static analysis tools
General: Various other small improvements in the tools, build system, tests and documentation
Aircrack-ng: Fixed floating point exception due to division by 0 when displaying stats.
Aircrack-ng: Added save/restore session when cracking using wordlists (-N and -R).
Aircrack-ng: Moved crypto to its own library, aircrack-crypto/ (aka crypto engine).
Aircrack-ng: Performance improvements of the crypto engine across various CPU architectures.
Aircrack-ng: Improved building crypto-engine across CPU architectures and compilers (gcc, clang and
ICC).
Airodump-ng: Don't show WPA handshake capture notice for out-of-scope ESSIDs.
Airodump-ng: Add –background 0/1 to force disable/enable background settings and override
autodetection of background.
dcrack: Check if dictionary and capture file exists before uploading them.
dcrack: Gracefully stop and display errors instead of printing stacktrace whenever possible.
dcrack: Move temporary user files to /tmp and cleanup when done.
dcrack: Fixed displaying status when no clients are connected to the server.
WPAClean: Fixed crash with invalid prism2 header PCAP and added tests.
WPAClean: Don't create output file if no handshake are present or if input file is bad.
HostAPd-wpe: Added Response-Identity logging and displaying NETNTLM hash in hashcat format.
General: Added –without-opt to disable stack protector when using GCC >= 4.9
General: Various improvements and fixes, some from Coverity Scan and Valgrind.
General: Fixed and added functions prototypes and commented out unused functions.
General: Reformat source code using clang-format and added .clang-format file for IDE.
General: Added badges for Coverity scan and Intel compiler buildbot
Aircrack-ng: Use trampoline binary to automatically select fastest executable depending on the CPU
Airodump-ng: Fixed writing ESSID to CSV, Kismet CSV and Kismet NetXML files when ESSID gets
decloaked and cloaked length was 1.
Airmon-ng: Now supports nexmon driver on RPi 3 (and 0 Wireless) using Kali Linux.
Airmon-ng: Added identification for another realtek chipset and generic Ralink/MT.
Patches: Created WPE patches and documentation for current HostAPd and Freeradius versions.
Aircrack-ng: Added time remaining and percentage done when doing WPA cracking with a dictionary
(file).
Aircrack-ng: Fixed compilation on Cygwin 64 and drastically improve cracking speed for all CPUs (up to
+175% performance).
General: Updated and cleanup TravisCI file to test compilation and testing on OSX.
General: Improved compatibility on FreeBSD and Cygwin (RAM and CPU detection).
General: Memory cleanups, fixed memory leaks and fix other issues reported by Valgrind.
Airbase-ng: Allow to use a user-specified ANonce instead of a randomized one when doing the 4-way
handshake
Aircrack-ng: Removed redundant NULL check and fixed typo in another one.
Aircrack-ng: Workaround for segfault when compiling aircrack-ng with clang and gcrypt and running a
check.
Airmon-ng: Make lsusb optional if there doesn't seem to be a usb bus. Improve pci detection slightly.
General: Fixed clang warning about 'gcry_thread_cbs()' being deprecated with gcrypt > 1.6.0.
General: Fixed memory leaks, use after free, null termination and return values in various tools and
OSdep.
Airtun-ng: Adds WPA CCMP and TKIP decryption and CCMP encryption
Manpages: Removed airdriver-ng manpage and references to it (forgot to do it before the previous
release).
Travis CI: updated make parameter and add testing with pcre.
Airodump-ng: Added new paths (and removed one) for OUI files and simplified logic to find the OUI
file.
Airmon-ng: fixes for openwrt busybox ps/grep issues which do not seem present in other versions of
busybox
Airodump-ng: Fixes to NetXML (unassociated clients missing and various other small bugs) and update
the code to match current NetXML output.
Airodump-ng: Removed requirement for 2 packets before AP is written to output (text) files.
Airodump-ng: Fixed formatting of ESSID and display of WPA/WPA2 (as well as a bunch of other small
fixes) in CSV file.
Airodump-ng: Allow to specify write interval for CSV, kismet CSV and NetXML files.
Airserv-ng: Fixed wrong station data displayed in Airodump-ng.
General: Fixed a bunch of uninitialized values and non-zeroed structures (upon allocating them).
Airmon-zc: better handling for when modules are not available (incomplete)
Airmon-zc: users can now start the monitor interface again to change channels
OSdep: Fixed libnl detection. Also avoid detection on non Linux systems.
Makefile: Fixed 'commands commence before first target' error when building Aircrack-ng.
Fixed segfault when changing the optimization when compiling with gcc thanks to Ramiro Polla.
Fixed channel parsing (eg 108, 125) and updated radiotap parser.
Airbase-ng: Fixed Caffe Latte Attack not working for all clients.
Fixed building aircrack-ng with recent version of gcc and also on cygwin.
Airmon-ng: Added 'check kill' to automatically kill services that could interfere.
Airodump-ng: Fixed XML bugs when outputting NetXML: ESSID containing '&' or chinese characters,
when multiple encryption are used.
Airodump-ng: Add feature to show APs uptime (–uptime) based on the timestamp.
Airodump-ng-OUI-update: Fixed OUI URL and allow CURL redirect (ticket #829).
Airdrop-ng: Fixed bug when several BSSID have the same ESSID.
Airdrop-ng: Doesn't constantly parse anymore, wait 5 seconds each time it parses.
Airdrop-ng: Fixed crash when failing to get channel or when rules file didn't exist.
Versuck-ng: New script to do the same thing as the kismet autowep plugin from the CLI.
Aircrack-ng: PIC fix for hardened systems from Francisco Blas Izquierdo Riera (klondike)
Aircrack-ng: Give a better message when there's an error with the dictionary.
Aireplay-ng: Added migration mode attack from Leandro Meiners and Diego Sor from Core Security
(BlackHat Las Vegas 2010)
Airdecloak-ng: Fixed bug when using pcap files with PPI headers.
wifi-detect.sh: reference script for testing wifi card detection using iwconfig vs ls /sys/class/net
Wireless Panda: C# Library to parse Airodump-ng output files (and added example project).
OSdep (Linux): Added support for nl80211 thanks to impulse32. Use 'make libnl=true' to add netlink
support (Ticket #1004).
Fixed various compilation issues on Linux and Cygwin, GNU/Hurd, Darwin (OSX) and Sparc.
Added instructions for Travis CI: Free Hosted Continuous Integration Platform for the Open Source
Community.
airodump-ng, aircrack-ng, airdecap-ng, airbase-ng: Fixed buffer overflow in airodump-ng due to forged
eapol frame.
airbase-ng: automatically set privacy bit to 1 if WPA or WPA2 is used (-Z or -z option).
cygwin: Compiling sqlite isn't necessary anymore, libsqlite3-devel package can be used.
osdep: Add tap support for Darwin/OS X. Still require tuntaposx from sourceforge to work.
manpages: Fixed aireplay-ng manpage for attack 0: not disassociation packets, deauth packets.
patches: Added regulatory domains override patches for atheros drivers (ath5k, ath9k and ar9170).
airodump-ng-oui-update: Make sure the user is root when updating the file.
airodump-ng: Decreased time before writing text files to 5 sec (instead of 20).
airodump-ng: New option –output-format option (to replace –nocap): specify output files.
aireplay-ng: Added possibility to stop sending fake auth requests after n retry failures.
airmon-ng: Fix chipset detection for iwlagn (show “Intel 4965/5xxx” instead of “Unknown”).
airmon-ng: Display a message when udev rename madwifi-ng VAPs.
wesside-ng, easside-ng: “ERROR: Packet length changed while transmitting (XX instead of YY)” should
finally be fixed.
All: Added compatibility file for functions like cpu_to_le32. That should fix compilation on a lot of
OSes.
All: Temporary fix to allow compilation with recent gcc (Error message: “dereferencing type-punned
pointer will break strict-aliasing rules”). I hope it doesn't break anything. A cleaner fix will be applied
later.
GUI (windows): Use last used directory when selecting another file to crack.
airodump-ng: Changed file extensions for CSV (.csv instead of .txt) and for kismet CSV (.kismet.csv
instead of .csv).
airodump-ng: Fixed WPA tag parsing and added QoS detection based on direction.
airodump-ng: Added option to only disable capture file; all other files (CSV, kismet CSV, kismet netxml,
GPS) will be created.
airolib-ng: Fixed a bug where database is created even if parameters are not correct.
airmon-ng: Bypass interface checks when ps command returns an error. Needed for BusyBox limited ps
command.
easside-ng & wesside-ng: Fixing again “Error Wrote 39 out of 30” error message.
Makefile: Only compile and install wesside-ng, easside-ng, buddy-ng and tkiptun-ng with “make
unstable=true”.
aircrack-ng: Added SSE2 supports (WPA cracking speed is improved a lot) thanks to nx5.
aircrack-ng: Fixed detection of the number of CPU (especially with recent CPUs).
aircrack-ng: Fixed long lasting WPA bugs: cannot find the key with SMP computers, wasn't exiting
correctly, …
aircrack-ng: Now only display ASCII WEP keys when 100% of the hex key can be converted to ASCII.
aircrack-ng: You can now specify the number of threads for cracking even if you have a non-SMP
computer.
aircrack-ng: Now output an error message if using -r and it wasn't compiled with sqlite support. It was
a problem on some ubuntu.
airdecloak-ng: New tool to remove wep cloaked frames from a pcap file. For more details see
http://www.aircrack-ng.org/doku.php?id=airdecloak-ng
airodump-ng: Fixed power value display (for ath interface with a high number, more than 99).
airodump-ng: Can work on the new frequencies (allowed by frequency Chaos patch).
aireplay-ng: Fixed crash with too short packets (seen with zd1211).
tkip-tun: New tool to inject on WPA1 with QoS enabled networks. Full description: decrypt packets
coming from the AP in a TKIP network, which uses QoS (ieee802.11e). It also breaks the MIC Key for
sending packets towards the Client correctly encrypted and signed. Stores plaintext packet and
keystream in seperate files.
airbase-ng: Added compatibility with some clients. added random source IPs and MACs for cfrag attack
(-N) to evade simple flood protection.
airmon-ng: Recognition of 4 new chipsets: acx1xx, at76_usb, adm8211 and AR9001U (otus).
airmon-ng: Fixed some chipset naming inconsistencies between ieee80211 and mac80211 drivers.
Makefile: Now ensure that make 3.81 or higher (mandatory) is used when compiling on OSX 10.4.
Makefile: Added 'make check' that tests key cracking against files given in test/ directory.
general: Fixed compilation on some distribution (with a recent version of gcc) due to warnings
(because of not getting the return value of some functions).
patches: rt73, r8187 patches for fedora kernels (should work on 2.6.27).
patches: Added Defcon 16 patch (more frequencies than the usuals) for ath5k called frequency Chaos.
aircrack-ng: Fixed: Displaying twice the wep key at the end and “Warning: Previous crack is still
running”.
aircrack-ng: Fixed detection of WPA handshake (was not working correctly in previous release).
aireplay-ng: Fixed a rtc bug which freezed aireplay-ng in case /dev/rtc0 is not available.
OSdep: Orinoco: attempt to bring interface down before switching to monitor mode.
aircrack-ng: Cracking WPA now does only require 2 packets (instead of 4).
airodump-ng: Fixed (WEP) open system and shared key system detection.
airolib-ng: Automatically create a database if it does not exist. “init” option is not necessary anymore.
Makefile: renamed ROOT (used by gentoo for other stuff) variable by AC_ROOT.
Added instructions to compile airolib-ng and using '-r' option in aircrack-ng for cygwin.
airodump-ng: Fixed airodump sanity check (resulted in showing WPA networks without CIPHER &
AUTH)
airodump-ng: Added “–showack” to print statistics about ack/cts and rts frames
aircrack-ng: Added passive ptw attack (using also IP packets for cracking)
aircrack-ng: Fixed huge memory usage with ptw attack on hundreds of APs
aircrack-ng: Changed ptw testpackets from first to random (fixes invalidation of found keys)
aircrack-ng: Try 1000 40bit keys before starting 104bit cracking, to get the key “instantly” without
waiting for 104 bit to fail
aircrack-ng: Fixed not shown ascii keys, when found key was shorter than expected
aireplay-ng: Added usage of RTS/CTS, auth and ACK to –test (more stable and faster)
aireplay-ng: Added TCP connection test to –test
aireplay-ng: Made essid argument optional - sniffs the essid if its broadcasted
aireplay-ng: Made src mac argument (-h) optional - uses default interface mac
aireplay-ng: Added –fast switch to use first available packet without interaction
aireplay-ng: chopchop now tries header recreation workaround if icv check failed
makeivs-ng: Added parameters to set length, number and first IV of generated IVs
Added airolib-ng for using hash tables to crack wpa/wpa2 psk (supports cowpatty rainbow tables)
airodump-ng: Fixed: Wrong information printed in CSV file (PSK for WEP with Shared key instead of
SKA).
airodump-ng: Fixed debian bug #417388: it doesn't restore terminal after error
Makefile: fixed direct call to 'make install' or 'make strip' instead of 'make'
Patches: Added injection patch for zd1211 (does not work for all devices).
Updated spec file by David Bolt to be able to build RPM packages on FC, Mandriva and Suse distro
airtun-ng: Creates a tuntap interface, through which ordinary IP frames can be injected
airodump-ng: Now use the flaw in shared-key authentication to generate a xor file containing the prga
recovered from a shared-key authentication
airodump-ng: More information about encryption on the AP
airodump-ng: The way ESSID is given in the CSV file is more clear
aircrack-ng: Changed -d option. It's now a mask (use XX for unknown bytes).
packetforge-ng: New tool to forge packets (by Martin Beck) + manpage written
aircrack-ng: Fixed: Show a different ASCII key for a same hex key
airodump-ng and aireplay-ng: “Can't find wireless tools, exiting.” should be fixed if they exist
airodump-ng and airmon-ng: rt2570 now uses prismheader (use at least beta 2 driver)
aircrack-ng: Now bruteforce only last keybyte by default (faster than last 2KB)
aircrack-ng: Fixed: bug with -d option. It adds a leading “0x00” to the key
aireplay-ng: fixed compilaton issues on some distro
airodump-ng: Log by default only one beacon (added option to log all beacons)
airodump-ng: Dump prefix isn't mandatory anymore, not giving it won't store any data
Makefile: You can now compile aircrack-ng with Intel C Compiler (really faster)
Updated madwifi-ng patch to r1545 (and up; can be applied on madwifi v0.9.0 and v0.9.1)
airodump-ng: Added support for OpenWrt devices (use prism0 as capture interface)
airodump-ng: Fixed: dumpfile prefix took the name of the second argument
aircrack-ng: with -a option, you can use “wep” or “wpa” instead of numbers
Makefiles: improvements
aircrack-ng: uses by default all CPU for cracking (Debian bug report #352877)
fixed pcap2ivs bug (it wasn't using the good MAC for bssid)
airmon.sh: Fixed (hopefully) detection of ipw2100 and ipw2200 (Debian bug report #340057)
Makefile cleaning