Skip to content

Instantly share code, notes, and snippets.

@eye9poob

eye9poob/EAPEx

Created February 21, 2014 08:57
Show Gist options
  • Save eye9poob/9130933 to your computer and use it in GitHub Desktop.
Save eye9poob/9130933 to your computer and use it in GitHub Desktop.
Download ZIP
Wireless - EAP - Extractor Script
Raw
EAPEx
#!/usr/bin/env bash
# EAPEx
# 01/2014
# Twitter = @crazyjunkie1
# Tested on Backbox Linux
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
# MA 02110-1301, USA.
# __ _ __ _
# / /_ __ __ ______________ _____ __ __ (_)_ ______ / /__(_)__
# / __ \/ / / / / ___/ ___/ __ `/_ / / / / / / / / / / __ \/ //_/ / _ \
# / /_/ / /_/ / / /__/ / / /_/ / / /_/ /_/ / / / /_/ / / / / ,< / / __/
# /_.___/\__, / \___/_/ \__,_/ /___/\__, /_/ /\__,_/_/ /_/_/|_/_/\___/
# /____/ /____/___/
#
###############################################################################
# Download huge collections of wordlist:#
#http://ul.to/folder/j7gmyz#
##########################################################################
#
####################################################################
# Need daylie updated proxies?#
#http://j.mp/Y7ZZq9#
################################################################
#
######################################################
#### EAPEx ######
###################################################
#
# Script begins
#===============================================================================
VERSION="0.1"
clear
echo ""
echo -e "\e[00;32m#############################################################\e[00m"
echo ""
echo -e " EAPEx $VERSION "
echo ""
echo -e " EAPEx"
echo ""
echo -e "\e[00;32m#############################################################\e[00m"
echo ""
#Dependency checking
#Check for tshark
which tshark>/dev/null
if [ $? -eq 0 ]
then
echo ""
else
echo ""
echo -e "\e[01;31m[!]\e[00m Unable to find the required Tshark program, install and try again"
exit 1
fi
#Check for Airmon-ng
which airmon-ng >/dev/null
if [ $? -eq 0 ]
then
echo ""
else
echo ""
echo -e "\e[01;31m[!]\e[00m Unable to find the required Airmon-NG program, install and try again"
exit 1
fi
#Dependency checking
#Check for Airodump-NG
which airodump-ng >/dev/null
if [ $? -eq 0 ]
then
echo ""
else
echo ""
echo -e "\e[01;31m[!]\e[00m Unable to find the required Airodump-ng program, install and try again"
exit 1
fi
#Check for screen
which screen >/dev/null
if [ $? -eq 0 ]
then
echo ""
else
echo ""
echo -e "\e[01;31m[!]\e[00m Unable to find the required Screen program, install and try again"
exit 1
fi
echo -e "\e[01;33m[-]\e[00m In order to extract EAP packets you will need to associate (not authenticate) with the access point of interest"
echo ""
echo -e "\e[01;33m[-]\e[00m Your wireless network card must support packet injection."
echo ""
sleep 3
echo -e "\e[01;32m[-]\e[00m Now checking your wireless card..."
echo ""
# fix for occasional RFKILL errors
rfkill unblock all >/dev/null
# check for wifi mon interface
MONCHK=$(airmon-ng |grep -i "mon" |wc -l)
if [ "$MONCHK" = 0 ]
then
echo ""
echo -e "\e[01;31m[!]\e[00m Unable to find any wireless interfaces in monitor mode."
echo ""
echo -e "\e[01;32m[-]\e[00m The following interfaces exist:"
echo "--------------------------------------------------------"
airmon-ng
echo -e "\e[1;31m------------------------------------------------------------------------------------------------------------------\e[00m"
echo -e "\e[01;31m[?]\e[00m Enter the interface you would like to put into monitor mode and press ENTER. i.e wlan0"
echo -e "\e[1;31m------------------------------------------------------------------------------------------------------------------\e[00m"
echo ""
read WLANTMP
echo ""
echo -e "\e[01;32m[-]\e[00m Now attempting to put your adaptor "$WLANTMP" into monitor mode...please wait"
echo ""
sleep 2
airmon-ng stop "$WLANTMP" >/dev/null
sleep 3
airmon-ng start "$WLANTMP" >/dev/null
echo ""
echo -e "\e[01;33m[-]\e[00m If an "SIOCSIFFLAGS:" error was displayed against "$WLANTMP", then you card/driver is not compatable"
echo ""
echo -e "\e[01;32m[-]\e[00m Press Enter to continue if you did not see the "SIOCSIFFLAGS" error."
echo ""
read ENTERKEY
sleep 3
airmon-ng |grep -i "mon" >/dev/null
if [ $? = 0 ]
then
MADEMON=$(airmon-ng |grep -i "mon" |awk '{print $1}')
echo -e "\e[01;32m[+]\e[00m Success, created "$MADEMON" interface in monitor mode."
echo ""
MONINT="$MADEMON"
else
echo ""
echo -e "\e[01;31m[!]\e[00m Unable to create a monitor interface, script will exit."
echo ""
echo -e "\e[01;31m[!]\e[00m Your card or driver may not be compatable. Fix and run the script again"
echo ""
exit 1
fi
elif [ "$MONCHK" = 1 ]
then
echo ""
MONINT=$(airmon-ng |grep "mon" |awk '{print $1}')
echo -e "\e[01;32m[+]\e[00m I found "$MONINT" interface, I will use that for the script."
echo ""
else
echo ""
echo -e "\e[01;32m[-]\e[00m Multiple interfaces exist in monitor mode:"
echo "-------------------------------------------------------------------"
airmon-ng |grep -i "mon"
echo ""
echo -e "\e[1;31m------------------------------------------------------------------------------------------------------------------\e[00m"
echo -e "\e[01;31m[?]\e[00m Enter the interface you would like to use and press ENTER. i.e mon0"
echo -e "\e[1;31m------------------------------------------------------------------------------------------------------------------\e[00m"
echo ""
read MONINT
echo ""
fi
sleep 3
clear
echo ""
echo -e "\e[01;33m[-]\e[00m You need to associate with the access point in question before any information can be extracted"
echo ""
echo -e "\e[01;33m[-]\e[00m Note: it should be access points that only have MGT within the AUTH column, which means it is using 802.1x"
echo ""
echo -e "\e[01;33m[-]\e[00m Also it should be an access point with traffic or is likely to have traffic. check under Data column"
echo ""
echo -e "\e[01;33m[-]\e[00m You will be presented a list all wireless networks. When you have identified the SSID of interest press CTRL C"
echo ""
echo -e "\e[01;32m[-]\e[00m Press ENTER to continue"
echo ""
read ENTERKEY
airodump-ng $MONINT
echo -e "\e[1;31m------------------------------------------------------------------------------------------------------------------\e[00m"
echo -e "\e[01;31m[?]\e[00m Please enter the BSSID from above for the access point of interest (not SSID) i.e '00:AE:x:x:x:x:x'"
echo -e "\e[1;31m------------------------------------------------------------------------------------------------------------------\e[00m"
echo ""
read BSSIDTMP
BSSID=$(echo "$BSSIDTMP"| sed -e 's/^[ \t]*//' |sed 's/[ \t]*$//')
echo -e "\e[1;31m---------------------------------------------------------------------------------------\e[00m"
echo -e "\e[01;31m[?]\e[00m Please enter the channel number of of the access point of interest i.e 6"
echo -e "\e[1;31m---------------------------------------------------------------------------------------\e[00m"
echo ""
read CHAN
echo ""
echo -e "\e[01;32m[-]\e[00m I will now run a background process to assoicate with this access point..."
echo ""
screen -d -m -S eappeap_dump airodump-ng -i $MONINT -c $CHAN --bssid $BSSID
echo ""
echo -e "\e[01;32m[-]\e[00m Now sniffing traffic looking for EAP packets.."
echo ""
echo -e "\e[01;33m[-]\e[00m Note this can take some time as it depends on finding EAP traffic and users authenticating."
echo ""
echo -e "\e[01;32m[-]\e[00m Leave script running and users will appear if they authenticate, CTRL C to cancel"
echo ""
echo -e "\e[01;32m-------------------------------------------------------------------------------------\e[00m"
echo -e "\e[01;32m[+]\e[00m Capturing Traffic, press CTRL C once you have seen sufficent usernames"
echo -e "\e[01;32m-------------------------------------------------------------------------------------\e[00m"
tshark -i "$MONINT" -R eap -V 2>&1 |grep "Identity: *[a-z]\|*[A-Z]\|*[0-9]"
echo ""
echo -e "\e[01;33m[-]\e[00m All airodump-ng processes are being stopped.."
echo ""
killall airodump-ng >/dev/null 2>&1
exit 0
# script ends
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment