Giter VIP home page Giter VIP logo

fluxionnetwork / fluxion Goto Github PK

View Code? Open in Web Editor NEW
4.8K 276.0 1.4K 32.78 MB

Fluxion is a remake of linset by vk496 with enhanced functionality.

Home Page: https://fluxionnetwork.github.io/fluxion/

License: GNU General Public License v3.0

Shell 8.58% HTML 62.27% CSS 11.96% JavaScript 16.57% AGS Script 0.26% Python 0.29% PHP 0.06%
fluxion handshake linset fakeap evil-twin captive-portal attack aircrack capture social-engineering

fluxion's Introduction

Fuxion logo

Fluxion is the future of MITM WPA attacks

Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with (hopefully) fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social engineering (phishing) attack. It's compatible with the latest release of Kali (rolling). Fluxion's attacks' setup is mostly manual, but experimental auto-mode handles some of the attacks' setup parameters. Read the FAQ before requesting issues.

If you need quick help, fluxion is also available on gitter. You can talk with us on Gitter or on Discord.

Installation

Read here before you do the following steps.
Download the latest revision

git clone [email protected]:FluxionNetwork/fluxion.git

# Or if you prefer https 

git clone https://www.github.com/FluxionNetwork/fluxion.git

Switch to tool's directory

cd fluxion 

Run fluxion (missing dependencies will be auto-installed)

./fluxion.sh

Fluxion is also available in arch

cd bin/arch
makepkg

or using the blackarch repo

pacman -S fluxion

πŸ“œ Changelog

Fluxion gets weekly updates with new features, improvements, and bugfixes. Be sure to check out the changelog here.

:octocat: How to contribute

All contributions are welcome! Code, documentation, graphics, or even design suggestions are welcome; use GitHub to its fullest. Submit pull requests, contribute tutorials or other wiki content -- whatever you have to offer, it'll be appreciated but please follow the style guide.

πŸ“– How it works

  • Scan for a target wireless network.

  • Launch the Handshake Snooper attack.

  • Capture a handshake (necessary for password verification).

  • Launch Captive Portal attack.

  • Spawns a rogue (fake) AP, imitating the original access point.

  • Spawns a DNS server, redirecting all requests to the attacker's host running the captive portal.

  • Spawns a web server, serving the captive portal which prompts users for their WPA/WPA2 key.

  • Spawns a jammer, deauthenticating all clients from original AP and luring them to the rogue AP.

  • All authentication attempts at the captive portal are checked against the handshake file captured earlier.

  • The attack will automatically terminate once a correct key has been submitted.

  • The key will be logged and clients will be allowed to reconnect to the target access point.

  • For a guide to the Captive Portal attack, read the Captive Portal attack guide

❗ Requirements

A Linux-based operating system. We recommend Kali Linux 2019.4. An external wifi card is recommended.

Verify commits

Now, every commit should be signed. You can verify the signator using git-verify-commit [commit].

Contributor GPG key id
deltaxflux 40EAE3B9D0FBCE9C

:octocat: Credits

  1. l3op - contributor
  2. dlinkproto - contributor
  3. vk496 - developer of linset
  4. Derv82 - @Wifite/2
  5. Princeofguilty - @webpages and @buteforce
  6. Photos for wiki @http://www.kalitutorials.net
  7. Ons Ali @wallpaper
  8. PappleTec @sites
  9. MPX4132 - Fluxion V3
  10. usama7628674 - contributor

Disclaimer

  • Authors do not own the logos under the /attacks/Captive Portal/sites/ directory. Copyright Disclaimer Under Section 107 of the Copyright Act 1976, allowance is made for "fair use" for purposes such as criticism, comment, news reporting, teaching, scholarship, and research.

  • The usage of Fluxion for attacking infrastructures without prior mutual consent could be considered an illegal activity and is highly discouraged by its authors/developers. It is the end user's responsibility to obey all applicable local, state and federal laws. Authors assume no liability and are not responsible for any misuse or damage caused by this program.

Note

  • Beware of sites pretending to be related with the Fluxion Project. These may be delivering malware.

  • Use Parrot OS for Less Errors.

  • For WN722n V2/V3 VISIT - https://github.com/aircrack-ng/rtl8188eus

  • Fluxion DOES NOT WORK on Linux Subsystem For Windows 10, because the subsystem doesn't allow access to network interfaces. Any Issue regarding the same would be Closed Immediately

Links

Fluxion website: https://fluxionnetwork.github.io/fluxion/
Discord: https://discordapp.com/invite/G43gptk
Gitter: https://gitter.im/FluxionNetwork/Lobby

fluxion's People

Contributors

butanal avatar c0mrade69 avatar danielvos avatar deltaxflux avatar digitalirony avatar dlinkproto avatar drygdryg avatar geczy avatar honeyakshat999 avatar hritik14 avatar iagonyii avatar ibilux avatar ilyasakin avatar jrrn avatar l3op avatar mi-al avatar mpx4132 avatar princeofguilty avatar rad4day avatar rempairamore avatar sinapser0x avatar spmedia avatar strasharo avatar techfun77 avatar tomasvanagas avatar usama7628674 avatar vvbv avatar xisohi avatar xpz3 avatar zartaz avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

fluxion's Issues

Router page upload tutorial?

Hello, I would like to share my router page model. What should I do after running the script as explained on the home?

SSL Certificate Error

Which version of fluxion are you using?

Latest, 5522c85

What distribution of Linux (including the version) are you running it on?

Kali 2017.1 VM

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

TP-LINK TL-WN722N V1 Atheros

Which is the driver for it?

ath9k_htc v.4.9.0-kali3-amd64

Does it support injection ( output of aireplay-ng -9)

Properly working

General description of your issue along with the steps to reproduce it

After capturing a handshake with aircrack-ng (pyrite doesn't properly function), I will 95% of the time get a message telling me that the SSL Certificate is invalid and I need to either create a new one, search for one, or exit.
If I press search, nothing at all happens. If I opt to create one, it immediately moves on, but no clients will connect to the fake site no matter how long I wait.
The other 5% of the time, it just tells me that the handshake is corrupted.
I'm using Kali in a VM, however all other operations I've tried in all other programs have worked fine thus far.

[Request] Put a model of a custom attack somewhere

Do you want to request a feature or report a bug?

-> Feature


What is the expected behavior?

-> It would be cool to have a model of a custom attack. To ease the creation of custom attacks from others. For example a Wifi Page with all the Variables avalaible etc.
It might be in the code, but I think reading all the code for the variables needed and the provided variables is a bit too much :D


If this is a feature request, what is motivation or use case for changing the behavior?

-> Allow people to make custom attacks easily


Too bad!

Nothing works, everything is broken, apparently all my wireless cards, even before I used them, are now not supported.

Handshake sniffer

Do you want to request a feature or report a bug?

-> Bug
@MPX4132

I don't know if its normal, but i tried the Handshake snooper(airmon-ng indepentend) on my own network.
I started the deauthenfication attack and the handshake capture window starts freezing.
I reconnected to my wlan but it seems like fluxion is also freezing in "Handshake sniffer still in progress" state.

Did i do something wrong or is it just like its really hard to get this handshake

Got a WPA2 network.

What is the current behavior?

-> Quit accidentally

If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.

What is the expected behavior?

->

If this is a feature request, what is motivation or use case for changing the behavior?

Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

Specifications:

Paste the output of: grep -E 'FLUXIONVersion=|FLUXIONRevision=' fluxion.sh && cat /proc/version && airmon-ng && aireplay-ng wlan0 -9

Infinte Loop in "Path to capture file"

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> Prompt ask for path for handshake file (or directory) and loop 2 step backward


If the current behavior is a bug, please provide the steps to reproduce.

->

This is selected options

[1] Captive Portal > [1] Rogue AP - hostapd (recommended) > [1] Path to capture file
At this step, i entered any path (i'm on kali linux) and press "enter"
Script return to "Select an access point service" and this is an infinite loop

Same for this options
[1] Captive Portal > [1] Rogue AP - hostapd (recommended) > [1] Path to capture file

Note that [1] Path to capture / [2] Handshake directory (rescan) produce same result


What is the expected behavior?

-> Be creative

It could be launch the captive portal next or prompt for SSL certificate (i suppose)

If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Yes, i'm on another computer but it prompt this
aireplay-ng wlan0mon -9
Trying broadcast probe requests...
Injection is working
Found 9 APs

and then injecting...

Fluxion version:

Paste the output of cat fluxion.sh | grep revision
Latest (git clone 2 hours ago)

Linux version:

Paste the output of cat /proc/version or uname -r
4.6.0-kalil-686-pae

Not detecting rtl8192-fixes ?

Which version of fluxion are you using?

Latest

What distribution of Linux (including the version) are you running it on?

$ uname -a
Linux kali 4.9.0-kali4-amd64 #1 SMP Debian 4.9.30-1kali1 (2017-06-06) x86_64 GNU/Linux

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

Belkin Components F7D2102 802.11n N300 Micro Wireless Adapter v3000 [Realtek RTL8192CU]

Which is the driver for it?

pvaret's rtl8192cu fix

Does it support injection ( output of aireplay-ng -9)

It supported, but not with this driver anymore :
ioctl(SIOCSIWMODE) failed: Invalid argument ioctl(SIOCSIWMODE) failed: Invalid argument Error setting monitor mode on wlan0

General description of your issue along with the steps to reproduce it

Just enter Fluxion and choose a choose a language, then it says : There are no wireless cards, quit...

can't install missing files

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> Quit accidentally


If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> Be creative


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

for new user

for user: install dependece before type: install.sh in fluxion/install

after is all ok!

airmon-ng compatibility problem

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> *Hey buddy I am very sad about my problem that I am trying to Hack Wifi with Fluxion 3 on wifislax with my TL-422G USB adapter. But when I tries to start the attack an error occurred with the message that "Your wireless card is not supported Do you want to continue? Y/N" and then I am unable to perform the attack. Even I have Hacked many wifi before with the same wifi adapter on the old version of fluxion but it gives the error only on the latest version of Fluxion only. I wished that i could perform attack with the latest version of fluxion. If my Wifi adapter is not supported only on latest version of Fluxion then Please tell me what to do? how I can perform my attack on latest fluxion please tell me the solution. Waiting for your response continuously..... Your biggest fan! :) *


Specs

Wireless adapter:

I have TP link adapter: TL-WN422G, driver: nl80211 .

Fluxion version:

*Latest version of fluxion 2 and 3 is giving me an error `

Linux version:

*I am using Wifislax 14.00 something. And I have also tried on Kali linux 2016`

Auto Channel WI-FI router . Vunerable or not ?

Fill in the answers for all of the questions below, OTHERWISE YOUR TICKET WILL BE INSTANTLY CLOSED.

Which version of fluxion are you using?

Newest one

What distribution of Linux (including the version) are you running it on?

Kali Linux 2017

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

TP-LINK TTL-WN722N

Which is the driver for it?

Atheros AR9271-AL1E

Does it support injection ( output of aireplay-ng -9)

YES

General description of your issue along with the steps to reproduce it

I've seen some auto channel WI-FI routers and it's kind of difficult to deauth them, because they constantly changing channels, when I tried to deauth clients of the WI-FI router.

no fake ap bssid

Do you want to request a feature or report a bug?

-> Bug
i updated my fluxion and then when i try it to hack my wifi the deauntication is working but no fake ap, fluxion disconnected me only on my wifi but no fake ap created it.

What is the current behavior?

-> Quit accidentally
its not working.

If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> Be creative


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

Captive Portal attack hangs on AP service start.

Do you want to request a feature or report a bug?

-> Bug

fluxion dont start captive portal

What is the current behavior?

-> Quit accidentally

no

If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.

yes screenshot

What is the expected behavior?

-> Be creative

run fine at handshake but when change mode to hostapd dont start nothing.

If this is a feature request, what is motivation or use case for changing the behavior?


schermata 2017-08-14 alle 10 18 54

Specs

Wireless adapter:

ALFA awus036h

Does it support injection?

root@kali:~# aireplay-ng -9 wlan0
ioctl(SIOCSIWMODE) failed: Device or resource busy
10:25:07 Trying broadcast probe requests...
10:25:07 Injection is working!

Fluxion version:

Paste the output of cat fluxion.sh | grep revision
3.0

Linux version:

4.11.0-kali1-amd64

Cannot get past interface/AP menu

###Feature or Bug:
Bug

###What is the current behavior?
Error occurs when attempting to select wireless interface
When wireless is enabled (airmon-ng stop wlan0mon), it detects the card, though selecting it tells me its in use and to run export FLUXIONDropnet=1. Doing so does nothing upon the rerunning of fluxion.

When wireless is disabled (airmon-ng start [interface]), it does not give me an option to choose a card, instead putting me in the scan for AP menu, upon doing so returns none and says card may not be supported.
Note that killing network-manager (service network-manager stop) returns the same result as above.

###If the current behavior is a bug, please provide the steps to reproduce.
Wireless enabled (Currently connected to a network): http://imgur.com/5qjbgn3l.png
In the above image, my card is given as an option to choose. Attempting so gives me
http://imgur.com/ry7FgUml.png
In which running it and rerunning fluxion gives me the same error.
Wireless disabled (airmon-ng start interface): http://imgur.com/jUX2wZ8l.png
In which I am not given a card selection and am given this menu instead.

###What is the expected behavior?
I would assume the expected behavior is not being stuck in this menu.

###Specs

###Wireless adapter:
Ralink RT2800 / Firmware rt2870.bin / Version 2.3.0 Installed with apt install firmware-ralink
Followed from here: https://wiki.debian.org/rt2800usb

###Does it support injection?

ioctl(SIOCSIWMODE) failed: Device or resource busy
00:56:57 Trying broadcast probe requests...
00:56:57 Injection is working!
00:56:59 Found 3 APs

00:56:59 Trying directed probe requests...
00:56:59 myapmacaddress- channel: 1 - 'myapname'
00:56:59 Ping (min/avg/max): 2.939ms/14.570ms/28.745ms Power: -67.27
00:56:59 30/30: 100%
And two other APs

###Fluxion version:

	FLUXIONOnlineInfo=("version=?\n" "revision=?\n")
	FLUXIONOnlineRevision=$(echo "${FLUXIONOnlineInfo[@]}" | awk -F= 'tolower($1)~/revision/{print $2}')
			echo -ne $CRed"            New revision found! "$CYel

I know that it says "New revision found", however this is a fresh git clone of about 5 minutes before writing this (I redownloaded to make sure it wasn't an issue with my original download). Running fluxion tells me that it is Fluxion 3 version 1.

###Linux version:
Linux version 4.11.0-1-amd64 ([email protected]) (gcc version 6.3.0 20170516 (Debian 6.3.0-18) ) #1 SMP Debian 4.11.6-1 (2017-06-19)

Stuck on removing extraneous interfaces

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> Hangs


If the current behavior is a bug, please provide the steps to reproduce.

image


What is the expected behavior?

-> No hang


Specs

Wireless adapter:

USB3: ALFA AWUS036ACH
Chipset: RTL8812AU

Fluxion version

Latest of aaa0efc

Linux version:

Kali 4.9.0 kali3 amd64

Airmon-ng doesn't support RTL8812AU

Do you want to request a feature or report a bug?

-> Bug

Hey,

as mentioned in many issues before, the program doesn't really support wifi-cards with the RTL8812AU Chipset, because you cant force "airmon-ng start wlan0" on it. So my question is: Were in the bash file i can edit the part were you start "airmon-ng start" with something like this: "ifconfig wlan0 down, iwconfig wlan0 mode monitor, ifconfig wlan0 up". With this option your program would also support those chipsets. I mean my stick supports Injection and monitor mode, but still "airman-ng start" don't work. Just to make it easier to imagine the problem -> When i select the card, the program says that the card isn't supported. I tried to set the card in monitor mode before i start the program, but then the program sticks in the line were it checks for the network cards.

If you don't understand what i want to say, im would be able to give you screenshots and things like that.

Have a nice day and keep up the good work !

PS: Also got the newest Fluxion and Kali-Version.

What is the current behavior?

-> Quit accidentally


If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> Be creative


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

Error: your wireless card isn't supported

Do you want to request a feature or report a bug?

-> Bug

If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.

It keeps appearing after selection to scan all channels
[2] Error: your wireless card isn't supported
Do you want exit? [Yes / No]:

Specs

Wireless adapter:

TP-LINK TL-WN722N

Does it support injection?

Paste the output of aireplay-ng -9

ioctl(SIOCSIWMODE) failed: Device or resource busy
14:27:53 Trying broadcast probe requests...
14:27:53 Injection is working!
14:27:55 Found 14 APs

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

revision=10

Linux version:

Paste the output of cat /proc/version or uname -r

4.9.0-kali4-amd64

I tested it on full kali 2017 also but it's not working.
It was working fine until a month ago.

Unable to Install Fluxion in Kali Linux

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> Unable to Install Fluxion in Kali Linux


If the current behavior is a bug, please provide the steps to reproduce.

-> Check the Screenshot - http://imgur.com/a/833Ja

Unable to Install Fluxion in Kali Linux

Error Code: ./install.sh: line 234: [: too many arguments


Linux version:

Linux version 4.9.0-kali3-amd64 ([email protected]) (gcc version 6.3.0 20170321 (Debian 6.3.0-11) ) #1 SMP Debian 4.9.18-1kali1 (2017-04-04)

dhcpd changed to udhcpd

Simple thing, in the most recent upgrade for Kali, apt-get forces install of udhcpd and will not allow install of dhcpd, Any suggestion for bypass or...

Issue template?

Why? The template doesn't work anymore

<!-- xxxxx --> allows making Github comments that are shown to the user making an issue, but not shown in the post. It's perfect for asking for descriptions that we don't have to then read again when they submitted

Why was it removed?

17183fc

See below for what it looks like. Personally, reading issues with all this junk in there will take a LOT longer to decipher, read, and understand for the admins and other contributors


Fluxion ISSUE Template

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> Quit accidentally


If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> Be creative


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

Wifi Card selection

Fill in the answers for all of the questions below, OTHERWISE YOUR TICKET WILL BE INSTANTLY CLOSED.

Which version of fluxion are you using?

V2 Rev9

What distribution of Linux (including the version) are you running it on?

Linux parrot 4.9.0-parrot25-amd64

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

Broadcom Limited BCM4360 802.11ac Wireless Network Adapter (rev 03) (MBP retina Built-in card)

Which is the driver for it?

driver | = | wl0
driverversion | = | 6.30.223.271 (r587334)

Does it support injection ( output of aireplay-ng -9)

Yes it does:
└──╼ #aireplay-ng -9 prism0
18:46:38 Trying broadcast probe requests...
18:46:40 No Answer...
18:46:40 Found 2 APs

18:46:40 Trying directed probe requests...
18:46:40 54:FA:3E:34:C4:4A - channel: 56 - 'I masked out the AP name for security purposes'
18:46:46 0/30: 0%

18:46:46 90:5C:44:F7:B0:74 - channel: 64 - ' 'I masked out the AP name for security purposes'
18:46:52 0/30: 0%

General description of your issue along with the steps to reproduce it

After the fluxion install I verified that all the dependencies were installed and I managed to successfully start the tool. I selected all channels but it said the wifi card wasn't supported. I had to create a new pseudo wireless interface but then I was able to use all the wifi tools independently. I think the tool would need an option to select your wifi card because I currently use prism0 instead of wlan0

Improvements

Hello everyone!

Not an issue, just would like to know your opinions.

What do you think about putting extra attack vector as soon victim connects to our new AP, checking victims for common exploits, i.e. windows users could be checked for nsa exploits and then we could retrieve saved wifi passwords.

cant open the app

Do you want to request a feature or report a bug?

-> Bug
i cant open the script i try cd fluxion the sudo ./fluxion it say command error not found


What is the current behavior?

-> Quit accidentally


If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> Be creative


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

airmon issue

fluxion was working fine. i hadnt updated it in awhile so i updated it with git and now whenever I start up fluxion, after choosing the language i get this.

/usr/bin/fluxion: line 1472: ./airmon: No such file or directory
/usr/bin/fluxion: line 1473: ./airmon: No such file or directory
There are no wireless cards, quit...

even if i start airmon before i start fluxioni get the same output from fluxion.

UI needs more instructions for the user.

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

No message during handshake


If the current behavior is a bug, please provide the steps to reproduce.

image


What is the expected behavior?

Inform the user on what's happening so they're not confused

[ENCHANTMENT] Captive Portal

It would be better if, in the Captive Portal Page, the languages are given codes for eg EN for English and the table is in the form :
[01] EN Generic Portal

OR

All portal of a language are one below the other
for eg
[1] Generic Portal English
[2] Netgear English
[3] Tp-Link English
[4] Generic Portal Russian
[5] Netgear Russian

It would be easier to choose the correct number

Not create the fake AP (only with a one wifi network)

Which version of fluxion are you using?

Fluxion 2, REV 9

What distribution of Linux (including the version) are you running it on?

Kali linux 3.22.2

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

Qualcomm atheros AR9485 wireless network adapter

Which is the driver for it?

nl80211

Does it support injection ( output of aireplay-ng -9)

Yes

General description of your issue along with the steps to reproduce it

Hello, and thanks for this great program. Has worked perfectly so far, today i found a problem. The program works well all the steps except when he has to create the fake AP. When i select the number of the interface i want, the terminal (like the one in picture) does not appear. Later, however, the 4 terminals appear, but the fake AP is not visible (not create i think). This only happens with a wifi network in particular, Before, however, he created the fake AP Even with this wifi network.
27696800-79390810-5cea-11e7-8208-9aede8940f34

not working properly

Do you want to request a feature or report a bug?

-> Bug
i used the vesion 08 of fluxion its perpectly working but i used to update to 10 version its not working properly dont have a fake ap created no DHCP poping out.

What is the current behavior?

-> Quit accidentally
still the best.


If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> Be creative


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

Does it support injection?

Paste the output of aireplay-ng -9

Fluxion version:

Paste the output of cat fluxion.sh | grep revision

Linux version:

Paste the output of cat /proc/version or uname -r

Can't find captured Handshakes location.There are no captured handshakes

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> It captures handshakes but after that at captive portal no handshakes even after rescan.I checked /root/handshakes directory but It's empty.


If the current behavior is a bug, please provide the steps to reproduce.

-> A great way to do this is to provide screenshots and commands.


What is the expected behavior?

-> No handshakes


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:alfa awus036nha

*Exact model, chipset, and driver versions.*AR9271

Does it support injection?

Yes it supports packet Injection

Fluxion version:3 and revision 0

Linux version:

4.9.0-kali3-amd64

Dependencies need to be updated.

local CLITools=("aircrack-ng" "aireplay-ng" "airmon-ng" "airodump-ng" "airbase-ng" "awk" "curl" "dhcpd" "hostapd" "iwconfig" "lighttpd" "macchanger" "mdk3" "nmap" "php-cgi" "pyrit" "unzip" "xterm" "openssl" "rfkill" "strings" "fuser" "seq" "sed")

I don't think the following are being used in fluxion.sh anymore:

  • strings
  • unzip

[Feature Request] Attack webpage library.

Right now, we have to create our own custom webpage for using with a particular make of router. It's be nice to have a library with community created custom attack webpages. That way, instead of creating a custom page, we could import it if it's already been made by the community or upload our own designs for others to use.

Don't know how feasible it is, but the easiest way would be creating a fluxion website on GitHub and individuals uploading files to it.

Password verification error

Fill in the answers for all of the questions below, OTHERWISE YOUR TICKET WILL BE INSTANTLY CLOSED.

Which version of fluxion are you using?

Newest

What distribution of Linux (including the version) are you running it on?

Kali 2

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

Alfa awus036nh

Which is the driver for it?

Alfa awus036nh Etwork driver

Does it support injection ( output of aireplay-ng -9)

Yes

General description of your issue along with the steps to reproduce it

Created fake AP and captured a handshake that Fluxion verified however when I connect to fake AP and enter the correct key it says incorrect password.

Request

It would be great if someone add broadcom and D-Link router pages.

Issues / Ideas

Since @MPX4132 publish his great code, I noticed some bugs related to the usability. There are some bugs related to os.

  1. Bug [Signal / Power] measurement is incorrectly
    I noticed that right at the beginning. Signal strength goes over 100%. And the power value is negative.

I think the easiest way to fix that, is to increase the power value by 100.

power = $(echo $((power + 100)) )
  1. Bug Incompatible with many different OS
    The next bug is a small bug. It is caused by this line
readarray -t WIAvailableData < <(airmon-ng | grep -P 'wlan\d+' | sed -r 's/[ ]{2,}|\t+/:_:/g')

The main idea is that all interfaces have the name wlanX. This is not true. Many OS like the arch or unstable Debian branches follows the idea of a "random" interface name. To be honest, random is not exactly true because the name is giving by the USB port plugged it. In fact, this produces names like:

sudo airmon-ng         
[sudo] Passwort fΓΌr deltax: 

PHY     Interface       Driver          Chipset

phy0    wlp0s29u1u4     rt2800usb       Ralink Technology, Corp. RT2870/RT3070

This is why no wireless interfaces output was given. My idea was better but it could easier brick in newer versions of airmon-ng.

Another point is that in the arch the xterm terminal package is broken. There is already an issue open but it could take much longer to fix this since the gnome developer decides to replace their c code with rust. In fact, I will look for an alternative. This is only caused by the desktop environment gnome.

  1. Installer is not by default executable
  2. Brackets are too much in web interface function
  3. Languages should get fixed

In fact, the version 3 was great. MPX4132 do his best to make fluxion a way better. These are only small issues and I will fix it at the weekend.

Improvements

  1. Auto handshake check and continue?
  2. Auto resize ap_select output function if essid is oversized

Empty WIFI Monitor

Which version of fluxion are you using?

Latest branch as of 5522c85

What distribution of Linux (including the version) are you running it on?

Kali 2017.1

What wireless adapter are you using?

  • USB3: ALFA AWUS036ACH
  • Chipset: RTL8812AU

Which is the driver for it?

realtek-rtl88xxau-dkms

Does it support injection ( output of aireplay-ng -9)

Tried wlan0 and wlan1, both support injection

x@ghost:~/fluxion$ sudo aireplay-ng -9 wlan0
19:12:11  Trying broadcast probe requests...
19:12:11  Injection is working!
19:12:13  Found 1 AP 

19:12:13  Trying directed probe requests...
19:12:13  50:C7:BA:1C:01:5A - channel: 1 - 'TP-LINK_Smart Plug_015F'
19:12:13  Ping (min/avg/max): 2.403ms/7.006ms/33.810ms Power: -41.00
19:12:13  30/30: 100%

General description of your issue along with the steps to reproduce it

image

After selecting 2, then all channels, WIFI Monitor never shows any clients. But selecting the integrated wifi card wlan1, it will fill in the results no problem. But I need wlan0, my new USB card.

                        WIFI LIST 

 ID      MAC                      CHAN    SECU     PWR   ESSID


 (*) Active clients

        Select target. For rescan type r
[deltaxflux@fluxion]-[~]

UI needs a global "back" button.

Do you want to request a feature or report a bug?

-> Feature


What is the current behavior?

-> When you scan for the first time and you get the wifi list you cannot rescan as before it could be writing "r" you actually need to select random network and select back to rescan


What is the expected behavior?

-> That you can go back with "b" wherever you are


Request

Can anyone please add router login page that asks for a username and password when you open default gateway like neutral one in the following Image so one can grab router credentials.

router page

pyrit breaks when checking saved handshake

Fill in the answers for all of the questions below, OTHERWISE YOUR TICKET WILL BE INSTANTLY CLOSED.

Which version of fluxion are you using?

This one.

What distribution of Linux (including the version) are you running it on?

kali linux live 2017.1
Linux kali 4.9.0-kali3-amd64 #1 SMP Debian 4.9.18-1kali1 (2017-04-04) x86_64 GNU/Linux

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

ALFA AWUS036NHA

Which is the driver for it?

No additional drivers installed

Does it support injection ( output of aireplay-ng -9)

Yes

General description of your issue along with the steps to reproduce it

Issues when trying to reuse saved handshake, fluxion says "Corrupted handshake".
I looked into deeper and it looks like pyrit is crashing when analyzing handshake.

+=================================================================+
When typed : apt install pyrit
pyrit is already the newest version (0.5.1+git20160815-0kali1).
+=================================================================+
When asked to analyze the handshake:
root@kali:~/handshakes# pyrit -r FoxFi66-84:8E:DF:A0:5B:52.cap analyze
Pyrit 0.5.1 (C) 2008-2011 Lukas Lueg - 2015 John Mora
https://github.com/JPaulMora/Pyrit
This code is distributed under the GNU General Public License v3+

Parsing file 'FoxFi66-84:8E:DF:A0:5B:52.cap' (1/1)...
Traceback (most recent call last):
File "/usr/bin/pyrit", line 6, in
pyrit_cli.Pyrit_CLI().initFromArgv()
File "/usr/lib/python2.7/dist-packages/pyrit_cli.py", line 118, in initFromArgv
func(self, **options)
File "/usr/lib/python2.7/dist-packages/pyrit_cli.py", line 167, in new_f
f(*args, **kwds)
File "/usr/lib/python2.7/dist-packages/pyrit_cli.py", line 467, in analyze
parser = self._getParser(capturefile)
File "/usr/lib/python2.7/dist-packages/pyrit_cli.py", line 183, in _getParser
parser.parse_pcapdevice(dev)
File "/usr/lib/python2.7/dist-packages/cpyrit/pckttools.py", line 699, in parse_pcapdevice
for pckt in reader:
File "/usr/lib/python2.7/dist-packages/cpyrit/pckttools.py", line 600, in next
pckt = self.read()
File "/usr/lib/python2.7/dist-packages/cpyrit/pckttools.py", line 588, in read
r = _cpyrit_cpu.PcapDevice.read(self)
IOError: libpcap-error while reading: truncated dump file; tried to read 26 captured bytes, only got 6
root@kali:~/handshakes#
+=================================================================+
959. if [ "$handshakeloc" = "" ]; then
960. deauthforce
961. else
962. if [ -f "$handshakeloc" ]; then
963. pyrit -r "$handshakeloc" analyze &>$flux_output_device
964. pyrit_broken=$?
echo "$pyrit_broken" <------------------------------------------+
965.
966. if [ $pyrit_broken = 0 ]; then
967. Host_SSID_loc=$(pyrit -r "$hand

Added this line to get "pyrit_broken" variable value, ------------------------------------+
and result is "1".
+=================================================================+

Anybody has this issue as well?
Thank you very much.

Templates pack

Hello, this is a pack of 17 templates created by DidyMond (credit him if they are used)
Templates.zip for a Linset italian fork. They are complete for the use with linset, but not compatible (at least at a first attempt) with Fluxion. I tried to change the name folder for each router and indeed they are recognized by Fluxion, and pages even start and are displayed, but the gathered password isn't sent to the script. Is it possible to add them to Fluxion?

Not connecting to the AP?

Fill in the answers for all of the questions below, OTHERWISE YOUR TICKET WILL BE INSTANTLY CLOSED.

Which version of fluxion are you using?

Version 2 revision 1

What distribution of Linux (including the version) are you running it on?

Parrot Security 2.0.5 - Helium

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

ALFA AWUS036H. Driver: rtl8187

Which is the driver for it?

rtl8187

Does it support injection ( output of aireplay-ng -9)

Yes, injection is working just fine.

18:22:32 5E:35:3B:0E:2F:39 - channel: 6 - 'HOMESPOT'
18:22:32 Ping (min/avg/max): 1.554ms/8.243ms/17.450ms Power: -67.35
18:22:32 23/30: 76%
(didn't copy all of the APs my AWUS picked up)

General description of your issue along with the steps to reproduce it

  1. starting fluxion
  2. going through the menu (choosing language, choosing my adapter, picking aps, choosing an ap)
  3. choosing "deauth target"
  4. getting handshake and then checking it.
  5. then creating a SSL cert
  6. Selecting web interface
  7. using number 20 (dutch)
    Everything is created just fine and i can see the ap on my network list but when i try to connect to it, it doesn't connect.. i read the F.A.Q, but when i mean no internet, i mean that it doesn't even want to connect to the AP.
    Could it be with the DHCP configuration file or something? It literally doesn't connect. Any suggestions and any help? I'm at my wits' end, thanks!

at0: ERROR while getting interface flags: No such device

Fill in the answers for all of the questions below, OTHERWISE YOUR TICKET WILL BE INSTANTLY CLOSED.

Which version of fluxion are you using?

rev 9

What distribution of Linux (including the version) are you running it on?

ubuntu 16 64bit and Kail linux 2

What wireless adapter are you using? Exact model and chipset, statements like "internal" and "was working before" are not helpful at all.

ALFA AWUS036H - (Did work)

Which is the driver for it?

rtl8187

Does it support injection ( output of aireplay-ng -9)

No

General description of your issue along with the steps to reproduce it

got it to work for one time now it dose not so i dont know what y

at0: ERROR while getting interface flags: No such device
SIOCSIFADDR: No such device
at0: ERROR while getting interface flags: No such device
SIOCSIFNETMASK: No such device
SIOCSIFMTU: No such device
SIOCADDRT: Network is unreachable

Alfa 036NHA not supported in kali 2017.1?

Do you want to request a feature or report a bug?

-> Bug


What is the current behavior?

-> After interface selection fluxion outputs that Alfa awus036nha is not supported


If the current behavior is a bug, please provide the steps to reproduce.

-> In Kali 2017.1 just run fluxion, select interface and channel to scan you'll get the error


What is the expected behavior?

-> to start the interface in monitor mode and scanning available wifi networks


If this is a feature request, what is motivation or use case for changing the behavior?


Specs

Wireless adapter:

Alfa awus036nha

Does it support injection?

yes it does`

Fluxion version:

latest, cloned today (4/08/2017)

Linux version:

Kali Linux 2017.1 live without any update

run install error

at the last of command sudo ./intaller,sh show that dailog which is give below

fatal: destination path 'revolver' already exists and is not an empty directory.
chmod: cannot access 'revolver/revolver': No such file or directory
mv: cannot stat 'revolver/revolver': No such file or directory

Error: Your wireless card isnt supported AWUS036ACH

Do you want to request a feature or report a bug?

-> Bug

BUG

What is the current behavior?

-> *It is not letting me use my awus036ach..


Specs

Wireless adapter:

Exact model, chipset, and driver versions.

AWUS036ACH
Realtek Semiconductor Corp. RTL8812AU 802.11a/b/g/n/ac WLAN Adapter
Driver 8812au

Does it support injection?

root@Valhalla:~# aireplay-ng -9 wlan0
05:37:41 Trying broadcast probe requests...
05:37:42 Injection is working!
05:37:43 Found 4 APs

Fluxion version:

Paste the output of cat fluxion.sh | grep revision
root@Valhalla:~/fluxion# cat fluxion.sh | grep revision
revision=10
revision_online="$(timeout -s SIGTERM 20 curl "https://raw.githubusercontent.com/FluxionNetwork/fluxion/master/fluxion" 2>/dev/null| grep "^revision" | cut -d "=" -f2)"
if [ -z "$revision_online" ]; then
echo "$revision_online">$DUMP_PATH/Irev
echo -e $red" FLUXION "$white""$version" (rev. "$green "$revision"$white") "$yellow"by "$white" ghost"
revision_online=$(cat $DUMP_PATH/Irev)
echo -e ""$white" [${purple}${revision_online}$white"$transparent"]"
if [ "$revision_online" != "?" ]; then
if [ "$revision" -lt "$revision_online" ]; then
echo -ne $red" New revision found! "$yellow
cp $0 $HOME/flux_rev-$revision.backup

Linux version:

4.9.0-kali4-amd64

AP function is currently broken

Do you want to request a feature or report a bug?

-> Bug

What is the current behaviour?

-> *Acess point interface doesn't get generated

If the current behaviour is a bug, please provide the steps to reproduce.

Sample output while running fluxion

sudo airmon-ng                           (08-19 11:38)

PHY	Interface	Driver		Chipset

phy0	wlp0s26u1u5	rt2800usb	Ralink Technology, Corp. RT2870/RT3070

What is the expected behaviour?

-> Interface wlp0s26u1u5FLXap should get generated

If this is a feature request, what is motivation or use case for changing the behaviour?

Specs

Wireless adapter:

Exact model, chipset, and driver versions.
Driver: rt2800usb
Chipset: Ralink Technology, Corp. RT2870/RT3070

Does it support injection?

Paste the output of aireplay-ng -9
It does.

Fluxion version:

Paste the output of cat fluxion.sh | grep revision
3

Linux version:

Paste the output of cat /proc/version or uname -r
4.12.5-1-ARCH

It will take a look what causes the bug.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.