Welcome to XDA

Search to go directly to your device's forum

Register an account

Unlock full posting privileges

Ask a question

No registration required
View Poll Results: Does it worked for you to calculate the Key?
Yes, right default Key & Connected 27 40.30%
Right default Key, but Key was changed 11 16.42%
No 29 43.28%
Voters: 67. You may not vote on this poll

Post Reply

[APP][PENTEST][ROOT][2.2+] SpeedKey - EasyBox WPA key recovery + Reaver-WPS v4.00B5

OP SOEDI

8th December 2012, 12:04 PM   |  #1  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011

SpeedKey 3.10R
EasyBox WPA Key recovery
Discontinued due to high risk of abuse.

Also without ROOT:
Default WPA/WPS Pin recovery



ROOT & bcmon supported device only:
Successful Reaver attack with calculated WPS Pin in 20 Seconds!


Info:
EasyBox routers made by Arcadyan are insecure!
It's possible to get the default WPA Key (all EasyBoxes) & WPS Pin (EasyBox A802 & A803) by knowing the MAC of the router.
Knowing the WPSPin you can get the actual WPA Key using Reaver-WPS in less then 20 seconds.
Guess what SpeedKey is able to do...
To use the Reaver feature please look at the Reaver-Support part first.

Don't know how it is somewhere else, but in Germany, Italia, Spain, USA?, UK,....? EasyBox routers are quite frequent.

Credits & used tools:
Original Algorythm(WPA Key)
Wotan.
See: wotan.cc
(SpeedKey uses a slighly modified version of it.)

Algorythm for default WPS Pin:
Stefan Viehböck
See: SEC Consult

Monitor-Mode over bcmon.apk:
Omri Ildis, Ruby Feinstein & Yuval Ofir
See: bcmon.blogspot.com

Reaver-WPS:
Tactical Network Solutions
See: code.google.com/p/reaver-wps/

Reaver-Support:
You need a device with Broadcom bcm4329/bcm4330 wifi chipset (like Nexus 7), and the bcmon.apk.
Get it here: bcmon.apk
How-To:
  1. Install bcmon and SpeedKey.
  2. Run bcmon, if it crashes try a second time.
  3. If all runs fine, click on "enable monitor mode"
  4. Now disable monitor mode again.
  5. Turn wifi on, and start SpeedKey.
  6. After selecting an EasyBox router, click on Reaver default WPS
  7. Profit?
Steps 1 - 4 are only for the installation, they don't have to be repeated once done.

Bugs:
The very new EasyBoxes produced after August 2011 are not compatible.
When the key was changed, it won't work of course, except you are using the new Reaver method and it's a A802 or A803 EasyBox (v 3.10R+)

Changelog:
Code:
1.5: Ads will hide after clicking once on them and pressing back to return to the App. Very good for smaller screens and my AdMob Account;)
1.6: Added Copy & Connect
1.7: Added Info, when no networks are in range
      When ad failed to load, the free screenspace will be used
      Maybe fixed the bug when there are to many networks
      Added new Vendor-IDs to the compatibility list
      Fixed keytextsize for HVGA devices
1.8: Right SSID and Vendor-ID displays green icon, Right SSID or Vendor-ID display yellow icon
       Added some cool Animations:)
1.9: Fixed no networks in range info
       Added automatic copy function
       Fixed green and yellow network recognition
       Speed up scan
       Removed key textbox because of new automatic copy function
1.95: Fixed no networks in range info again
        Disabled animations for armv6 devices
        Optimized startup
2.00: Added signal strengh
        Added routername and signal strengh to the key display box
        Speed up scan a bit
2.10: Fixed signalstrengh bug
2.15: Fixed minor layout bug
2.30: Added settings
        Added abillity to disable/enable animations
        Fixed layout for HD-Smartphones. Thanks to Stefan W.
        If scan fails, try to increase ScanTime in settings
2.35: Animationsettings are now saved properly
2.40: Now more EasyBoxes are compatible
2.50: Added Scanfix for Galaxy S3 Users
2.55: Fixed some critical bugs
2.56: Fixed not properly saving Settings
2.60: Scan is now more stable
2.65: Changed some icons
2.70: Build with new SDK
2.80: Improved EasyBox recognition, now the results with yellow icons should be more accurate.
        Added "About SpeedKey" under settings
2.95: Added periodic ScanMode
        Changed some Icons
        BugFixes
        Android 4.2 layout improvement
2.96: Periodic-ScanMode Bugfix.
        Xperia SP Layoutfix.
        Code cleanup.
3.00: WPS Pin algorithm by Stefan Viehböck added.
3.10R: WPS-Pin-Reaver approach! [ROOT!]
4.00B5: Added new algorithms, now compatible with updated EasyBoxes!!!
SpeedKey is now way more powerful!

Now removed from Google Play by Vodafone after Teltarif informed them! Read this on Teltarif.de (German)


Attention: Hacking of networks is illegal without having the permission of the owner! I am not responsible for any damage etc. this app could cause
This software is only intended to show a big security hole, not to be able to surf in the neighbours Wifi



When someone finds bugs, post it. I'm a big fan of those and love to collect them.
If you like the app, please consider to click on the small AdMob Banner

Tested on:
A. Nexus 7, S.E. Xperia Mini,H. Ideos X5, O. Next, H. Honor, S. Xperia SP.
Attached Thumbnails
Click image for larger version

Name:	Screenshot_2013-09-10-00-07-24.jpg
Views:	4505
Size:	27.2 KB
ID:	2246526   Click image for larger version

Name:	Screenshot_2013-09-10-00-07-58.jpg
Views:	4147
Size:	22.1 KB
ID:	2246527   Click image for larger version

Name:	Screenshot_2013-09-10-00-08-57.jpg
Views:	3954
Size:	35.5 KB
ID:	2246528   Click image for larger version

Name:	Screenshot_2013-09-10-00-08-43.jpg
Views:	3686
Size:	23.3 KB
ID:	2246531   Click image for larger version

Name:	Screenshot_2013-09-10-00-10-46.jpg
Views:	3597
Size:	18.9 KB
ID:	2246532  
Last edited by SOEDI; 3rd December 2014 at 07:11 PM. Reason: Updates
The Following 24 Users Say Thank You to SOEDI For This Useful Post: [ View ]
8th December 2012, 12:18 PM   |  #2  
mDroidd's Avatar
Recognized Contributor
Thanks Meter: 1,386
 
1,833 posts
Join Date:Joined: Aug 2011
Donate to Me
Thanks, will try
But I never saw an EasyBox before. I'm from the Netherlands.

Sent from my Galaxy Nexus running Android 4.2 JB
The Following 2 Users Say Thank You to mDroidd For This Useful Post: [ View ]
8th December 2012, 12:26 PM   |  #3  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
SSID & MAC recognition
It should show a green icon on compatible networks.
It looks for SSID which startswith Easybox-*, Arcor* and Vodafone* and for a specific Vendor-Id in the MAC.
However sometimes it shows a green icon but the router isn't compatible and vice versa

Have fun
The Following 2 Users Say Thank You to SOEDI For This Useful Post: [ View ]
8th December 2012, 05:50 PM   |  #4  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Thanks
Featurerequests are always welcome!

By the way I also working on adding support for SpeedPort routers. They were produced by Arcadyan as well.
Last edited by SOEDI; 9th December 2012 at 09:46 PM.
The Following 2 Users Say Thank You to SOEDI For This Useful Post: [ View ]
9th December 2012, 09:56 PM   |  #5  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Poll
Added Poll.
Please try and vote so I can make my App better
Last edited by SOEDI; 9th December 2012 at 10:00 PM.
The Following 2 Users Say Thank You to SOEDI For This Useful Post: [ View ]
10th December 2012, 04:31 PM   |  #6  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Update
Updated to v 1.7
Mostly fixes and improvements, details in the changelog.
10th December 2012, 10:16 PM   |  #7  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Update
Updated to v 1.8
Changes in the Changelog

To all from Germany: Please try it out and report if it worked [or not] for you. I don't have a warehouse full of EasyBoxes at home, so need help
The Following User Says Thank You to SOEDI For This Useful Post: [ View ]
12th December 2012, 12:30 AM   |  #8  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Final
Released v 1.9
Now the App is really usable an available on Goolge Play!
13th December 2012, 07:03 PM   |  #9  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Update
Updated to v 2.00
Last edited by SOEDI; 14th December 2012 at 07:27 PM.
The Following User Says Thank You to SOEDI For This Useful Post: [ View ]
17th December 2012, 03:25 PM   |  #10  
OP Senior Member
Thanks Meter: 217
 
130 posts
Join Date:Joined: May 2011
Update
Updated to v 2.10

Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes