FORUMS

Sunday Debate: How Can We Get a No-Compromise Phone?

Join us in a fun Sunday Debate on Compromises. Come with your opinions and … more

PSA: You Can Optimize Your Note 4’s Recents Menu & RAM

The Note 4 never had the fastest Recents Menu, and despite its 3GB of RAM, … more

XDA Picks: Best Apps of the Week (July 25 – Aug 1)

Apps are at the front and center of any smartphone experience, and with over a … more

Voices Of XDA: Orbiting The Earth With Android

Editor’s note: This week’s feature has been written by forum … more

 View Poll Results: Does it worked for you to calculate the Key?

Yes, right default Key & Connected
 
37 Vote(s)
47.44%
Right default Key, but Key was changed
 
11 Vote(s)
14.10%
No
 
30 Vote(s)
38.46%

[APP][PENTEST][ROOT][2.2+] SpeedKey - EasyBox WPA key recovery + Reaver-WPS v4.00B5

151 posts
Thanks Meter: 275
 
By SOEDI, Senior Member on 8th December 2012, 11:04 AM
Post Reply Subscribe to Thread Email Thread

SpeedKey 3.10R
EasyBox WPA Key recovery
Discontinued due to high risk of abuse.

Also without ROOT:
Default WPA/WPS Pin recovery



ROOT & bcmon supported device only:
Successful Reaver attack with calculated WPS Pin in 20 Seconds!


Info:
EasyBox routers made by Arcadyan are insecure!
It's possible to get the default WPA Key (all EasyBoxes) & WPS Pin (EasyBox A802 & A803) by knowing the MAC of the router.
Knowing the WPSPin you can get the actual WPA Key using Reaver-WPS in less then 20 seconds.
Guess what SpeedKey is able to do...
To use the Reaver feature please look at the Reaver-Support part first.

Don't know how it is somewhere else, but in Germany, Italia, Spain, USA?, UK,....? EasyBox routers are quite frequent.

Credits & used tools:
Original Algorythm(WPA Key)
Wotan.
See: wotan.cc
(SpeedKey uses a slighly modified version of it.)

Algorythm for default WPS Pin:
Stefan Viehböck
See: SEC Consult

Monitor-Mode over bcmon.apk:
Omri Ildis, Ruby Feinstein & Yuval Ofir
See: bcmon.blogspot.com

Reaver-WPS:
Tactical Network Solutions
See: code.google.com/p/reaver-wps/

Reaver-Support:
You need a device with Broadcom bcm4329/bcm4330 wifi chipset (like Nexus 7), and the bcmon.apk.
Get it here: bcmon.apk
How-To:
  1. Install bcmon and SpeedKey.
  2. Run bcmon, if it crashes try a second time.
  3. If all runs fine, click on "enable monitor mode"
  4. Now disable monitor mode again.
  5. Turn wifi on, and start SpeedKey.
  6. After selecting an EasyBox router, click on Reaver default WPS
  7. Profit?
Steps 1 - 4 are only for the installation, they don't have to be repeated once done.

Bugs:
The very new EasyBoxes produced after August 2011 are not compatible.
When the key was changed, it won't work of course, except you are using the new Reaver method and it's a A802 or A803 EasyBox (v 3.10R+)

Changelog:
Code:
1.5: Ads will hide after clicking once on them and pressing back to return to the App. Very good for smaller screens and my AdMob Account;)
1.6: Added Copy & Connect
1.7: Added Info, when no networks are in range
      When ad failed to load, the free screenspace will be used
      Maybe fixed the bug when there are to many networks
      Added new Vendor-IDs to the compatibility list
      Fixed keytextsize for HVGA devices
1.8: Right SSID and Vendor-ID displays green icon, Right SSID or Vendor-ID display yellow icon
       Added some cool Animations:)
1.9: Fixed no networks in range info
       Added automatic copy function
       Fixed green and yellow network recognition
       Speed up scan
       Removed key textbox because of new automatic copy function
1.95: Fixed no networks in range info again
        Disabled animations for armv6 devices
        Optimized startup
2.00: Added signal strengh
        Added routername and signal strengh to the key display box
        Speed up scan a bit
2.10: Fixed signalstrengh bug
2.15: Fixed minor layout bug
2.30: Added settings
        Added abillity to disable/enable animations
        Fixed layout for HD-Smartphones. Thanks to Stefan W.
        If scan fails, try to increase ScanTime in settings
2.35: Animationsettings are now saved properly
2.40: Now more EasyBoxes are compatible
2.50: Added Scanfix for Galaxy S3 Users
2.55: Fixed some critical bugs
2.56: Fixed not properly saving Settings
2.60: Scan is now more stable
2.65: Changed some icons
2.70: Build with new SDK
2.80: Improved EasyBox recognition, now the results with yellow icons should be more accurate.
        Added "About SpeedKey" under settings
2.95: Added periodic ScanMode
        Changed some Icons
        BugFixes
        Android 4.2 layout improvement
2.96: Periodic-ScanMode Bugfix.
        Xperia SP Layoutfix.
        Code cleanup.
3.00: WPS Pin algorithm by Stefan Viehböck added.
3.10R: WPS-Pin-Reaver approach! [ROOT!]
4.00B5: Added new algorithms, now compatible with updated EasyBoxes!!!
SpeedKey is now way more powerful!

Now removed from Google Play by Vodafone after Teltarif informed them! Read this on Teltarif.de (German)


Attention: Hacking of networks is illegal without having the permission of the owner! I am not responsible for any damage etc. this app could cause
This software is only intended to show a big security hole, not to be able to surf in the neighbours Wifi



When someone finds bugs, post it. I'm a big fan of those and love to collect them.
If you like the app, please consider to click on the small AdMob Banner

Tested on:
A. Nexus 7, S.E. Xperia Mini,H. Ideos X5, O. Next, H. Honor, S. Xperia SP.
Attached Thumbnails
Click image for larger version

Name:	Screenshot_2013-09-10-00-07-24.jpg
Views:	6253
Size:	27.2 KB
ID:	2246526   Click image for larger version

Name:	Screenshot_2013-09-10-00-07-58.jpg
Views:	5739
Size:	22.1 KB
ID:	2246527   Click image for larger version

Name:	Screenshot_2013-09-10-00-08-57.jpg
Views:	5542
Size:	35.5 KB
ID:	2246528   Click image for larger version

Name:	Screenshot_2013-09-10-00-08-43.jpg
Views:	5072
Size:	23.3 KB
ID:	2246531   Click image for larger version

Name:	Screenshot_2013-09-10-00-10-46.jpg
Views:	4973
Size:	18.9 KB
ID:	2246532  
Last edited by SOEDI; 3rd December 2014 at 06:11 PM. Reason: Updates
The Following 25 Users Say Thank You to SOEDI For This Useful Post: [ View ]
 
 
8th December 2012, 11:18 AM |#2  
mDroidd's Avatar
Recognized Contributor
Thanks Meter: 1,386
 
Donate to Me
More
Thanks, will try
But I never saw an EasyBox before. I'm from the Netherlands.

Sent from my Galaxy Nexus running Android 4.2 JB
The Following 2 Users Say Thank You to mDroidd For This Useful Post: [ View ]
8th December 2012, 11:26 AM |#3  
OP Senior Member
Thanks Meter: 275
 
More
SSID & MAC recognition
It should show a green icon on compatible networks.
It looks for SSID which startswith Easybox-*, Arcor* and Vodafone* and for a specific Vendor-Id in the MAC.
However sometimes it shows a green icon but the router isn't compatible and vice versa

Have fun
The Following 2 Users Say Thank You to SOEDI For This Useful Post: [ View ]
8th December 2012, 04:50 PM |#4  
OP Senior Member
Thanks Meter: 275
 
More
Thanks
Featurerequests are always welcome!

By the way I also working on adding support for SpeedPort routers. They were produced by Arcadyan as well.
Last edited by SOEDI; 9th December 2012 at 08:46 PM.
The Following 2 Users Say Thank You to SOEDI For This Useful Post: [ View ]
9th December 2012, 08:56 PM |#5  
OP Senior Member
Thanks Meter: 275
 
More
Poll
Added Poll.
Please try and vote so I can make my App better
Last edited by SOEDI; 9th December 2012 at 09:00 PM.
The Following 2 Users Say Thank You to SOEDI For This Useful Post: [ View ]
10th December 2012, 03:31 PM |#6  
OP Senior Member
Thanks Meter: 275
 
More
Update
Updated to v 1.7
Mostly fixes and improvements, details in the changelog.
10th December 2012, 09:16 PM |#7  
OP Senior Member
Thanks Meter: 275
 
More
Update
Updated to v 1.8
Changes in the Changelog

To all from Germany: Please try it out and report if it worked [or not] for you. I don't have a warehouse full of EasyBoxes at home, so need help
The Following User Says Thank You to SOEDI For This Useful Post: [ View ]
11th December 2012, 11:30 PM |#8  
OP Senior Member
Thanks Meter: 275
 
More
Final
Released v 1.9
Now the App is really usable an available on Goolge Play!
13th December 2012, 06:03 PM |#9  
OP Senior Member
Thanks Meter: 275
 
More
Update
Updated to v 2.00
Last edited by SOEDI; 14th December 2012 at 06:27 PM.
The Following User Says Thank You to SOEDI For This Useful Post: [ View ]
17th December 2012, 02:25 PM |#10  
OP Senior Member
Thanks Meter: 275
 
More
Update
Updated to v 2.10
21st December 2012, 09:00 PM |#11  
OP Senior Member
Thanks Meter: 275
 
More
Update
Updated to v 2.15

Read More
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes