• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[APP][2.3+] AircrackGUI 1.2 / for bcm4329 and bcm4330 chipsets

Search This thread

deviato

Member
Nov 6, 2012
32
76
Manduria
[Update]

v1.2.1
-Added packets per second option to aireplay-ng

v1.2
-Added support for new method through bcmon.apk

v1.0.4:
-Put back support for GB2.3.3+

v1.0.3:
-Now it works on android 4.x+

v1.0.2:
-Fixed some bugs
-Uploaded "Logcat" version to debug debian output

Hi to all,
I'd like to present you my app, an aircrack-ng gui for the android phones which support monitor mode, i.e. bcm4329 and bcm4330 based ones.
It relies on the work made by the guys here: http://bcmon.blogspot.com/
thread on xda: http://forum.xda-developers.com/showthread.php?t=1892535


*** Download ***

You can download the apk from the attachment in this post. If you plan to use the new method, you don't need the debian image, and use bcmon.apk to enable monitor mode (download here). For the old method, with compiled module, you need the debian image here:
http://bitshare.com/?f=9qu56f6g
Mirror:
http://ge.tt/9GoRy9e


*** Installation ***

PREREQUISITES:
This program needs a rooted phone, with superuser/supersu, and busybox installed.

INSTRUCTIONS:
-New method (with bcmon.apk)
1. Install bcmon.apk from here http://code.google.com/p/bcmon/downloads/list
2. Enable monitor mode through the app
3. Load aircrackgui app and use it (switch to new method if necessary through settings menu)

-Old method (with pre-compiled module):
1. Extract the content of sdcard.rar to your sd card root, it will be /sdcard/aircrackgui
2. Compile your patched module and copy together with firmware in "module" subfolder (/sdcard/aircrackgui/module)
Put ONLY one module/firmware.
Here is a guide on how to compile the kernel + module (you have to replace the module sources with those from bcmon).

-You can always switch to both methods through settings menu-

Currently these chipsets are supported:

**BCM4329**
Mobile phones: Nexus One, Evo 4G, Desire, Desire Z, Wildfire S
Files needed: fw_bcm4329.bcmon.bin, bcm4329.ko

**BCM4330** (No packet injection)
Mobile phones: Galaxy S II
Files needed: bcm4330_sta.bcmon.bin, dhd.ko

Original work, firmwares, and some bundles here:
http://bcmon.blogspot.com/

3. Install AircrackGUI.apk


*** How to use ***

1. Start the application and click "Enable Monitor Mode" to load the patched drivers.
Once the controls are unlocked, scan for Networks (you can change the time to scan in seconds).
Select the desired Network, and start capturing on the second tab.

2. If you are attacking a WPA/WPA2 network, you can deauthenticate (broadcast/clients) to get the Handshake. Once you get it, you can stop capturing and start cracking, even though it's very slow on
phone, and would be better to do this from a pc. In the application folder is included a wordlist.txt
file that you can replace with your own.
The application picks the last captured file for cracking, so you can start cracking later, until you
don't capture again, however all the files are kept in "capture" subfolder.

3. If you are attacking a WEP network, you can start Fake Authentication on the first tab. You have to
start capturing first, because Fake Auth needs the channel to be fixed.
If the network uses Shared Key Authentication, you have to Deauth a client first to get the XOR file.
Once you get it (you can check the capture tab), restart Fake Auth, and it will use the file automatically.
Then you can start ARP Replaying on the third tab, to increase the IVS Capturing rate.
Finally you can crack the wep key using the same tab.
 

Attachments

  • screenshot-1.jpg
    screenshot-1.jpg
    15.1 KB · Views: 327,072
  • screenshot-2.jpg
    screenshot-2.jpg
    24 KB · Views: 322,314
  • screenshot-3.jpg
    screenshot-3.jpg
    18.7 KB · Views: 83,004
  • AircrackGUI-1.0.4.apk
    197.2 KB · Views: 120,555
  • AircrackGUI-1.2.1.apk
    200 KB · Views: 326,007
Last edited:

wally80

Senior Member
Sep 24, 2008
227
101
Vienna
Ehi. Welcome to XDA, Deviato!
You finally moved to Android development! ;)

Edit: I'll try the app as soon as I put my hands back into my old HTC Desire.

P.S. I know you since 12 years from other "boards".
 
Last edited:
  • Like
Reactions: deviato

shadowslifer

Senior Member
Jan 3, 2013
149
32
Rome
nice one!!!
glad to hear cool programs like aircrack is going on phones.

it will support Xperia 2012 phones??
 

Dennisalex

Senior Member
Jul 21, 2012
541
81
Hope it gets to all phones. Not working.

Sent from my SGH-T989 using xda app-developers app
 

fsi09

Senior Member
Nov 19, 2012
205
77
xda
Could you give me a mirror link ?

I can't download it the file is broken and I must wait before I can download it again.
 

deviato

Member
Nov 6, 2012
32
76
Manduria
Ok, I'll say once for all:
this is only a GUI to aircrack-ng, it needs monitor mode drivers
So, don't ask support for your specific device, go check yourselves if your chipset is capable, from terminal:
Code:
getprop|grep chipset
or, while wifi is active,
Code:
lsmod
Currently only BCM4329 and BCM4330 (partial) are supported, to compile the driver follow the link on the first post, I've not developed the drivers.
 

julle131

Senior Member
Mar 24, 2011
1,476
606
About step 2, is there a way to compile the driver for cm10.1? Bcmon project provides pack for sgs2 cm9, but I prefer 10.1.

I hope I can find a way to dual boot ICS and jb to use this app fully. :good:

Sent from my GT-I9100 using xda app-developers app
 

oshmoun

Senior Member
Aug 29, 2012
1,397
1,458
¯\_(ツ)_/¯
About step 2, is there a way to compile the driver for cm10.1? Bcmon project provides pack for sgs2 cm9, but I prefer 10.1.

I hope I can find a way to dual boot ICS and jb to use this app fully. :good:

Sent from my GT-I9100 using xda app-developers app

You can use an older version of Dorimanx or Siyah. I believe 7.xx versions of Dorimanx can dual boot ICS and JB, but for 4.2.2 you'll have to use an older nightly (before new Mali drivers). If you ever decide to go on with this please report back :good:
 
  • Like
Reactions: julle131

coolnessQ

Senior Member
Aug 8, 2012
955
295
25
Rotterdam
Great i waited 3 min to get the download link when waited i finally downloaded it, my downloaded file is named as sdcard.htm :mad:

posted by the Q Master, woepidooo

---------- Post added at 09:08 PM ---------- Previous post was at 09:07 PM ----------

Why no sg3 -.-'

posted by the Q Master, woepidooo
 

deviato

Member
Nov 6, 2012
32
76
Manduria
Dumb question: tried to rename to .rar?

Great i waited 3 min to get the download link when waited i finally downloaded it, my downloaded file is named as sdcard.htm :mad:

posted by the Q Master, woepidooo

---------- Post added at 09:08 PM ---------- Previous post was at 09:07 PM ----------

Why no sg3 -.-'

posted by the Q Master, woepidooo
 

Top Liked Posts

  • There are no posts matching your filters.
  • 48
    [Update]

    v1.2.1
    -Added packets per second option to aireplay-ng

    v1.2
    -Added support for new method through bcmon.apk

    v1.0.4:
    -Put back support for GB2.3.3+

    v1.0.3:
    -Now it works on android 4.x+

    v1.0.2:
    -Fixed some bugs
    -Uploaded "Logcat" version to debug debian output

    Hi to all,
    I'd like to present you my app, an aircrack-ng gui for the android phones which support monitor mode, i.e. bcm4329 and bcm4330 based ones.
    It relies on the work made by the guys here: http://bcmon.blogspot.com/
    thread on xda: http://forum.xda-developers.com/showthread.php?t=1892535


    *** Download ***

    You can download the apk from the attachment in this post. If you plan to use the new method, you don't need the debian image, and use bcmon.apk to enable monitor mode (download here). For the old method, with compiled module, you need the debian image here:
    http://bitshare.com/?f=9qu56f6g
    Mirror:
    http://ge.tt/9GoRy9e


    *** Installation ***

    PREREQUISITES:
    This program needs a rooted phone, with superuser/supersu, and busybox installed.

    INSTRUCTIONS:
    -New method (with bcmon.apk)
    1. Install bcmon.apk from here http://code.google.com/p/bcmon/downloads/list
    2. Enable monitor mode through the app
    3. Load aircrackgui app and use it (switch to new method if necessary through settings menu)

    -Old method (with pre-compiled module):
    1. Extract the content of sdcard.rar to your sd card root, it will be /sdcard/aircrackgui
    2. Compile your patched module and copy together with firmware in "module" subfolder (/sdcard/aircrackgui/module)
    Put ONLY one module/firmware.
    Here is a guide on how to compile the kernel + module (you have to replace the module sources with those from bcmon).

    -You can always switch to both methods through settings menu-

    Currently these chipsets are supported:

    **BCM4329**
    Mobile phones: Nexus One, Evo 4G, Desire, Desire Z, Wildfire S
    Files needed: fw_bcm4329.bcmon.bin, bcm4329.ko

    **BCM4330** (No packet injection)
    Mobile phones: Galaxy S II
    Files needed: bcm4330_sta.bcmon.bin, dhd.ko

    Original work, firmwares, and some bundles here:
    http://bcmon.blogspot.com/

    3. Install AircrackGUI.apk


    *** How to use ***

    1. Start the application and click "Enable Monitor Mode" to load the patched drivers.
    Once the controls are unlocked, scan for Networks (you can change the time to scan in seconds).
    Select the desired Network, and start capturing on the second tab.

    2. If you are attacking a WPA/WPA2 network, you can deauthenticate (broadcast/clients) to get the Handshake. Once you get it, you can stop capturing and start cracking, even though it's very slow on
    phone, and would be better to do this from a pc. In the application folder is included a wordlist.txt
    file that you can replace with your own.
    The application picks the last captured file for cracking, so you can start cracking later, until you
    don't capture again, however all the files are kept in "capture" subfolder.

    3. If you are attacking a WEP network, you can start Fake Authentication on the first tab. You have to
    start capturing first, because Fake Auth needs the channel to be fixed.
    If the network uses Shared Key Authentication, you have to Deauth a client first to get the XOR file.
    Once you get it (you can check the capture tab), restart Fake Auth, and it will use the file automatically.
    Then you can start ARP Replaying on the third tab, to increase the IVS Capturing rate.
    Finally you can crack the wep key using the same tab.
    6
    Ok, I'll say once for all:
    this is only a GUI to aircrack-ng, it needs monitor mode drivers
    So, don't ask support for your specific device, go check yourselves if your chipset is capable, from terminal:
    Code:
    getprop|grep chipset
    or, while wifi is active,
    Code:
    lsmod
    Currently only BCM4329 and BCM4330 (partial) are supported, to compile the driver follow the link on the first post, I've not developed the drivers.
    4
    I've updated the app to support the new method through bcmon.apk.
    The new method doesn't need the debian image, it uses aircrack suite included in bcmon.apk, but it doesn't work well for my phone, so I left the old method so you can switch back through settings menu.
    You can find it in first post.
    4
    Updated to support variable packets per second in aireplay-ng, useful for sgs2 and other users..


    How would i add a dictionary would i leavs it in my root or change it to fopen?
    You can use only one dictionary file, you must replace the existing one in aircrackgui folder.
    3
    Sorry, my mistake.
    I didn't noticed that in sgs2 (or maybe in cm9?) the interface was wlan0 instead of eth0, now I fixed the code to handle both. Maybe I could do better identification in future versions..
    It's on the first post, you only have to download the apk.

    I have the same thing. I flashed CM9 and downloaded sgs2 bundle. I think I need to get log cat if I get motivation to flash to cm9 again.

    Sent from my GT-I9100 using xda app-developers app