[ROM][Official] Kali NetHunter for the Huawei Nexus 6P LOS17.1

Search This thread

riomenx

Member
Feb 2, 2020
22
3
What is the difference between Kali NetHunter for Huawei Nexus 6P LOS17.1 and Kali NetHunter for Huawei Nexus 6P Android 8.1. There are some important differences in how nethunter works
 

yesimxev

Senior Member
May 8, 2017
494
171
What is the difference between Kali NetHunter for Huawei Nexus 6P LOS17.1 and Kali NetHunter for Huawei Nexus 6P Android 8.1. There are some important differences in how nethunter works
I think los17.1 has some extra wireless adapter drivers + internal bluetooth + external bluetooth adapters support. Also links to correct nexmon lib files are on the los17.1 guide
 

riomenx

Member
Feb 2, 2020
22
3
I think los17.1 has some extra wireless adapter drivers + internal bluetooth + external bluetooth adapters support. Also links to correct nexmon lib files are on the los17.1 guide
There is also Nethanter
Android 10 Pixel for Nexus 6P. I looked through a lot of forums on different smartphones. I have highlighted the perfect smartphone for nethunter. It seems to me that these are smartphones from the oneplus pro line. There are bugs everywhere. Why not use a Raspberry Pi or a regular laptop. After all, wireless wi-fi devices have become long-range. You can use a directional antenna. Someone will say that you can’t put a laptop in your pocket. To actively learn kali linux, you need its full version. Raspberry would be ideal.
 

yesimxev

Senior Member
May 8, 2017
494
171
There is also Nethanter
Android 10 Pixel for Nexus 6P. I looked through a lot of forums on different smartphones. I have highlighted the perfect smartphone for nethunter. It seems to me that these are smartphones from the oneplus pro line. There are bugs everywhere. Why not use a Raspberry Pi or a regular laptop. After all, wireless wi-fi devices have become long-range. You can use a directional antenna. Someone will say that you can’t put a laptop in your pocket. To actively learn kali linux, you need its full version. Raspberry would be ideal.
Yes the same kernel for LOS17.1 works for PE 10. My new favourite is LG V20. Has all the good normal phone features + IR + all NH features and Nexmon will be ported this year! 🎉
 

underworld737

Senior Member
Feb 17, 2022
72
10
OnePlus 9
Hi

I just got this phone yesterday, and I've been flashing between stock Oreo 8.1 and LOS 17.1, and whenever I run the command "Start wlan0 in monitor mode" I get an error "that says in the screenshot" on both, I have nexutil -m2 command runnable in androidSU, am I missing something here? Help would be appreciated
 

Attachments

  • Screenshot_20230321-120845_NetHunter.png
    Screenshot_20230321-120845_NetHunter.png
    153.2 KB · Views: 10

yesimxev

Senior Member
May 8, 2017
494
171
Hi

I just got this phone yesterday, and I've been flashing between stock Oreo 8.1 and LOS 17.1, and whenever I run the command "Start wlan0 in monitor mode" I get an error "that says in the screenshot" on both, I have nexutil -m2 command runnable in androidSU, am I missing something here? Help would be appreciated
The start wlan0 monitor mode is for qcacld3 phones (most phones, nexmon is broadcom), you can edit the custom command by holding it long and add: nexutil -m2. To stop monitor mode: nexutil -m0
 

underworld737

Senior Member
Feb 17, 2022
72
10
OnePlus 9
The start wlan0 monitor mode is for qcacld3 phones (most phones, nexmon is broadcom), you can edit the custom command by holding it long and add: nexutil -m2. To stop monitor mode: nexutil -m0
Ran the command with no error, but when I run "iwconfig wlan0", it says that its still in managed mode, im kinda a newbie at this stuff xd
 

Attachments

  • Screenshot_20230321-144251_NetHunter_Terminal.png
    Screenshot_20230321-144251_NetHunter_Terminal.png
    128.9 KB · Views: 7

yesimxev

Senior Member
May 8, 2017
494
171
Ran the command with no error, but when I run "iwconfig wlan0", it says that its still in managed mode, im kinda a newbie at this stuff xd
Oh yes ignore that. Nexmon works differently. Just use as it is. So when you put into monitor mode. Make sure it's disconnected from any AP. Then use airodump in nh terminal. And whenever you start a new terminal session, use export LD_PRELOAD=kalilibnexmon.so
 

underworld737

Senior Member
Feb 17, 2022
72
10
OnePlus 9
Got this when executing airodump, and did use the export command
 

Attachments

  • Screenshot_20230321-182415_NetHunter_Terminal.png
    Screenshot_20230321-182415_NetHunter_Terminal.png
    338.4 KB · Views: 14

underworld737

Senior Member
Feb 17, 2022
72
10
OnePlus 9
actually, i've picked up a tp-link tl-wn822n "v4" RTL8192EU, and installed the wireless firmware for nethunter "that also has support for both the bcm4358 and the RTL8192EU, don't know if i needed to do anything else because the RTL8192EU shows up in lsusb, but doesn't seem to show up in iwconfig, even after running apt update && apt-get full-upgrade
 

Attachments

  • Screenshot_20230322-180035_NetHunter_Terminal.png
    Screenshot_20230322-180035_NetHunter_Terminal.png
    190.8 KB · Views: 7
  • Screenshot_20230322-180012_NetHunter_Terminal.png
    Screenshot_20230322-180012_NetHunter_Terminal.png
    160.1 KB · Views: 7

yesimxev

Senior Member
May 8, 2017
494
171
unset LD_PRELOAD. (or start new terminal) show me path of .si
actually, i've picked up a tp-link tl-wn822n "v4" RTL8192EU, and installed the wireless firmware for nethunter "that also has support for both the bcm4358 and the RTL8192EU, don't know if i needed to do anything else because the RTL8192EU shows up in lsusb, but doesn't seem to show up in iwconfig, even after running apt update && apt-get full-upgrade
I think that uses RTL8188EUS driver which is not supported by Nexus 6P. I'll try to add now, you messaged me in the right time :D

Anyway, I see the lib name now, I always mix up. do export LD_PRELOAD=libnexmonkali.so instead of kalilibnexmon
 
Last edited:

underworld737

Senior Member
Feb 17, 2022
72
10
OnePlus 9
unset LD_PRELOAD. (or start new terminal) show me path of .si

I think that uses RTL8188EUS driver which is not supported by Nexus 6P. I'll try to add now, you messaged me in the right time :D

Anyway, I see the lib name now, I always mix up. do export LD_PRELOAD=libnexmonkali.so instead of kalilibnexmon
At first the export didnt work, but It was fixed by typing the full path to it rather just the file name, and I got into airodump-ng, but this error keeps flashing, though I have flashed the elemental x kernel for los 17.1, does this conflict with anything with the nethunter kernel?
 

Attachments

  • Screenshot_20230323-064823_Gallery.png
    Screenshot_20230323-064823_Gallery.png
    1.4 MB · Views: 8

yesimxev

Senior Member
May 8, 2017
494
171
At first the export didnt work, but It was fixed by typing the full path to it rather just the file name, and I got into airodump-ng, but this error keeps flashing, though I have flashed the elemental x kernel for los 17.1, does this conflict with anything with the nethunter kernel?
OUCH elemental X kernel doesn't have any nethunter drivers enabled. Use the one from kali.org, or check the one I built now below for your wn722

So, did you run nexutil -m2 in androidSU before exporting?

Also, is squashfs flashed as per the guide?

And check this kernel for your external adapter with rtl8188eus driver https://www.androidfilehost.com/?fid=4279422670115730196
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    @yesimxev Size of original vendor file posted before has size of 88.7MB but now the new file downloaded size is only 18.5 MB, i think this not the original file and only its name is replaced as vendor.squashfs.zip and one more thing I also try to replaced the file id and name in above link and try to download it with wget, but it throw 403 forbidden.
    Ah yes. Ignore, I'll get it soon
    1

    yesimxev


    The squasfs mirror is down.

    Do you mind uploading it please?
  • 18
    https:_gitlab.com_kalilinux_nethunter_build-scripts_kali-nethunter-project_raw_master_images_n...png


    I present to you: Kali NetHunter for the Huawei Nexus 6P LOS17.1

    Kali NetHunter is an Android ROM overlay that turns an ordinary phone into the ultimate Mobile Penetration Testing Platform.
    The overlay includes a custom kernel, a Kali Linux chroot, an accompanying Android application, which allows for easier interaction with various security tools and attacks, as well as a client to the Kali NetHunter App Store.
    Beyond the penetration testing tools arsenal within Kali Linux and the Kali NetHunter App Store, NetHunter also supports several additional classes, such as HID Keyboard Attacks, BadUSB attacks, Evil AP MANA attacks, and much more. For more information about the moving parts that make up NetHunter, check out our NetHunter Components page.
    NetHunter is an open-source project developed by Offensive Security and the community.

    ~ Prerequisites ~
    - TWRP - https://drive.google.com/open?id=1axm3GVbTKypUdQAuYubNknJX4wKRFIec
    - Stock components - vendor, radio, & bootloader img's from the stock oreo 8.1 OPM7.181205.001 Dec 2018 factory image - https://androidfilehost.com/?w=files&flid=286833
    - Magisk – https://forum.xda-developers.com/apps/magisk

    ~~ Downloads ~~
    - NetHunter installer (find the latest release for Nexus 6P): https://www.kali.org/get-kali/#kali-mobile
    - fstab with disabled forceencrpyt - https://www.androidfilehost.com/?fid=4349826312261764572
    - vendor image with patched fw for nexmon - https://www.androidfilehost.com/?fid=8889791610682949885
    - nexmon zip with nexutil and libs - https://www.androidfilehost.com/?fid=8889791610682951480
    - Bootanimation TWRP flasher - https://www.androidfilehost.com/?fid=10763459528675571003

    ~~ How to Install ~~
    - Assuming you have flashed stock radio, vendor, bootloader, TWRP, and Lineage 17.1 (using the steps from https://forum.xda-developers.com/ne...t/rom-lineageos-17-0-nexus-6p-angler-t4012099)
    - Plug in to PC if you haven't done that yet
    - Reboot into TWRP
    - Format data
    - Copy Magisk, NetHunter image, and fstab to USB-C drive or adb push to /sdcard
    - Reboot into bootloader and flash vendor which was unzipped from zip
    Code:
    fastboot flash vendor vendor.squashfs
    - Reboot into TWRP
    - Copy fstab to /system_root/
    Code:
    adb push fstab.angler /sdcard/
    adb shell "twrp mount /system_root && twrp remountrw /system_root && cp /sdcard/fstab.angler /system_root/"
    - Format data
    - Reboot to system & do Android setup
    - Reboot into TWRP
    - Install Nexmon files through adb, from the zip above
    Code:
    twrp mount /system_root && twrp remountrw /system_root && cp /sdcard/libnexmonkali.so /system_root/system/lib64/kalilibnexmon.so && cp /sdcard/libnexmon.so /system_root/system/lib64/ && cp /sdcard/nexutil /system_root/system/xbin/ && chmod a+x /system_root/system/xbin/nexutil
    - Flash NetHunter image
    - Flash Magisk
    - Reboot
    - Run NetHunter app, update from NH Store
    - Reboot

    ~~~ Notes & Updates ~~~
    Nexmon is finally working with injection in Kali Chroot , although EAPOL data is still not (or malformed) in the captures.

    - copy Nexmon libs over to /system/lib64/ from the nexmon.zip (not in TWRP):
    Code:
    adb push libnexmon* /sdcard/ && adb push nexutil /sdcard/
    - and copy using androidsu terminal:
    Code:
    mount -o rw,remount / && cp /sdcard/libnexmonkali.so /system/lib64/kalilibnexmon.so && cp /sdcard/libnexmon.so /system/lib64/ && cp /sdcard/nexutil /system/xbin/ && chmod a+x /system/xbin/nexutil

    For devices which have no space left on system: you need to copy those files before flashing NetHunter. I didn't have this problem, maybe due to GApps pico. Then use the following commands in TWRP:
    Code:
    twrp mount /system_root && twrp remountrw /system_root && cp /sdcard/libnexmonkali.so /system_root/system/lib64/kalilibnexmon.so && cp /sdcard/libnexmon.so /system_root/system/lib64/ && cp /sdcard/nexutil /system_root/system/xbin/ && chmod a+x /system_root/system/xbin/nexutil

    Thanks @JaK3sT for discovering this!

    You have to make sure that wifi is on but you're not connected to an AP.
    Enable in AndroidSU terminal, I created a custom command with
    Code:
    nexutil -m2
    Export LD_PRELOAD for faking ioctl in every Kali Chroot terminal window you open
    Code:
    export LD_PRELOAD=/system/lib64/kalilibnexmon.so

    Hijacker is not fully supported as I've built one with aarch64 tools, but it randomly stops airodump although it's working. Will give it a shot in the future.

    - Mana is being replaced, for the time being you can downgrade iptables in chroot with the following :
    Code:
    wget http://old.kali.org/kali/pool/main/i/iptables/iptables_1.6.2-1.1_arm64.deb
    wget http://old.kali.org/kali/pool/main/i/iptables/libip4tc0_1.6.2-1.1_arm64.deb
    wget http://old.kali.org/kali/pool/main/i/iptables/libip6tc0_1.6.2-1.1_arm64.deb
    wget http://old.kali.org/kali/pool/main/i/iptables/libiptc0_1.6.2-1.1_arm64.deb
    wget http://old.kali.org/kali/pool/main/i/iptables/libxtables12_1.6.2-1.1_arm64.deb
    
    dpkg -i *.deb
    
    apt-mark hold iptables
    apt-mark hold libip4tc0
    apt-mark hold libip6tc0
    apt-mark hold libiptc0
    apt-mark hold libxtables12

    Credits: The Offensive Security Team and the NetHunter community, huge thanks to Re4son & kimocoder for patching the wlan1 insert reboot issue! Long time mystery.
    Another extremely big thanks for @draco42 for patching libnexmon and kalilibnexmon!

    Android Version: 10.0

    XDA: DevDB Information
    Kali Nethunter, Kernel & ROM for the Huawei Nexus 6P

    Contributors
    @Re4son, @kimocoder, @yesimxev, @draco42

    Source Code: https://gitlab.com/kalilinux/nethunter/
    Kernel Source: https://github.com/Re4son/android_kernel_huawei_angler
    5
    yes brother. but what about LOS ??? i'm facing issues with it.

    Beside the annoying forced encryption and the regarding usage of a compatible FBE recovery build of Twrp, which need endlessly to boot up by the way, couldn't I detect any major or even minor problems with the new release.

    I am not a particular fan of LineageOS, never was, but @Re4son hit it with this kernel definitely one wide over the fence. *gg*

    For future reference -

    Statments like "facing issues'" aren't particular information sources.

    I do normally not respond to such posts at all, but _if_ there are actually problems, you should provide logcats, dmesg or adb outputs.

    Otherwise nobody can help you. ;)

    Many heaps

    edit.

    I wanted to underline the above message.

    I waited a long time and two Nexus 6P for these releases.
    In the meantime did I try to help and supported several user all over the Nethunter related kernel releases on XDA over 3 years [no bragging, just fyi!].

    It would be a shame to see this thread overrun with statments like above, or dumb talk in which degree whatever.

    This phone is an old timer with huge hardware issues and the user who use it, didn't run into Blod/battery or complete meltdown failure yet, or are just Nexus addicts and massive fanbois ^^

    With a reference to post from developer like @yesimxev, @Re4son and @kimocoder, who are undoubtedly pros in various areas (kernel development, wireless technology, network, pen-testing..), with limited resources like time, energy and the graciousness of giving a crap^^(scnr), does it go (hopefully) without saying that every user behaves, provides the very easy to obtain, above mentioned, log reports and don't start with such nonsense, if someone "could hack a(sic!) wifi", "my gf's facebook" or any other of these kind of dumb requests.

    I hope we can try to treasure this amazing work for some time longer..

    With best wishes

    UsPdSr
    3
    @yesimxev Size of original vendor file posted before has size of 88.7MB but now the new file downloaded size is only 18.5 MB, i think this not the original file and only its name is replaced as vendor.squashfs.zip and one more thing I also try to replaced the file id and name in above link and try to download it with wget, but it throw 403 forbidden.
    Ah yes. Ignore, I'll get it soon
    2
    For all those who suffered because of my booboo. To install fstab.angler, do:
    Code:
    adb push fstab.angler /sdcard/
    adb shell "twrp mount /system_root && twrp remountrw /system_root && cp /sdcard/fstab.angler /system_root/"
    Then continue with the step format /data
    I'll revise the instructions soon
    2
    @Re4son @kimocoder
    @yesimxev

    Wow, you guys are on fire.

    Congratulations to this great updates and foremost the long outstanding release for the Angler!
    Which under Oreo flawlessly works now.
    No nasty reboots while attempting to set your nic into monitor mode for sure. :good:

    Kimocoder did an amazing job with the port of the new driver.

    I could basically use every adapter. Especially the ac ones.

    You accidentally mixed up some of the links.

    This is the Angler (Huawei Nexus 6P) sub-forum and you posted a link for the installer to the Shamu (Motorola Nexus 6).

    Also did I try to look over the source and compiled it for myself, but after everything was set up, my kernel and chroot & everything else, the usb adapter plug in/out bug occurred again.

    Re4son worked on flair's source 16days ago.

    Where can I find the one you used in the new release?

    Here is the link to the correct one - >

    https://build.nethunter.com/contrib...er-2020.2-pre3-angler-los-ten-kalifs-full.zip

    For the user who aren't comfortable to use Android ten for other reasons, here the recommended stable release for Android Oreo stock - >

    https://build.nethunter.com/contrib...unter-2020.2-pre3-angler-oreo-kalifs-full.zip

    I had no time the last week(s), but I did see a couple of issues who need to be addressed.

    One of the main problems with the new Oreo kernel neither Nexmon or the new QUALCOMM patch from kimocoder and Co. are working.

    I will come back to this when I have the time..

    Firstly great work to the entire team and big thanks for this great contribution :):cowboy: