tim1512 / cylon-raider

Easy and quick automation of Aircrack-ng "Replay-Attacks", targeting WPA2-PSK encrypted routers (most home NATed networks and many small businesses).

Cylon Raider (Formerly Known as Wireless-Attack-Lite)

Easy and quick automation of Aircrack-ng "Replay-Attacks", targeting WPA2-PSK encrypted routers (most home NATed networks and many small businesses). Guaranteed to capture the 4-way handshake of a decently populated router in under 10 minutes (at least 1 or 2 people logged onto router to properly de-authenticate and listen for their creds).

It can also detect and decloak hidden networks (see UNCLOAK HIDDEN NETWORKS) below

Lightweight Version of Wifi-Attack-Autoloader for Outdated Releases of Kali Nethunter Devices(Python 2.7.9) Designed to Capture the Handshake in Record Time so you can GTFO out of that area!

The Wardriver XPress Update

Welcome board the Pwn-Train, bitch. Automated and Error-Free Wireless Auto-Attacks

I bring you a Python script known as Wardriver XPress. It is a updated interactive menu for besside-ng with many of the bug fixes, in particular,

1. A stopgap solution to the "No child processes" error commonly found in besside-ng versions on Kali Linux Installations, by attempting to catch the exception and restart the command automatically
2. Automatic MAC address randomization via macchanger, attempting to alter your burned-in mac address.
3. A demo mode, wireless interface selector. Simply push the button, and it'll ask you which wireless interface you want to run as (a).

Wardriver XPress significantly simplifies and dumbs down the ordeal of setting up a Auto-Attacking Wireless Raspberry Pi. Simply...

1. Power on your Raspberry Pi, Kali Nethunter Device or Kali Linux Mobile Device (laptop/tablet)
2. Plug in your wireless adapter
3. Start Cylon-Raider
4. Select #10 WARDRIVER-XPRESS

After following the on-screen questions, it will automatically run besside-ng for you, and assuming that you have a permanent or long-lasting power source like a cell phone charger pack connected to the Pi, you can drive around the city auto-attacking wireless networks and collecting handshakes with NO additional hands-on intervention from you.

(a) This is meant as a testbed for my rollout of Cylon-Raider for Raspberry Pi.

Unlike Kali Linux, most other Debian derivatives like Debian and Raspian will enumerate your wireless cards by it's unique manufacturer, NOT like Kali Linux, who simplifies it by enumerating your interfaces on a FIFO basis.

For example, Kali Linux names the first wireless adapter it detects as "wlan0, the second as "wlan1", third as "wlan2" and so on. However, Raspbian may rename the same device as "wlx123456" and "wlx123987". It depends on the manufacturer. This causes problems for certain wireless attack toolkits such as Wifi-Phisher, which are designed and tested exclusively on Kali Linux.

A interactive wireless interface selection menu would be useful in making Raider Cross-Platform.

Installation (All Platforms)

Requires root access and Python 2.7.13

1. Git clone our repository

"cd /tmp" "git clone https://github.com/tanc7/Cylon-Raider/"

2. Run the setup.py file

"cd /tmp/Cylon-Raider" "python setup.py"

3. Start Raider by typing in console (with tab-complete)

"Cylon_Raider_Main.py"

RAIDER received a new update on Cinco De Mayo.

1. Substantially simplified menu
2. Less repetitive keystrokes (we all know how lousy tablet keyboards are)
3. Auto-saves the LAST target's parameters in a temporary file(s) to switch between targeting listening and starting your replay-attack (w/o having to enter your data again)
4. Under the hood, substantially improved, and shortened code. In fact most of the modules in the folder are now obsolete. but I keep it around as a resource if I needed something

Raider, will soon be ported to ArmsCommander as a forked-update.

Who is this for?

1. Anyone stuck with a crappy Asus Nexus 7 Tablet (2012), or any other device no longer officially supported by the Kali Nethunter Project. It sure kept my crappy tablet useful!
2. Anyone dissatisfied with modern GUI versions of Wi-Fi Cracking software (Wifite was supposed to be something awesome, but disappointingly it took damn near forever and did not send enough deauth packets), I can capture the 4-Way WPA2-PSK Handshake in seconds using this, a automated version of Airmon/Aircrack. All it requires is a decent amount of clients on a wireless network for it to work.
3. Sometimes referring back to the command line is a way better idea than rely on some GUI crap. It helps you maintain a better understanding of what is going on (or going wrong).

Installation (old, NetHunter Tablets, Asus Nexus 7)

1. Unzip the contents of the repo (or even better, git clone it)

"cd /tmp"

"git clone https://github.com/tanc7/Cylon-Raider"

2. Run autoInstallerNethunter.sh

"cd /tmp/Cylon-Raider/"

"chmod 777 autoInstallerNethunter.sh"

"./autoInstallerNethunter.sh"

This automatically makes the directory, sets the proper permissions, and also drops the primary scripts into your nethunter device's /root directory (see scripts)

Script Features and Recommended Order of Operations

Steps 1 to 5 covered here in this video: https://raw.githubusercontent.com/tanc7/Cylon-Raider/master/How-To-Videos/How-To-Video-Wireless-Attack-Lite.webm

STEP ONE: Insert External wireless card + OTG cable into Nethunter tablet/phone, and run /root/monitorMode.sh

STEP TWO: Run /root/scanMode.sh, wait patiently for all wireless APs to show up, press Ctrl+C to freeze it and copy/paste the BSSID/MAC of the device you want to capture the handshake of

STEP THREE: Run /root/targetedMode.sh, enter the Channel and BSSID of the device you are targeted

STEP FOUR: Open another nethunter terminal and run /root/replayAttack.sh, usually between 100 to 2000 packets is recommended

STEP FIVE: It's done when you see on the top right corner of the terminal "WPA Handshake: BSSID". You can GTFO out of there now

GO HOME: And start cracking that password with /root/crack_WPA_handshake.sh, you do not need to be around the attacked AP anymore. Not until you crack that password!

Cracking handshake covered here: https://raw.githubusercontent.com/tanc7/Cylon-Raider/master/How-To-Videos/How-To-Crack-Handshake.webm

Other Scripts Below

UNCLOAK HIDDEN NETWORKS:

Adopted from Violent Python, /root/hiddenNetworkSniffer.sh, give it some time. First it'll detect the BSSID, and then a few minutes later it'll reveal the SSID. The name of the SSID isn't the important part though, and the owner may as well have changed it. To me, it's the BSSID/MAC that counts

CREDIT CARD SNIFFER:

Should be used either with Monitor Mode On, OR, even better, after you cracked the password and logged back into their network.