Airba.sh - A POSIX-compliant, Fully Automated WPA PSK Handshake Capture Script Aimed At Penetration Testing

Airbash is a POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell (tested on Kali Linux and Cyanogenmod 10.2) and uses aircrack-ng to scan for clients that are currently connected to access points (AP). Those clients are then deauthenticated in order to capture the handshake when attempting to reconnect to the AP. Verification of a captured handshake is done using aircrack-ng. If one or more handshakes are captured, they are entered into an SQLite3 database, along with the time of capture and current GPS data (if properly configured).

After capture, the database can be tested for vulnerable router models using crackdefault.sh. It will search for entries that match the implemented modules, which currently include algorithms to compute default keys for Speedport 500-700 series, Thomson/SpeedTouch and UPC 7 digits (UPC1234567) routers.

Requirements
WiFi interface in monitor mode aircrack-ng SQLite3 openssl for compilation of modules (optional) wlanhc2hcx from hcxtools
In order to log GPS coordinates of handshakes, configure your coordinate logging software to log to .loc/*.txt (the filename can be chosen as desired). Airbash will always use the output of cat "$path$loc"*.txt 2>/dev/null | awk 'NR==0; END{print}', which equals to reading all .txt files in .loc/ and picking the second line. The reason for this way of implementation is the functionality of GPSLogger, which was used on the development device.

Calculating default keys
After capturing a new handshake, the database can be queried for vulnerable router models. If a module applies, the default keys for this router series are calculated and used as input for aircrack-ng to try and recover the passphrase.

Compiling Modules
The modules for calculating Thomson/SpeedTouch and UPC1234567 (7 random digits) default keys are included in src/
Credits for the code go to the authors Kevin Devine and [peter@haxx.in].

On Linux:
gcc -fomit-frame-pointer -O3 -funroll-all-loops -o modules/st modules/stkeys.c -lcrypto
gcc -O2 -o modules/upckeys modules/upc_keys.c -lcrypto

If on Android, you may need to copy the binaries to /system/xbin/ or to another directory where binary execution is allowed.

Usage
Running install.sh will create the database, prepare the folder structure and create shortlinks to both scripts which can be moved to a directory that is on $PATH to allow execution from any location.
After installation, you may need to manually adjust INTERFACE on line 46 in airba.sh. This will later be determined automatically, but for now the default is set to wlan0, to allow out of the box compatibility with bcmon on Android.
./airba.sh starts the script, automatically scanning and attacking targets that are not found in the database. ./crackdefault.sh attempts to break known default key algorithms.
To view the database contents, run sqlite3 .db.sqlite3 "SELECT * FROM hs" in the main directory.

Update (Linux only ... for now):
Airbash can be updated by executing update.sh. This will clone the master branch into /tmp/ and overwrite the local files.

Output
_n: number of access points found
__c/m: represents client number and maximum number of clients found, respectively
-: access point is blacklisted
x: access point already in database
?: access point out of range (not visible to airodump anymore)

The Database
The database contains a table called hs with seven columns.
id: incrementing counter of table entries
lat and lon: GPS coordinates of the handshake (if available)
bssid: MAC address of the access point
essid: Name identifier
psk: WPA Passphrase, if known
prcsd: Flag that gets set by crackdefault.sh to prevent duplicate calculation of default keys if a custom passphrase was used.
Currently, the SQLite3 database is not password-protected.

Download Airbash

More info

1. Hacking Tools For Windows Free Download
2. Pentest Tools
3. Hacking Tools For Windows
4. Hacking Tools Online
5. Pentest Tools Review
6. Computer Hacker
7. Hack Tool Apk No Root
8. Physical Pentest Tools
9. Hacker Tools Online
10. Computer Hacker
11. Hacking Tools Mac
12. Nsa Hack Tools
13. Hacker Security Tools
14. What Are Hacking Tools
15. Hack Apps
16. Hacker Tools For Pc
17. Hacking Tools 2020
18. Hacker Security Tools
19. Hackrf Tools
20. Hacker Tools For Ios
21. Hack Tools For Ubuntu
22. Hacker Tools Apk Download
23. Hack Tools
24. Hacker Tools Github
25. Ethical Hacker Tools
26. Pentest Tools For Android
27. Hack Tools For Pc
28. Hack Tools Mac
29. Pentest Tools Android
30. Hack Tools Online
31. Hack Tools For Pc
32. Hacker Hardware Tools
33. Hak5 Tools
34. Android Hack Tools Github
35. Hack Website Online Tool
36. Hack Tools
37. Hack Tools For Mac
38. Pentest Tools List
39. Hacking Tools For Windows Free Download
40. Pentest Tools For Android
41. How To Install Pentest Tools In Ubuntu
42. Hacking Tools 2020
43. Hacker Tools Windows
44. Hack Tools 2019
45. Pentest Tools Framework
46. Physical Pentest Tools
47. Hacker Tools 2019
48. Best Hacking Tools 2019
49. Hacking Tools Kit
50. Hacker Tools 2019
51. Best Hacking Tools 2019
52. Hacking Tools And Software
53. Pentest Tools Linux
54. Hacking Tools For Beginners
55. Pentest Tools Download
56. Pentest Tools Kali Linux
57. Easy Hack Tools
58. Tools 4 Hack
59. Hack Website Online Tool
60. Pentest Box Tools Download
61. Hack Tools For Windows
62. Hacker Tools Apk Download
63. Github Hacking Tools
64. Pentest Tools Online
65. Hacker Tools 2019
66. Hacking Tools For Windows Free Download
67. Beginner Hacker Tools
68. Hack Tool Apk
69. Kik Hack Tools
70. Pentest Tools Framework
71. Hack Tools For Windows
72. Hacker Tools Apk Download
73. Hacking Tools 2020
74. Growth Hacker Tools
75. Hack Tools 2019