Blacklisting MACs from associating to karma

Hi m3m0r3x,
Yes, the new AP module (v1.1) has filters for MACs and SSIDs.
You also need to upgrade Karma and Mana modules.

There are new functionalities in AP module: Picker, Scatter and Polite
( I will write some documentation as soon as I can )

Please notice that FruityWiFi has been updated to v2.3

regards,

Hi m3m0r3x,
If you are using v2.2, you can do a diff to just replace the new files.

another alternative is to do a backup of the modules folder and after install v2.3, replace the modules folder with your backup

regards,

Hi @ all,

I have already tried black-/whitelisting of MACs in the new Version 2.4 of FruityWifi. Unfortunateley only None filtering an Blacklist Filtering works fine. I have a set of 7 Devices wich mac addresses are given to the filtering list. If "filter station" is set to none in the AP module, it works as expected. Every client will connect to mana. If I set it to blacklist, it works, too. All Clients connect to karma except the clients in the filtering list. For Demo purposes I need to connetct only those clients in the filtering list. But this does not work. When I start up karma in whitelist mode, I even get no SSIDs from karma to which the device can connect. Have I done something wrong on configuring te AP module?

Thanx 4 help

greetings

mem

Of course by reading each module php sources I would fully understand where are issues and misunderstanding... But at this point the main benefit of using Fruitywifi (I.e. comfortable and time-saviny GUI for pentesters) would be missing. :-)

Hi xtr4nge,

I'm fine, thanks. Hope your well, too. Thanks for the replay. I tried as you posted. I activated AP and Karma. When I entered the directory and checked the help from hostapd_cli I can't find some of those options or somthing similar. Here is the output:


pi@raspberrypi /usr/share/fruitywifi/www/modules/karma/includes $ sudo hostapd_cli -h
hostapd_cli v1.0
Copyright (c) 2004-2012, Jouni Malinen <j@w1.fi> and contributors

usage: hostapd_cli [-p<path>] [-i<ifname>] [-hvB] [-a<path>] \
                  [-G<ping interval>] [command..]

Options:
  -h           help (show this usage text)
  -v           shown version information
  -p<path>     path to find control sockets (default: /var/run/hostapd)
  -a<file>     run in daemon mode executing the action file based on events
               from hostapd
  -B           run a daemon in the background
  -i<ifname>   Interface to listen on (default: first interface found in the
               socket path)

Commands:
  mib                  get MIB variables (dot1x, dot11, radius)
  sta <addr>           get MIB variables for one station
  all_sta              get MIB variables for all stations
  new_sta <addr>       add a new station
  deauthenticate <addr>  deauthenticate a station
  disassociate <addr>  disassociate a station
  sa_query <addr>      send SA Query to a station
  wps_pin <uuid> <pin> [timeout] [addr]  add WPS Enrollee PIN
  wps_check_pin <PIN>  verify PIN checksum
  wps_pbc              indicate button pushed to initiate PBC
  wps_ap_pin <cmd> [params..]  enable/disable AP PIN
  wps_config <SSID> <auth> <encr> <key>  configure AP
  get_config           show current configuration
  help                 show this usage help
  interface [ifname]   show interfaces/select interface
  level <debug level>  change debug level
  license              show full hostapd_cli license
  quit                 exit hostapd_cli

Perhaps I have to reinstall the module?

regards,

Hi xtr4nge,

thank you. Of course that was my mistake (./hostapd_cli). But I have now experimented a bit. But here i have the same issue like in the web-gui. I set a device as "karma_white_mac"and another device as "karma_black_mac". Without changing the state of karma it works like expected. Both devices connect to karma. When setting up "karma_black" the device in the blacklist can't connect to Karma. The other device can connect. In both modes I get the list off spoofed probe responses (I can see all the SSIDs that shouldn't be there :-) ).

But when I do exact the same with karma_white I get no SSIDs from karma. Neither on the blacklistetd device nor on the whitelisted device.

As mentioned above I will do a Demo whith FruityWifi. For this I will just have a set of demo devices which will connect to it. I will prevent that some devces from the audience will connect to it. Do you have an idea how i can solve this?

regards,

Hi xtr4nge,

thank you very much for your effort. That is exactly what I need. After my first and short test, the modification works fine. Later I will do some deeper tests.

I think you have a copy & paste failure in the Karma and Mana pathes. The config files are in:


[AP] hostapd-karma:
/usr/share/fruitywifi/www/modules/karma/includes/conf/hostapd.conf
/usr/share/fruitywifi/www/modules/karma/includes/conf/hostapd-secure.conf

[AP] hostapd-mana:
/usr/share/fruitywifi/www/modules/mana/includes/conf/hostapd.conf
/usr/share/fruitywifi/www/modules/mana/includes/conf/hostapd-secure.conf



I have just mentioned it for users who want to implement this feature, too.

Thanks again for your help.

regards

mem