tnexperts / rougewifi Goto Github PK

#RogueWifi

This is my first contribution as I finally got the courage to start sharing my scripts with the community. I am not a programmer and as you can see, not an advanced script writer, but I put this out here to expand and improve it into something that I could never have done by myself!

I got tired of simple Wifi AP's that don’t act as one you'd find in a public free wifi. So I patched some bash, PHP and javascript together to create RougeWifi. This AP grants the user access after they have authenticated using one of the 4 social media options. The first time they authenticate, I added a message saying "Authentication failed. incorrect username/password" as I noticed some people would enter gibberish. The failed first auth increases likelihood that they will enter the correct credentials.

Once authenticated, both passwords ([first-attempt] and [second-attempt]) are dumped into "passwords.txt" along with the email/username and type of authentication (Google, Facebook, Twitter and Linkedin) and the user is granted access to the internet.

###IMPORTANT: You need to add the line: www-data ALL=(ALL:ALL) NOPASSWD: /sbin/iptables, /usr/sbin/arp to /etc/sudoers.

NOTE: /sbin/ and /usr/sbin/ may not be the locations of arp/iptables for you, so do a "whereis arp && whereis iptables" to find the correct path. dbconnect will need to add routes to iptables based on the MAC address trying to connect, without sudo rights, this will not work.

This was built on Kali Linux on a VM, so most of the dependencies to run this "out of box" are already installed, except hostapd. On other versions of linux you may need to install php5, dnsmasq and some other php dependencies, along with apache2. Also the below assumes you have your internet connection through eth0. If you are using two wifi cards, just switch out eth0 (in my below example) for {internet interface}. The internet facing interface can be wired or wireless, but obviously the AP interface needs to be a wireless interface.

To run:
Just place all files in /var/www/html/, run the command chown www-data:www-data ./* (may want to limit it to the html, js, passwords.txt and images if running on a large network) and run: wifi.sh wlan0 eth0 {network name} without brackets and enjoy!

Some final notes -
If the script runs but you dont see the network, you may have some driver issues with hostapd and alpha - just make sure you have the correct driver set running and it should work. You can troubleshoot by running: hostapd -dd /etc/hostapd/hostapd.conf and looking at the error messages If you want to run this using something other than dnsmasq or using a different IP scheme, you may need to edit index.html and dbconnect.php and remove "10.0.0.1" from a few lines. They aren't really required for this to work.

Special thanks to jeretc for his HTML templates! https://github.com/jeretc/cfp