Feature Request - Display and capture specified SSIDs

[h4ckninja]

In a very noisy environment, when assessing a network, it may be difficult to find what you need with lots of APs. There’s the ability to list channels you want with -c but that information may not be known.

Instead, I’d like to see something like -t but for displaying and capturing only the desired SSIDs.

[Ragnt]

-t works with SSIDs already, to include globbing. https://github.com/Ragnt/AngryOxide/wiki/1.-User-Guide#targets

…

On Thu, Nov 7, 2024 at 3:17 AM, h4ckNinja ***@***.***(mailto:On Thu, Nov 7, 2024 at 3:17 AM, h4ckNinja <<a href=)> wrote: In a very noisy environment, when assessing a network, it may be difficult to find what you need with lots of APs. There’s the ability to list channels you want with -c but that information may not be known. Instead, I’d like to see something like -t but for displaying only the desired SSIDs. — Reply to this email directly, [view it on GitHub](#48), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AF4YMEWWNXZFD5SNZUWOPZLZ7MO2VAVCNFSM6AAAAABRKTPAQ6VHI2DSMVQWIX3LMV43ASLTON2WKOZSGY2DAMRTGE2DKMI). You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[h4ckninja]

Sorry, I should have clarified.

When attacks are disabled and notransmit is passed, it’d be nice to capture data from only the specified networks to hopefully have a better chance of seeing handshakes with the channel hopping. In a recent assessment, there were 50+ SSIDs but only a small handful were ones that belonged to my client.

This may be a separate issue, but if I pass -t, it attempts to deauth despite turning off transmit and deauth attacks when starting AO.

[Ragnt]

So, you are asking specifically for a display filter? The -t takes priority over notransmit because they are mutually exclusive as targeting is only for enabling transmitting to that network. AO isn’t doing any filtering, as more data is always better and the only filtering that would be worth it would be BPF on the socket itself (which isn’t available as a design decision). The reason a display filter isn’t available is because I have migrated to a new code base and the current AO is pretty much only getting bug fixes from this point forward. But the new code base will have display filtering in the UI. I know this doesn’t solve your problem, just trying to explain why it isn’t there in the current version.

…

On Thu, Nov 7, 2024 at 1:03 PM, h4ckNinja ***@***.***(mailto:On Thu, Nov 7, 2024 at 1:03 PM, h4ckNinja <<a href=)> wrote: Sorry, I should have clarified. When attacks are disabled and notransmit is passed, it’d be nice to capture data from only the specified networks to hopefully have a better chance of seeing handshakes with the channel hopping. In a recent assessment, there were 50+ SSIDs but only a small handful were ones that belonged to my client. This may be a separate issue, but if I pass -t, it attempts to deauth despite turning off transmit and deauth attacks when starting AO. — Reply to this email directly, [view it on GitHub](#48 (comment)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AF4YMEU7MYA4RBHBMEDIH6TZ7OTPVAVCNFSM6AAAAABRKTPAQ6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRSHEYDCMJUHA). You are receiving this because you commented.Message ID: ***@***.***>