qualcomm_android_monitor_mode

Qualcomm QCACLD WiFi (Android) monitor mode

NOTES

  An update!

  This method will work OUT-of-the-BOX, it seems someone over at CodeAurora actually flipped the switch
  on monitor mode, so the kernel patch isn't really nescessary, only for they on older/unmaintained kernels.

  Great news, less dirty tricks/patching needed.

DEPENDENCIES

  1. A rooted Android environment.
  2. Either compile a kernel yourself (NetHunter chroot works)
  3. WiFi chipset that actually uses the QCACLD driver/firmware.
  
  Older devices/drivers would need the patch from 'files', future kernels of 4.9, 4.14, 4.19
  may have it WORKING from vendor. See "LIST_OF_DEVICES.txt" for known working phones.
  Use issue reports for comments, new information that could help us get a working frame injection to it.

Howto get that MONITORING MODE working

Configure device to deliver 802.11 packets in raw mode. Below is the example of starting monitor mode and channel settings + tcpdump

Start monitor mode on adapter

echo "4" > /sys/module/wlan/parameters/con_mode

Stop monitor mode on adapter

ip link set wlan0 down
echo "0" > /sys/module/wlan/parameters/con_mode
ip link set wlan0 up

Information about frame injection

I've found phones with frame injection support present. The phone is OnePlus 3T with lineageos 17.1, it has the QCACLD-2 driver, which QCACLD-3 replaced. However, finding the solution in QCACLD-2 to port to QCACLD-3 seems like an ok solution instead of fiddling around half blind in QCACLD-3, propably deactivated by Qualcomm.

Thread will be updated.

echo "4" > /sys/module/wlan/parameters/con_mode

Logs / Outputs

• 'iw phy0 info' output is over here

Downloads / Patches

• Android QCACLD-3.0 patch to enable monitor mode - DOWNLOAD HERE
  
  

Credits

• kimocoder

  • Twitter: https://twitter.com/kimocoder

• @Re4son

  • Url: https://github.com/Re4son

• @johanlike (DJY)

  • Url: https://github.com/johanlike

• Qualcomm

  • https://www.qualcomm.com

• CodeAurora

  • https://www.codeaurora.org