From charlesreid1

m (Admin moved page Demo/Capture to Experiment2)
Line 1: Line 1:
=Wireless Capture=
=Experiment 2 Overview=


Stringing together the pieces:
Experiment 2 focuses on constructing a single step in the data pipeline: automating data acquisition from a sensor to run an experiment.


Here is the single-step, high level version of what we are doing. This is essentially one single step in the data pipeline.
Experiment Summary:
* Sensor hardware: Raspberry Pi that can run a boot script to collect data
* The Raspberry Pi runs a boot script that starts a Python script that puts the wireless card in monitor mode and uses airodump-ng to collect wireless network data.


To get more specific:
Materials:
* Be able to power on the Raspberry Pi
* Sensor hardware - in this case, a single Raspberry Pi with a wireless card
* Be able to remotely connect to the Raspberry Pi via SSH
* Python script that controls wireless card, airodump-ng processes
* Be able to control a wireless card from the Raspberry Pi via command line
* Boot script that calls Python script on boot
* Be able to start and stop a wireless card using Python
* Be able to start and stop airodump process using Python


Putting all the pieces together, here is how the process will look:
Methods:
* Plug a wireless card into the Pi (no power)
* Remotely connect to Raspberry Pi via SSH
* Plug the Pi into power
* Create Python script that controls wireless card and starts airodump-ng process for specified amount of time
* Boot script activates Python script
* Start/stop airodump processes so CSV files are created at N-minute or N-second intervals
* Python script identifies onboard hardware
* Create boot script that runs Python script
* Python script begins running airdoump at 1 minute intervals
* (optional) Python script connects to remote command-and-control server.
* (optional) stunnel trickiness


=Implementation=
=Implementation=

Revision as of 18:14, 27 February 2016

Experiment 2 Overview

Experiment 2 focuses on constructing a single step in the data pipeline: automating data acquisition from a sensor to run an experiment.

Experiment Summary:

  • The Raspberry Pi runs a boot script that starts a Python script that puts the wireless card in monitor mode and uses airodump-ng to collect wireless network data.

Materials:

  • Sensor hardware - in this case, a single Raspberry Pi with a wireless card
  • Python script that controls wireless card, airodump-ng processes
  • Boot script that calls Python script on boot

Methods:

  • Remotely connect to Raspberry Pi via SSH
  • Create Python script that controls wireless card and starts airodump-ng process for specified amount of time
  • Start/stop airodump processes so CSV files are created at N-minute or N-second intervals
  • Create boot script that runs Python script

Implementation

We'll assume you can connect to the Pi via SSH.

Passwordless Login Raspberry Pi

Set up passwordless login following http://charlesreid1.com/wiki/SSH#Passwordless_Login

Then define the following alias in your .bashrc or wherever:

alias pi="pi"
function pi() {
  ssh-agent > ~/ssh.file # env vars in ssh.file 
  chmod +x ~/ssh.file # execute file
  ~/ssh.file > /dev/null
  rm -f ~/ssh.file
  export IP="10.0.0.4"
  ssh -Y root@${IP} # the actual ssh call
}

Now you can connect to the pi by typing:

$ pi

Test Startup Service

Create a test startup service by doing the following.

Create a custom startup script in /etc/init.d/custom-script with the following contents:

root@kali:/etc/init.d# cat custom-script 
#! /bin/sh

### BEGIN INIT INFO
# Provides:		custom-script
# Required-Start:	$local_fs $remote_fs
# Required-Stop:	$local_fs $remote_fs
# Default-Start:	2 3 4 5
# Default-Stop:		0 1 6
# Short-Description:	Here ya go buddy, custom script
### END INIT INFO

set -e

touch /root/ohai

exit 0

Make the script executable with chmod +x custom-script

Make sure this is linked in the proper rcN.d/ folders by running update-rc.d custom-script defaults.

Now make sure there's no file rm /root/ohai and then run reboot. Once you reboot, you should see a file named ohai in the root directory.

Real Startup Service

Create a real startup service that will start capturing wifi data on boot. Assume wifi card is wlan0. More info on Raspberry Pi startup service here: https://charlesreid1.com/wiki/RaspberryPi/Reverse_SSH

Starting with the Python script that will run airodump-ng and capture wifi data into CSV files:

capture_wifi_data.py

import subprocess
import os
import time
from datetime import datetime

# each experiment will be Nhours in duration
Nhours = 2

# each CSV file will be Nseconds in duration
Nseconds = 15

# figure out how many files there will be
Nfiles = (Nhours*3600)/Nseconds

# create a unique file prefix for this experiment
prefix = datetime.now().strftime('%Y-%m-%d_%H-%m')

print "About to put card in monitor mode."
subprocess.call(['ifconfig','wlan0','down'])
subprocess.call(['iwconfig','wlan0','mode','monitor'])
subprocess.call(['ifconfig','wlan0','up'])
print "Done."

for i in range(Nfiles):

    # construct the airodump command and pipe all its output to /dev/null so it doesn't blow up the syslog
    FNULL = open(os.devnull,'w')
    the_cmd = ['airodump-ng','wlan0','-w',prefix,'--output-format','csv']

    # call it
    p = subprocess.Popen(the_cmd,stdout=FNULL, stderr=subprocess.STDOUT)

    # wait for it
    time.sleep(Nseconds)

    # aaaaand bail
    p.kill()

print "Success!"

This python script will run airodump in a way that redirects all of its output to /dev/null. THIS IS EXTREMELY IMPORTANT. If you don't redirect stdout, it will go into your syslog, and you will have 500 MB of airodump-ng output (refreshed/printed every second, unless you turn it off) in /var/log/syslog. Whoops.

That's the reason for the stdout/stderr redirects.

Now you can create a startup service to launch this Python script in the background:

/etc/init.d/capture-wifi-data

#! /bin/sh

### BEGIN INIT INFO
# Provides:             capture-wifi-data
# Required-Start:       $local_fs $remote_fs
# Required-Stop:        $local_fs $remote_fs
# Default-Start:        2 3 4 5
# Default-Stop:         0 1 6
# Short-Description:    Capture wifi data.
### END INIT INFO

set -e


case "$1" in
  start)
        cd /root/wifi_data
        /usr/bin/python capture_wifi_data.py
        ;;
  stop)
        pkill airodump-ng
        ;;
  *)
        exit 1
        ;;

esac

exit 0

You can enable the script with update-rc.d capture-wifi-data defaults. This will run a two-hour experiment, beginning at the point the Pi is plugged in.

More information at Kali Raspberry Pi/Startup Services