Widy/Redux
From charlesreid1
Widy redux - returning to the project after a few months away from it.
Getting Back Up And Running
I used Barrier Breaker version of OpenWRT, but I don't recall which firmware platform I picked. I could probably refer to the documentation for the TP-Link router (TP-Link Portable 3G/4G Wireless N Router, TL-MR3040) on the OpenWRT wiki or elsewhere.
To boot up the Widy device:
1. Make sure the Widy is off.
2. Set the Widy into 3G/4G mode.
3. Connect the Widy ethernet port to your computer's ethernet port.
4. Turn the Widy on.
If you monitor your ethernet port, using your operating system's network utility, you should see the Widy device show up at 192.168.1.1. If it shows up at some other IP address, turn the Widy off, ensure it is on 3G/4G mode, and turn it back on.
Once the Widy has turned on, you can ssh to it via ssh root@192.168.1.1, or alternatively you can use the LuCI web interface by going to 192.168.1.1 in a browser. Both use the same root username/password. When you first install OpenWRT, the username is root, there is no password, and you are prompted to set the root password.
The Software
Let's do a quick survey of the software on the Widy.
Programs
OpenWRT Packages with opkg
The following programs are installed through the OpenWRT package manager (can be used via the web interface or via the command line). The interesting ones are:
- aircrack/airdecap/airdecloak
- ettercap
- git
- kismet
- lua
- macchanger
- nmap
- packetforge
- python
- reaver
- ruby
- scapy
- snort
- wget
- iptables/iw
- luci
- uhttpd
The Wireless_Attack_Aircraft_Carrier page on my wiki has more on opkg and how to install software.
Configuration
Nothing was configured to run at boot. Need to look at the OpenWRT wiki to determine how to do that.
Link: https://wiki.openwrt.org/doc/techref/preinit_mount
Add scripts so that when Widy boots it can potentially be running, listening, and monitoring immediately.
Scapy is the route to go here. Aggregation of data on the fly, compiling information locally and sending it out after compiling a bit.
Tcpdump problem
I couldn't use Scapy because I didn't have tcpdump. But tcpdump wasn't in the opkg repositories. I guess I needed an update. Which meant connecting the router to the internet.
First, fire up the Widy's wireless and use it to connect to a wireless network. (Probably best to use the LuCI web interface for that, by going to 192.168.0.1 in your browser).