Got a great deal on some Chamberlain MyQ wifi garage door openers recently. As I’m setting them up, I really want to see what kind of conversations they have, so I’ll be making a few notes. As usual, I’ll be working with my VM setup, using Kali in this case.
I have a Netis WF2120 USB wireless adapter that I’ll be using under Kali. The vendor/product code is 0bda:8176. Planning to use Kali as an AP. I installed hostapd on Kali with ‘apt-get install hostapd’. Added a USB filter to pass the Netis through to the guest with ‘vboxmanage usbfilter add 2 –target kali –name NetisWIFI –vendorid 0x0bda –productid 0x8176’. After shutting down and restarting the VM, my wireless adapter was available as wlan0.
Enabled root login for SSH on my Kali box as VRDE… sucked. Slow and very unresponsive.
Created /etc/hostapd/hostapd.conf with approximately the following contents:
ssid=TheSSIDOfYourChoiceWillEndYourLifeTonight
wpa_passphrase=YeahPostThat
ctrl_interface=/var/run/hostapd
interface=wlan0
driver=rtl8192cu
channel=1
wpa=2
wpa_key_mgmt=WPA-PSK
Edited /etc/default/hostapd and configured ‘DAEMON_CONF=”/etc/hostapd/hostapd.conf”‘.
Attempted to start the hostapd service, got “Line 5: invalid/unknown driver ‘rtl8192cu'”.
Tried editing NetworkManager.conf and adding a keyfile configuration to exclude the MAC of the device, followed by restarting /etc/init.d/network-manager, without much success. Yielded same error.
Ran a ‘modprobe -r rtl8192cu’ and attempted to restart the hostapd service with the same error. Tried changing the “driver=” line to ‘driver=rtl871xdrv’ with the same results as well.
Remarked the “driver=” line in hostapd.conf and attempted to restart the service; got a little further, but still did not seem to start.
Went back to the instructions at https://bogeskov.dk/UsbAccessPoint.html. The ‘apt-get install linux-headers’ was not successful on my platform, so ran ‘apt-get install linux-headers-4.6.0-kali1-amd64’ instead, which was already installed in my case. Created and cd’ed to an rtl directory, then ran ‘git clone https://github.com/dz0ny/rt8192cu.git’. Attempt to make drivers failed.
Ran an ‘apt-get update’ and ‘apt-get upgrade’ to see if I could get around the issue. Seem to be issues with the 4.8.x kernel on Kali as well; system fails to boot using that kernel. Have to come back to this one later, will create another post for hostapd with the rtl8192cu and see if I can come up with a better way to work around that problem.
Might be useful to take a look for the referenced article on burp from http://cybergibbons.com/security-2/quick-and-easy-fake-wifi-access-point-in-kali/ once I get hostapd on solid footing on its own (which is getting closer).
Additional Links
- https://iotsecurity.eecs.umich.edu/img/Paper27_CameraReady_SmartThings_Revised_IEEEGen.pdf
- Security Analysis of Emerging Smart Home Applications paper
