seb/2024-bsc-sebastian-lenzlinger
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rename journal files into more ISO friendly date format for better sorting.

Browse Source
This commit is contained in:
Sebastian Lenzlinger 2024-05-15 17:14:58 +02:00
parent 7eff5ef555
commit 6a7ab04e1c
9 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
notes/journal/11-03-24-mon.md → notes/journal/2024-03-11-mon.md
View File

0
notes/journal/12-03-24-tue.md → notes/journal/2024-03-12-tue.md
View File

0
notes/journal/15-03-24-fri.md → notes/journal/2024-03-14-fri.md
View File

0
notes/journal/19-03-24-tue.md → notes/journal/2024-03-19-tue.md
View File

0
notes/journal/26-03-2024-Tue.md → notes/journal/2024-03-24-tue.md
View File

0
notes/journal/25-03-24-mon.md → notes/journal/2024-03-25-mon.md
View File

0
notes/journal/26-03-24-tue.md → notes/journal/2024-03-26-tue.md
View File

0
notes/journal/09-04-2024-Tue.md → notes/journal/2024-04-09-tue.md
View File

7
notes/journal/2024-05-08.md → notes/journal/2024-05-08-sun.md
View File

@ -169,4 +169,9 @@ This concludes preparing the wifi card for packet capture in monitor mode.
- These network tools are what is available on fedora 40, on $(uname -r)= 6.8.8 Linux Kernel. It might be that other OSs still use older tools, which are being phased out. But other operating systems might still be using older versions of these commands. For a table on how they match up, see [this](https://www.tecmint.com/deprecated-linux-networking-commands-and-their-replacements/) recent article (July 2023), according to which the old commands are even deprecated in recent Debian and Ubuntu releases. - These network tools are what is available on fedora 40, on $(uname -r)= 6.8.8 Linux Kernel. It might be that other OSs still use older tools, which are being phased out. But other operating systems might still be using older versions of these commands. For a table on how they match up, see [this](https://www.tecmint.com/deprecated-linux-networking-commands-and-their-replacements/) recent article (July 2023), according to which the old commands are even deprecated in recent Debian and Ubuntu releases.
- If smth is not working run `rfkill list` to check device is blocked. If it is, `rfkill unblock 0`, where `0` is the same index used above and represents `phy0` /`phy#0`. - If smth is not working run `rfkill list` to check device is blocked. If it is, `rfkill unblock 0`, where `0` is the same index used above and represents `phy0` /`phy#0`.
- To ensure that [[NetworkManager]] not managing you card, `nmcli device set wlp0s20f0u6 managed no` if the interface is called `wlp0s20f0u6`. Check with `nmcli dev`, the STATE should be "unmanaged". - To ensure that [[NetworkManager]] not managing you card, `nmcli device set wlp0s20f0u6 managed no` if the interface is called `wlp0s20f0u6`. Check with `nmcli dev`, the STATE should be "unmanaged".
- See resources on how to put interface/wifi hardware back into managed mode, if you need the card for personal use. - See resources on how to put interface/wifi hardware back into managed mode, if you need the card for personal use.
# Important
Monitor mode is actually completely useless, unless we can observe the EAPOL handshake. That means the Wifi AP should be using WPA/WPA2 with psk. Also we need to know the SSID and passphrase. So it is still better if we can setup an environment where we can just do port mirroring from the wifi router, or setup ourselves in AP mode, but then we need to be able to bridge to the internet somehow, which I haven't managed reliably. Have done some testing on raspberry pi seemed to work. But raspberry pi sometimes goes to sleep so the AP goes down which means the IoT device loses connection.
If we happen to know the MAC address we need, then in wireshark we can filter `wlan.addr == [MAC]`. In tcpdump we can use the filter