ownlan 0.4.4 → 0.4.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6d0f4a63473567f71cdcb6e4869a44a04b6308cd
-  data.tar.gz: caf3f465a04d35f6e6c8b2dd5c57851634e70bcb
+  metadata.gz: 423200c7e995f9c76363db774bd44b1649044bc6
+  data.tar.gz: f3632b3703004e36c68b88e389cf6919275e8da3
 SHA512:
-  metadata.gz: db4e69f3cebbbbbb1342a220f624db3bf207ecca0137091640fdb1eae155b5efea3660f4f051e7aa363ff45b9872414ce6f304976217b0f4f63a1a54cd2e3ef5
-  data.tar.gz: b88d856f4dd21c3f1b37d1627a3fe11c9c11c0eb66642c14e44dcb379d41ad69ba2473255fb8f7c3b4eb268705653fcf05f062f4c3467d3955d6f6307411e3a8
+  metadata.gz: b5cb7d396b4e4adfe0ab46011ebc80d3c51a75c1b6281c24200b2a805465c9814b72400924b24454264ed1166e14298dabd9a6eaf0be8ec7b48c6ae0fdb5a184
+  data.tar.gz: fb5cde39ba8533744343769b4b2039f5253b916068e3e41546b7437adb672b1d47e6634963cc3c4613deab606229a59534fe0502f12f82d0d72b449e614fb4fa

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ownlan (0.4.4)
+    ownlan (0.4.6)
       activesupport
       packetfu
       trollop

data/README.md

@@ -1,7 +1,12 @@
 # Ownlan
 
+[![Code Climate](https://codeclimate.com/github/shideneyu/ownlan/badges/gpa.svg)](https://codeclimate.com/github/shideneyu/ownlan)
+
 __Ownlan__ aims to be a simple, concise and useful pentesting LAN poisoning suite, Written in ``Ruby`` and using ``PacketFU`` for reading and sending the packets off the wire. I decided to make this suite of tools mainly due do to the lack of existing tools on Linux, on top of helping me understanding the whole process behind the scene. OwnLan got uniques features, with some exclusives and excitings attacks probably never ever used on a (pentesting) network.
 
+
+![ownlan_blob](http://image.noelshack.com/fichiers/2016/04/1453863451-ownlan-logofinal3.png)
+
 ## Installation
 
 Add this line to your application's Gemfile:
@@ -26,6 +31,11 @@ And require it in your application:
 
 ## Usage
 
+:warning: **Important Note** :warning:: Ownlan *does* only work on Linux based computers until I find a way for the gem to parse automatically the current mac address of the given interface in a Cross-Platform way. I might write a gem for this.
+
+### Video Tutorial ###
+[![ownlan_video_preview](http://image.noelshack.com/fichiers/2016/04/1453938821-youtube-thumbail3.png)](https://www.youtube.com/watch?v=mAczNeTjMt4 "Ownlan video preview")
+
 ### Configuration ###
 You can pass multiple variables that will be used in the gem.
 
@@ -67,12 +77,11 @@ Please look at the [cli section](#command-line-interface) for more advanced opti
 
 ## Features
 
-**OwnLan** has four features:
+**OwnLan** has three features:
 
 1. Disconnect one or several users off the wire
 2. Protecting users from those kind of attacks
 3. Sending custom ARP + DHCP packets easily
-4. Easy ARP packets capture *[Not Implemented]*
 
 ### Disconnecting users off the wire
 
@@ -82,11 +91,11 @@ The biggest part of **OwnLan**. It disconnects clients thanks to severals techni
 
 - Gateway side ARP Cache Poisoning (**second duplex**). *A less known attack and powerful one, used by ``NetCut`` , the principle is to give the gateway a fake correspondancy of the victim MAC Adress to make the later one unreachable. If no MAC Adress is given, yours will be given.*
 
-- Neighbour Table Overflow attack. *I invented this attack, not to be modest. In fact, I should say 'implemented' since, usually, it is the gateway which is attacked (even so, this one attack is very rare), here, we attack the client directly. I don't think anyone has ever thought of this... and it works! The **NTOA** will not insert random MAC adress, but following a scheme, to ensure that 2 same mac adress won't be injected. So, it makes the attack faster. One client or all clients can be specified.*
+- Neighbour Table Overflow attack. * The Neighbour Table Overflow attack will generate identifications packets to the specified target to completely isolate him from the network. The **NTOA** attack can be used to stress test client (gateway, computers) to see if they can undure heavy charges.
 
-- Gateway ARP Cache Overflow. *This attack will render the GateWay ARP Cache unusable, and will make a loss of connectivity to all the clients. Some CISCO routers are immuned to this attack though*
+### Protecting clients
 
-- DHCP Lease Spoofing [Not Implemented]. *This attack will spoof DHCP lease (udp) packet by telling the DHCP server 'Hello, I don't use this IP anymore, just disconnect me' . As of today, this attack is extremly rare, difficult to make, and used only by ``Yersinia`` . There is nothing to prevent this attack, after it has been used. Really.
+- Resynchronize . This feature will instanciate a full duplex ARP attack to resynchronize the client to the Gateway. Very useful against active attacks.
 
 
 ### Command Line Interface
@@ -104,8 +113,6 @@ You can also use the provided executable. Simple launch it in accordance to the
                                   * Required: [sub-options]
         -b, --broadcast=<s>        Broadcast raw ARP packets to the wire.
                                   * Required Options : victim_ip, victim_mac, source_ip, source_mac
-        -c, --capture=<s>          Sniffing ARP packets on the network [Not Implemented]
-
 
 -  where [sub-options] are either:
 
@@ -119,16 +126,9 @@ You can also use the provided executable. Simple launch it in accordance to the
         ntoa                The client is targeted to get disconnected, using a neighbour table overflow attack. Requires a victim ip.
                           * Required options: victim_ip
                           * Falcultative options: random_mac
-        fake-ip-conflict    Generate a fake ip conflict to the victim. Can be used along all the others attacks, or alone.
-                          * Required options: victim_ip [Not Implemented]
-
         resynchronize       Operate a dual duplex attack on a victim to disconnect the attacker and heal the victim. Warning: If you are the victim, you will have to fill the optional options.
                           * Required options: victim_ip
                           * Optional options: victim_mac , gateway_mac
-        stealth             Becomes invisible from network scanners, preventing you from getting targeted. [Not Implemented]
-        static              Set a static ARP Cache for the current session. Good against first-duplex ARP Cache Poisoning. [Not Implemented]
-        freeze              Reset and Freeze your ARP Cache. Good against NTOAs. [Not Implemented]
-
 
 - Where  [Other Options] can be:
 
@@ -147,6 +147,18 @@ You can also use the provided executable. Simple launch it in accordance to the
 
 
 
+## Security
+
+As a basic form of security __KrakenClient__ provides a set of SHA512 checksums for
+every Gem release.  These checksums can be found in the `checksum/` directory.
+Although these checksums do not prevent malicious users from tampering with a
+built Gem they can be used for basic integrity verification purposes.
+
+The checksum of a file can be checked using the `sha512sum` command.  For
+example:
+
+    $ sha512sum pkg/kraken_client-0.0.1.gem
+    d12d7d9c2a4fdfe075cbb7a141fa5f2195175891e4098c7e1a28c8bca655ab44fb9d67b6a2e3991d0f852026c5e4537fdf7e314575c68d1c80b3a4b1eb1c041f  pkg/kraken_client-0.0.1.gem
 
 ## Versioning
 

data/lib/ownlan/attack/ntoa.rb

@@ -9,7 +9,7 @@ module Ownlan
         @i = 0
 
         saddr          = "00:03:FF:#{@a}:#{@b}:#{@c}"
-        daddr          = victim_mac
+        daddr          = 'FF:FF:FF:FF:FF:FF'
         saddr_ip       = "#{source_ip_base}.#{@b}.#{@c}"
         daddr_ip       = victim_ip
         opcode         = 1

data/lib/ownlan/cli.rb

@@ -21,7 +21,6 @@ EOS
   opt :attack, "Set an attack on a device on the network",  short: 'a', type: :string
   opt :protect, "Protect a device from lan attacks",        short: 'p', type: :string
   opt :broadcast, "Inject ARP crafted packets in the wire", short: 'b'
-  opt :capture, "Sniffing ARP packets on the network",      short: 'c', type: :string
 
 # Attack part
 banner <<-EOS
@@ -38,8 +37,7 @@ Attacks sub-options:
   ntoa                The client is targeted to get disconnected, using a neighbour table overflow attack. Requires a victim ip.
                       * Required options: victim_ip
                       * Falcultative options: random_mac
-  fake-ip-conflict    Generate a fake ip conflict to the victim. Can be used along all the others attacks, or alone.
-                      * Required options: victim_ip
+
   EOS
 
 
@@ -47,9 +45,6 @@ Attacks sub-options:
 banner <<-EOS
 
 Protect sub-options:
-  stealth          Becomes invisible from network scanners, preventing you from getting targeted.
-  static           Set a static ARP Cache for the current session. Good against first-duplex ARP Cache Poisoning.
-  freeze           Reset and Freeze your ARP Cache. Good against NTOAs.
   resynchronize    Operate a dual duplex attack on a victim to disconnect the attacker and heal the victim. Warning: If you are the victim, you will have to fill the optional options.
                    * Required options: victim_ip
                    * Optional options: victim_mac , gateway_mac
@@ -64,12 +59,6 @@ Broadcast:        Send raw ARP packets to the wire.
 
   EOS
 
-# Capture part
-banner <<-EOS
-Capture sub-options:
-
-  EOS
-
 # Other options part
 banner <<-EOS
 Other Options:
@@ -78,7 +67,7 @@ Other Options:
 
   opt :delay,              "Set the time lapse delay between each packet", default: 0.5
   opt :interface,          "Set the network interface which will be used", short: 'i', default: 'wlan0'
-  opt :random_mac,         "If setted, the used origin addresses will be randomly generated.", type: :boolean, default: false
+  opt :random_mac,         "If setted, the used origin addresses will be randomly generated.", default: false
   opt :victim_ip,          "Set the ip address of the target.", short: 't', type: :string
   opt :victim_mac,         "Set the mac address of the target", type: :string
   opt :gateway_ip,         "Set the ip adress of the gateway", type: :string

data/lib/ownlan/version.rb

@@ -1,3 +1,3 @@
 module Ownlan
-  VERSION = "0.4.4"
+  VERSION = "0.4.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ownlan
 version: !ruby/object:Gem::Version
-  version: 0.4.4
+  version: 0.4.6
 platform: ruby
 authors:
 - sidney
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-01-26 00:00:00.000000000 Z
+date: 2016-01-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: packetfu