forums.ps2dev.org

dowload · Joined: 10 Sep 2007 Posts: 3

I posted this on some other forums and was told to check here.
Would it be possible to write a non-promiscuous mode sniffer for the
PSP that simply captures all incoming packets, ie: intercept all incoming
pings.
Also, is it possible to craft ARP packets on the PSP?
My idea was to write a sniffer that uses ARP cache poisoning to create
a Man-In-The-Middle condition which would allow one to sniff packets
without using promiscuous mode.
Here is a link to the code I have written so far: http://intercon.ifastnet.com/files/main.c
And here is the sniffer it was based on:
http://hacktivist.net/index.php?page=scripts&action=view&scripts=41
Unfortunately, it is not capturing the incoming packets.
I have been looking up the sceIoIoctl function to see if this would help.
Does anyone know what I should try?

--download

califrag · Joined: 04 Apr 2007 Posts: 30

well i don't know anything about what you've posted above, BUT, here's something you can look into...

take a look at psputility_netparam.h

would it be possible make a call to

sceUtilitySetNetParam(int param, const void *val)

and pass PSP_NETPARAM_WEPKEY

I'm thinking you could generate WEP keys and brute force it until it connects... though there is no telling how long it may take to crack the WEP key. but I know the source for some key crackers are available (aircrack -ng)

let me know if you make any progress, interested in this myself!

just a thought

dowload · Joined: 10 Sep 2007 Posts: 3

no, I meant to capture packets once already connected to the network,
not try to brute force WEP. That would be theoretically possible, but would
take an inordinate amount of time.

Viper8896 · Joined: 26 Jan 2006 Posts: 110

It would be great as a tool that worked as a team with another computer connected through the usb so the psp just does the capturing while the high performance computer does the cracking

dowload · Joined: 10 Sep 2007 Posts: 3

It doesn't need to crack anything!
It's just sopposed to capture already incoming packets.
For example: you ping the PSP and those ICMP echo request
packets show up in the sniffer logs.
THIS HAS NOTHING TO DO WITH WEP CRACKING!

mojojojo · Joined: 01 Jan 2007 Posts: 33

Viper8896 · Joined: 26 Jan 2006 Posts: 110

adrahil · Joined: 16 Mar 2006 Posts: 277

The Marvell card the PSP got does :) But of course SCE are too cheap to extend their WLAN FW ;)

Viper8896 · Joined: 26 Jan 2006 Posts: 110

someone · Idiot Joined: 13 Sep 2005 Posts: 74

I believe that the Libertas ARM9/ARM7 combo with its own flash chip and a JTAG port is able to do a lot of nice stuff not already implemented.

But without specs or code written, it will be very hard to implement it.

tabularasa · Joined: 22 Nov 2006 Posts: 13

tabularasa · Joined: 22 Nov 2006 Posts: 13

Hm. Unforunately when i try to send something over raw socket i get the errno error #121 = Remote I/O error.
My arp packet looks something like that:

Gaby_64 · Joined: 19 Dec 2008 Posts: 33

Wally · Joined: 26 Sep 2005 Posts: 672

Gaby_64 · Joined: 19 Dec 2008 Posts: 33

Well witch program would be the best to port that has arp spoofing capability's and captures packets

Anyway here is a link to my current progress: http://psp.wijou.com/forum/index.php?showtopic=815

Gaby_64 · Joined: 19 Dec 2008 Posts: 33

Version 0.52 of my aircrack was released yesterday, its goty a working wep cap file decrypter that takes less then 10 seconds

Gaby_64 · Joined: 19 Dec 2008 Posts: 33

Well Aircrack-PSP 0.544993 was released today

Does anyone look at this, reply, im still looking for that file

the one Download made (main.c) if you look at the first post

Dariusc123456 · Joined: 12 Aug 2008 Posts: 394

Gaby,

Where the link on that site to download the latest version of Aircrack-psp?

Gaby_64 · Joined: 19 Dec 2008 Posts: 33

here: http://psp.wijou.com/forum/index.php?showtopic=815