+
+ Open Router Login";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { //only WEP
+ echo "
WEP Router Login
";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.2.') !== false) { //only PSK moviles
+ echo "
PSK Router Login
";
+ }
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.3.') !== false) { //only WPS
+ echo "
WPS Router Login";
+ }
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.4.') !== false) { //only krack
+ echo "krack Router Login
";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT
+ echo "Corp Router Login
";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.7.') !== false) { //only MGT Relay
+ echo "Regional Router Login
";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.18.') !== false) { //only MGT Relay
+ echo "Regional Tablets Router Login
";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.8.') !== false) { //only ENTERPRISE
+ echo "Global Router Login
";
+ }
+
+ if (strpos($_SERVER['REMOTE_ADDR'], '192.168.16.') !== false) { //only ENTERPRISE
+ echo "Wifi free Login
";
+ }
+
+ ?>
+
+
- 
+ 
- 
+ 
- 
+ 
- 
+ 
@@ -24,13 +24,20 @@
# WiFiChallengeLab-docker
-
-
[](https://hub.docker.com/r/r4ulcl/wifichallengelab-aps) [](https://hub.docker.com/r/r4ulcl/wifichallengelab-clients)
Docker version of WiFiChallenge Lab with modifications in the challenges and improved stability. Ubuntu virtual machine with virtualized networks and clients to perform WiFi attacks on OPN, WPA2, WPA3 and Enterprise networks.
+
+## CTFd Lab
+
+For direct access to download the VM and complete the challenges go to the CTFd web site:
+
+[WiFiChallenge Lab v2.0](https://wifichallengelab.com/)
+
+
+
## Changelog from version v1.0
The principal changes from version 1.0.5 to 2.0.3 are the following.
@@ -48,7 +55,7 @@ The principal changes from version 1.0.5 to 2.0.3 are the following.
- More clients
- Monitorization and detection using nzyme WIDS.
-## Install
+## Using WiFiChallenge Lab
### Using the VM
@@ -57,23 +64,27 @@ Download the VM for VMWare or VirtualBox:
- [GitHub releases](https://github.com/r4ulcl/WiFiChallengeLab-docker/releases)
- [Proton Drive](https://drive.proton.me/urls/Q4WPB23W7R#Qk4nxMH8Q4oQ)
-### Docker inside a Linux host
+### Docker inside a Linux host or a custom VM
Download the repository and start the docker with the APs, the clients and nzyme for alerts.
``` bash
git clone https://github.com/r4ulcl/WiFiChallengeLab-docker
cd WiFiChallengeLab-docker
-docker-compose up -d --file docker-compose.yml
+docker compose up -d --file docker-compose.yml
```
+#### Optionally: Install Wi-Fi tools
+
+Go to the folder where the tools will be installed and execute `Attacker/installTools.sh`
+
### Create your own VM using vagrant
#### Requirements
-- A Linux host with at least 4 CPU cores and 4 GB of RAM.
-- docker
-- docker-compose
+- A host with at least 4 CPU cores and 4 GB of RAM.
+- vagrant
+- VirtualBox, VMware or Hyper-V
#### Create the VM with vagrant
@@ -95,11 +106,16 @@ If you want a VMWare VM:
vagrant up vmware_vm
```
-And for a VirtualBox VM:
+For a VirtualBox VM:
``` bash
vagrant up virtualbox_vm
```
+And for a Hyper-v VM, in a admin console:
+``` bash
+vagrant up hyper-v_vm --provider=hyperv
+```
+
## Usage
### Attack from Ubuntu VM
@@ -118,7 +134,7 @@ vagrant up virtualbox_vm
To modify the files you can download the repository and edit both APs and clients (in the VM the path is /var/WiFiChallenge). The files are divided by APs, Clients, and Nzyme files.
## Recompile Docker
-To recreate the Docker files with the changes made, modify the docker-compose.yml file by commenting out the "image:" line in each Docker and uncommenting the line with "build:". Then use "docker-compose build" to create a new version.
+To recreate the Docker files with the changes made, modify the docker-compose.yml file by commenting out the "image:" line in each Docker and uncommenting the line with "build:". Then use "docker compose build" to create a new version.
## Support this project
diff --git a/docker-compose-minimal.yml b/docker-compose-minimal.yml
index ce5245f..59603b5 100644
--- a/docker-compose-minimal.yml
+++ b/docker-compose-minimal.yml
@@ -1,7 +1,6 @@
-version: '3.4'
services:
aps:
- build: ./APs/
+ image: r4ulcl/wifichallengelab-aps
restart: unless-stopped
container_name: WiFiChallengeLab-APs
env_file: ./APs/.env
@@ -12,7 +11,7 @@ services:
privileged: true #NETNS
clients:
- build: ./Clients/
+ image: r4ulcl/wifichallengelab-clients
restart: unless-stopped
container_name: WiFiChallengeLab-Clients
env_file: ./Clients/.env
diff --git a/docker-compose.yml b/docker-compose.yml
index 52ae509..36e8df9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,4 +1,3 @@
-version: '3.8'
services:
aps:
image: r4ulcl/wifichallengelab-aps:latest
@@ -55,7 +54,7 @@ services:
deploy:
resources:
limits:
- cpus: 0.50
+ cpus: "0.50"
memory: 512M
reservations:
memory: 128M
@@ -85,7 +84,7 @@ services:
deploy:
resources:
limits:
- cpus: 0.50
+ cpus: "0.50"
memory: 512M
reservations:
memory: 128M
diff --git a/nzyme/nzyme.conf b/nzyme/nzyme.conf
index e91cf4d..c1e29dd 100644
--- a/nzyme/nzyme.conf
+++ b/nzyme/nzyme.conf
@@ -157,24 +157,24 @@ uplinks: []
{
ssid: wifi-management
channels: [11]
- security: [WPA3-SAE-TKIP]
+ security: [WPA3-SAE-CCMP]
beacon_rate: 4760
bssids: [
{
address: "f0:9f:c2:11:0a:24",
- fingerprints: [ e0068dfc8f823671ce76155d3f43c4872539e0434103ba84d8415ee0e9efb5a0 ]
+ fingerprints: [ df5b5f9eec31df5ec9e9e020d00abacde6fd7acd3e4cce45675510b72bbb107b ]
}
]
},
{
ssid: wifi-IT
channels: [11]
- security: [WPA3-PSK-SAE-TKIP]
+ security: [WPA3-PSK-SAE-CCMP]
beacon_rate: 47600
bssids: [
{
address: "f0:9f:c2:1a:ca:25",
- fingerprints: [ 5fc6d5a6ff2035b42656acff707141b7e4bef622ac92976c964b25d4c4026871 ]
+ fingerprints: [ 0d8c1f599eedc365bafbe63fb7c7c8f5592f01c3059a619d79035902fa5d781a ]
}
]
},
@@ -231,6 +231,18 @@ uplinks: []
}
]
},
+ {
+ ssid: wifi-old
+ channels: [3]
+ security: [NONE]
+ beacon_rate: 4760
+ bssids: [
+ {
+ address: "f0:9f:c2:71:22:11",
+ fingerprints: [ 4db0e3114b3db19c2b3fae7a69a692e1edcf7ec718a4a6bf43311dc31185d132 ]
+ }
+ ]
+ },
]
diff --git a/vagrant/create.sh b/vagrant/create.sh
index 1021f66..fef0b6f 100644
--- a/vagrant/create.sh
+++ b/vagrant/create.sh
@@ -7,7 +7,7 @@ HALT=true
OPTION=$1
if [ -z "${OPTION}" ]; then
- echo "Unknown option, only VMware or VirtualBox"
+ echo "Unknown option, only vmware, virtualbox or both"
exit 1
fi
@@ -48,8 +48,27 @@ elif [ $OPTION == "virtualbox" ]; then
vagrant halt virtualbox_vm
fi
-elif [ $OPTION == "both" ]; then
- echo "both same time"
+elif [ $OPTION == "hyper-v" ]; then
+ echo "hyper-v"
+ if [ "$DESTROY" = true ] ; then
+ vagrant destroy hyper-v_vm --force
+ fi
+ D=`date`
+ echo "$D Start hyper-v_vm " | tee -a hyper-v_vm.log
+ vagrant up hyper-v_vm
+ D=`date`
+ echo "$D Finish hyper-v_vm " | tee -a hyper-v_vm.log
+ # Configure background, etc
+ vagrant halt hyper-v_vm
+ vagrant up hyper-v_vm
+ timeout 30s vagrant ssh hyper-v_vm
+ if [ "$HALT" = true ] ; then
+ vagrant halt hyper-v_vm
+ fi
+
+
+elif [ $OPTION == "all" ]; then
+ echo "all same time"
echo $0
# Start vmware
bash $0 vmware &
@@ -58,12 +77,17 @@ elif [ $OPTION == "both" ]; then
bash $0 virtualbox &
LAST2=$!
+ # Start hyper-v
+ bash $0 hyper-v &
+ LAST3=$!
+
#Wait for them
wait $LAST1
wait $LAST2
+ wait $LAST3
else
- echo "Unknown option, only VMware or VirtualBox or both"
+ echo "Unknown option, only VMware, VirtualBox, hyper-v or all"
exit 1
fi
diff --git a/vagrant/install.sh b/vagrant/install.sh
index 35c260b..eef571c 100644
--- a/vagrant/install.sh
+++ b/vagrant/install.sh
@@ -1,25 +1,42 @@
#!/bin/bash
+# Function to edit a configuration file
+edit_config_file() {
+ local file="$1"
+ local setting="$2"
+ local value="$3"
+
+ if grep -q "^${setting}" "${file}"; then
+ sudo sed -i "s|^${setting}.*|${setting} \"${value}\";|" "${file}"
+ else
+ echo "${setting} \"${value}\";" | sudo tee -a "${file}" > /dev/null
+ fi
+}
+
+
+
# update package lists
sudo apt-get update
+sudo apt-get full-upgrade -y
+
+
+# Disable automatic updates in 20auto-upgrades
+auto_upgrades_file="/etc/apt/apt.conf.d/20auto-upgrades"
+edit_config_file "${auto_upgrades_file}" "APT::Periodic::Update-Package-Lists" "0"
+edit_config_file "${auto_upgrades_file}" "APT::Periodic::Download-Upgradeable-Packages" "0"
+edit_config_file "${auto_upgrades_file}" "APT::Periodic::AutocleanInterval" "0"
+edit_config_file "${auto_upgrades_file}" "APT::Periodic::Unattended-Upgrade" "0"
+
+# Stop and disable the unattended-upgrades service
+sudo systemctl stop unattended-upgrades
+sudo systemctl disable unattended-upgrades
+
+sudo systemctl disable apt-daily-upgrade.service
+sudo systemctl disable apt-daily.service
## Install drivers modprobe
sudo apt-get install -y linux-generic
-# Add SWAP file
-# Set the size of the swap file in bytes
-swap_size=4G
-# Create a new file to be used as a swap file
-sudo fallocate -l $swap_size /swapfile
-# Set the correct permissions on the file
-sudo chmod 600 /swapfile
-# Format the file as a swap file
-sudo mkswap /swapfile
-# Enable the swap file
-sudo swapon /swapfile
-# Make the change permanent by adding the following line to /etc/fstab
-echo "/swapfile none swap sw 0 0" | sudo tee -a /etc/fstab
-
# Create a sudo user
# Create the user
sudo useradd -m -s /bin/bash user
@@ -54,11 +71,6 @@ sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubun
sudo apt-get update
sudo apt-get install -y docker-ce docker-ce-cli containerd.io
-## Install docker-compose
-#sudo apt-get install -y docker-compose
-sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
-sudo chmod +x /usr/local/bin/docker-compose
-
# Fix DNS error Docker
sudo apt-get install bridge-utils -y
sudo service docker restart
@@ -73,6 +85,8 @@ shred -vzn 3 /var/WiFiChallenge/Clients
find /var/WiFiChallenge/APs -type f -exec shred -zvu -n 5 {} \;
find /var/WiFiChallenge/Clients -type f -exec shred -zvu -n 5 {} \;
+find /var/WiFiChallenge/vagrant -type f -exec shred -zvu -n 5 {} \;
+
rm -r /var/WiFiChallenge/Clients /var/WiFiChallenge/APs
## Install RDP server
@@ -91,8 +105,8 @@ sudo apt-get install -y p7zip-full
## Enable docker
cd /var/WiFiChallenge/
-sudo docker-compose -f docker-compose.yml up -d
-#sudo docker-compose -f docker-compose-minimal.yml up -d
+sudo docker compose -f docker-compose.yml up -d
+#sudo docker compose -f docker-compose-minimal.yml up -d
## remove all non-essential programs in an Ubuntu 20 minimal ISO-based Vagrant VM
@@ -113,23 +127,36 @@ sudo apt-get clean
sudo apt-get -y autoremove --purge ubuntu-web-launchers landscape-client-ui-install gnome-games-common libreoffice* empathy transmission-gtk cheese gnome-software-common gnome-software-plugin-flatpak gnome-software-plugin-snap gnome-terminal gnome-orca onboard simple-scan gnome-font-viewer gnome-calculator gnome-clocks gnome-screenshot gnome-system-log gnome-system-monitor gnome-documents gnome-music gnome-video-effects gnome-boxes gnome-dictionary gnome-photos gnome-weather gnome-maps gnome-logs gnome-clocks gnome-characters gnome-calendar aisleriot gnome-sudoku gnome-mines gnome-mahjongg thunderbird
# First FLAG
-echo 'flag{JPTEXm5yEaYouyIEFffEvPjil}' | sudo tee /root/flag.txt
+echo 'flag{2162ae75cdefc5f731dfed4efa8b92743d1fb556}' | sudo tee /root/flag.txt
echo '#!/bin/bash
cd /var/WiFiChallenge
-sudo docker-compose restart aps
-sudo docker-compose restart clients' | sudo tee /root/restartWiFi.sh /home/user/restartWiFi.sh
+sudo docker compose restart aps
+sudo docker compose restart clients' | sudo tee /root/restartWiFi.sh /home/user/restartWiFi.sh
chmod +x /root/restartWiFi.sh /home/user/restartWiFi.sh
echo '#!/bin/bash
#Update images from AP and clients
cd /var/WiFiChallenge
-sudo docker-compose pull
-sudo docker-compose up --detach
+sudo docker compose pull
+sudo docker compose up --detach
' | sudo tee /root/updateWiFiChallengeLab.sh /home/user/updateWiFiChallengeLab.sh
chmod +x /root/updateWiFiChallengeLab.sh /home/user/updateWiFiChallengeLab.sh
+# Fix "Your kernel does not support swap limit capabilities or the cgroup is not mounted. Memory limited without swap."
+
+grub_file="/etc/default/grub"
+params="cgroup_enable=memory swapaccount=1"
+
+# Check if the parameters are already present
+if grep -q "$params" "$grub_file"; then
+ echo "Parameters already present in GRUB_CMDLINE_LINUX."
+else
+ # Add the parameters to GRUB_CMDLINE_LINUX
+ sudo sed -i "/^GRUB_CMDLINE_LINUX=/ s/\"$/ $params\"/" "$grub_file"
+fi
+sudo update-grub
#Fix password on wifi scan
# Change the configuration file
@@ -146,7 +173,7 @@ sudo cp WiFiChallengeLab.png /opt/background/WiFiChallengeLab.png
# nzyme alerts
sudo apt-get install -y jq
# nzyme icon for alerts
-sudo wget https://v1.nzyme.org/img/favicon.ico -O /opt/background/nzyme.ico
+sudo wget https://www.nzyme.org/favicon.ico -O /opt/background/nzyme.ico
echo '#!/bin/bash
@@ -264,6 +291,7 @@ gsettings set org.gnome.shell favorite-apps "$(gsettings get org.gnome.shell fav
# Remove fstab info in VBox
sudo sed -i "/$(echo 'media_WiFiChallenge /media/WiFiChallenge vboxsf uid=1000,gid=1000,_netdev 0 0' | sudo sed -e 's/[\/&]/\\&/g')/d" /etc/fstab
+firefox &
EOF
#' >
@@ -347,5 +375,6 @@ sudo apt-get -y clean
docker system prune -a -f
-
-sudo dd if=/dev/zero of=zerofile bs=1M ; sudo rm -rf zerofile
\ No newline at end of file
+echo "Starting dd, this may take a while"
+sudo dd if=/dev/zero of=/tmp/zerofile bs=1M ; sudo rm -rf /tmp/zerofile
+sudo rm -rf /tmp/zerofile
\ No newline at end of file
diff --git a/vagrant/vagrantfile b/vagrant/vagrantfile
index 2caed58..eaa64d7 100644
--- a/vagrant/vagrantfile
+++ b/vagrant/vagrantfile
@@ -1,23 +1,32 @@
VAGRANT_COMMAND = ARGV[0]
Vagrant.configure("2") do |config|
- if VAGRANT_COMMAND == "ssh"
-# config.ssh.username = 'user'
- end
+
+ config.vm.define "hyper-v_vm" do |hyper_v_vm|
+ # Add other configuration options here
+ hyper_v_vm.vm.box = "generic/ubuntu2004"
+ hyper_v_vm.vm.define "WiFiChallengeLab HyperV"
+ # hyper_v_vm.vm.network "private_network", ip: "192.168.58.10"
+ hyper_v_vm.vm.hostname = "WiFiChallengeLab"
+ hyper_v_vm.vm.provider "hyperv" do |hv|
+ hv.vmname = "WiFiChallenge Lab v2.0.4"
+ hv.memory = 2048
+ hv.cpus = 2
+ end
+ hyper_v_vm.vm.provision :shell, path: "./install.sh"
+ hyper_v_vm.vm.synced_folder "../", "/media/WiFiChallenge", type: "rsync"
+ end
+
config.vm.define "virtualbox_vm" do |virtualbox_vm|
# Add other configuration options here
- #virtualbox_vm.vm.box = "ubuntu/focal64"
virtualbox_vm.vm.box = "generic/ubuntu2004"
virtualbox_vm.vm.define "WiFiChallengeLab vbox"
- #virtualbox_vm.vm.network "private_network", ip: "192.168.56.10"
virtualbox_vm.vm.hostname = "WiFiChallengeLab"
virtualbox_vm.vm.provider "virtualbox" do |vb|
vb.memory = "2048"
vb.cpus = 2
- #vb.memory = "8192"
- #vb.cpus = 8
- vb.name = "WiFiChallenge Lab v2.0"
+ vb.name = "WiFiChallenge Lab v2.0.4"
end
virtualbox_vm.vm.provision :shell, path: "./install.sh"
virtualbox_vm.vm.synced_folder "../", "/media/WiFiChallenge"
@@ -29,19 +38,18 @@ Vagrant.configure("2") do |config|
vmware_vm.vm.define "WiFiChallengeLab VMWare"
vmware_vm.vm.provider "vmware_desktop" do |v|
v.linked_clone = false
- v.clone_directory = "/mnt/work/VMWare/"
+ v.clone_directory = "E:/VMWare"
+ v.force_vmware_license = "workstation" # force the licence for fix some vagrant plugin issue
+ v.gui = true
+ v.memory = "2048"
+ v.cpus = 2
+ v.vmx["displayName"] = "WiFiChallenge Lab v2.0.4"
end
#vmware_vm.vm.network "private_network", ip: "192.168.57.10"
vmware_vm.vm.hostname = "WiFiChallengeLab"
- vmware_vm.vm.provider "vmware_desktop" do |vb|
- vb.memory = "2048"
- vb.cpus = 2
- #vb.memory = "8192"
- #vb.cpus = 8
- end
vmware_vm.vm.provision :shell, path: "./install.sh"
vmware_vm.vm.synced_folder "../", "/media/WiFiChallenge"
-
end
-end
+
+end