Thursday 26th June 2008 - Backtrack 3 Final released!
As most peopole will be aware there has been a new release of Backtrack, Backtrack 3 Final. If you wish to get graphviz up and running to display the graphs properly please do the following. Upgrade graphviz to 2.18. Use the slackware pkg found at http://slacky.uglyplace.org/repository/slackware-12.0/graphic/graphviz/2.18/graphviz-2.18-i486-1sl.tgz and use installpkg to install it. Thanks to cybrsnpr at the Remote-Exploit Forums for this fix.
Wednesday 7th May 2008 - New Version Release!
I have been cleaning things up a bit and have now produced a cleaner leaner version. I cleaned up the base html and got it to validate XHTML 1.0 Strict, then merged the new version into Wifizoo v1.3. So this version should be a lot cleaner. Visually it is essentially the same. Save for the fact that i have tried to compact everything a little to cater for smaller devices and screens. Please proceed to the download page and email me any problems or feedback - vaughan.keith@gmail.com.
Wifizoo V1.3 Visual Enhancements
I've made a few visual enhancements to Wifizoo 1.3 for my own use and thought i would share them with others. WifiZoo is a tool that passively gather's wireless network information, and is featured on Backtrack, a Linux security distribution designed for security professionals. Wifizoo was created by Hernan Ochoa and you can view the wifizoo webpage here.
Wifizoo is similar to dsniff but for pentesting wireless networks. One interesting feature is the ability to intercept cookies off a wireless network, and then use them to view websites with the victim's credentials. I tested it out on my own network and found it to work on a number of sites that i visited on the victim workstation.
Amounst many other things Wifizoo can do the following: "-gathers useful information from unencrypted wifi traffic (ala Ferret,and dsniff, etc); like pop3 credentials, smtp traffic, http cookies/authinfo, msn messages,ftp credentials, telnet network traffic, nbt, etc."
I was impressed by this tool and wanted to get it to look how i wanted for everyday use. All i have modified is how the data is presented in the browser. The rest of the code remains unchanged. There is a white version and a black version. As per the clickable screenshots below:
Wifizoo Black
Wifizoo White
You can also look at an example page here - example page
How to use Wifizoo
To run wifizoo you need a Linux distribution (i suggest backtrack) and a wireless network device that is capable of operating in monitor mode. You should also have python installed. For more detailed information please visit the Wifizoo website.
Then to get Wifizoo up and running do the following:
- Download the White or Black package from the downloads page
- Extract it to a convenient folder
- WifiZoo just listens on a wifi interface and will not do channel hopping by itself. You will need to start either kismet or airodump-ng in channel hopping mode.
- Start wifizoo with the command python wifizoo.py -i [your wireless interface]
Do this with root permissions. If succesful Wifizoo should tell you that it has launched the webgui on 127.0.0.1 - Open your browser and goto to http://127.0.0.1:8000
- Click through the various tabs of sniffed data!!
As Wifizoo is designed for the linux platform i have only tested in Firefox and Konqueror for now, and tested on Backtrack 3 Beta, Backtrack 2 and Ubuntu 7.10 platforms. If you could let me know of any issues you get it would help me fix them up.
Wifizoo is a powerful tool so please only use it only against networks and equipment over which you have the permission to do so. Please send any feedback to vaughan.keith@gmail.com.