Building the hostapd-mana Configuration
The default configuration file for hostapd-mana
contains many example parameters,
but we won’t need most of them for this module.
Instead, we will create our own Mostar configuration file.
We’ll begin by settting interface to our wireless interface name.
Next, we will set the SSID to “Mostar”.
Let’s set the channel to “1” to match the target access point.
By default, hostapd-mana will run in 802.11b.
In order to meet our target’s settings, we need to change this
to 802.11n
by setting the ieee80211n parameter to “1”.
Next, we’ll set the band to 2.4 GHz by setting hw_mode to “g”.
However, if the network was running at 5 GHz, we would set hw_mode to “a”.
Next, we can move on to the encryption and authentication settings.
We must set these carefully,
mimicking the target AP.
First, we'll set the wpa parameter to “3”
to enable both WPA and WPA2.
As an aside, setting this to “1” would onle enable WPA,
while setting it to "2" would only enable WPA2.
We’ll also need to set the authentication to PSK and set the key as well.
To enable PSK authentication, let’s set wpa_key_mgmt to “WPA-PSK”.
We'll set the key with the wpa_passphrase parameter.
The actual value of the wpa_passphrase is irrelevant,
since we are only attempting to capture a handshake.
Next, we’ll set the wpa and rsn pairwise settings
to “TKIP CCMP”
for WPA1 and WPA2 respectively
in order to match the encryption settings of the target AP.
If the target was exclusively using WPA or WPA2,
we would only set wpa_pairwise or rsn_pairwise.
The cipher suite for multicast traffic is automatically set by hostapd-mana,
so we don’t need to modify the configuration for it.
Finally, we need to configure the “mana” portion of hostapd-mana.
The only other configuration setting we’ll need to adjust is mana_wpaout
which will specify where to save the captured handshakes.
Each captured handshake will be appended to this file.
In this case, we’ll use a Hashcat HCC APX format
and we’ll save our captured handshakes to our home directory.
With the configuration file complete,
we can start hostapd-mana
and hoepfully capture some handshakes.