WiFiScan.h 5.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167
  1. #ifndef WiFiScan_h
  2. #define WiFiScan_h
  3. #include <BLEDevice.h>
  4. #include <BLEUtils.h>
  5. #include <BLEScan.h>
  6. #include <BLEAdvertisedDevice.h>
  7. #include <WiFi.h>
  8. #include <math.h>
  9. #include "esp_wifi.h"
  10. #include "esp_wifi_types.h"
  11. #include "esp_bt.h"
  12. #include "Display.h"
  13. #include "SDInterface.h"
  14. #include "Buffer.h"
  15. <<<<<<< HEAD
  16. //#include "BatteryInterface.h"
  17. =======
  18. >>>>>>> parent of 40e11b7... Capture EAPOL packets
  19. //#include "MenuFunctions.h"
  20. #define bad_list_length 3
  21. #define OTA_UPDATE 100
  22. #define SHOW_INFO 101
  23. #define WIFI_SCAN_OFF 0
  24. #define WIFI_SCAN_PROBE 1
  25. #define WIFI_SCAN_AP 2
  26. #define WIFI_SCAN_ST 3
  27. #define WIFI_SCAN_DEAUTH 4
  28. #define WIFI_SCAN_ALL 5
  29. #define WIFI_PACKET_MONITOR 6
  30. #define WIFI_ATTACK_BEACON_SPAM 7
  31. #define WIFI_ATTACK_RICK_ROLL 8
  32. #define BT_SCAN_ALL 9
  33. #define BT_SCAN_SKIMMERS 10
  34. #define GRAPH_REFRESH 50
  35. #define MAX_CHANNEL 14
  36. extern Display display_obj;
  37. extern SDInterface sd_obj;
  38. extern Buffer buffer_obj;
  39. <<<<<<< HEAD
  40. //extern BatteryInterface battery_obj;
  41. =======
  42. >>>>>>> parent of 40e11b7... Capture EAPOL packets
  43. esp_err_t esp_wifi_80211_tx(wifi_interface_t ifx, const void *buffer, int len, bool en_sys_seq);
  44. class WiFiScan
  45. {
  46. private:
  47. int x_pos; //position along the graph x axis
  48. float y_pos_x; //current graph y axis position of X value
  49. float y_pos_x_old = 120; //old y axis position of X value
  50. float y_pos_y; //current graph y axis position of Y value
  51. float y_pos_y_old = 120; //old y axis position of Y value
  52. float y_pos_z; //current graph y axis position of Z value
  53. float y_pos_z_old = 120; //old y axis position of Z value
  54. int midway = 0;
  55. byte x_scale = 1; //scale of graph x axis, controlled by touchscreen buttons
  56. byte y_scale = 1;
  57. bool do_break = false;
  58. //int num_beacon = 0; // GREEN
  59. //int num_probe = 0; // BLUE
  60. //int num_deauth = 0; // RED
  61. uint32_t initTime = 0;
  62. bool run_setup = true;
  63. int set_channel = 1;
  64. int bluetoothScanTime = 5;
  65. int packets_sent = 0;
  66. const wifi_promiscuous_filter_t filt = {.filter_mask=WIFI_PROMIS_FILTER_MASK_MGMT | WIFI_PROMIS_FILTER_MASK_DATA};
  67. BLEScan* pBLEScan;
  68. String alfa = "1234567890qwertyuiopasdfghjkklzxcvbnm QWERTYUIOPASDFGHJKLZXCVBNM_";
  69. char* rick_roll[8] = {
  70. "01 Never gonna give you up",
  71. "02 Never gonna let you down",
  72. "03 Never gonna run around",
  73. "04 and desert you",
  74. "05 Never gonna make you cry",
  75. "06 Never gonna say goodbye",
  76. "07 Never gonna tell a lie",
  77. "08 and hurt you"
  78. };
  79. char* prefix = "G";
  80. typedef struct
  81. {
  82. int16_t fctl;
  83. int16_t duration;
  84. uint8_t da;
  85. uint8_t sa;
  86. uint8_t bssid;
  87. int16_t seqctl;
  88. unsigned char payload[];
  89. } __attribute__((packed)) WifiMgmtHdr;
  90. typedef struct {
  91. WifiMgmtHdr hdr;
  92. uint8_t payload[0];
  93. } wifi_ieee80211_packet_t;
  94. // barebones packet
  95. uint8_t packet[128] = { 0x80, 0x00, 0x00, 0x00, //Frame Control, Duration
  96. /*4*/ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, //Destination address
  97. /*10*/ 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, //Source address - overwritten later
  98. /*16*/ 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, //BSSID - overwritten to the same as the source address
  99. /*22*/ 0xc0, 0x6c, //Seq-ctl
  100. /*24*/ 0x83, 0x51, 0xf7, 0x8f, 0x0f, 0x00, 0x00, 0x00, //timestamp - the number of microseconds the AP has been active
  101. /*32*/ 0x64, 0x00, //Beacon interval
  102. /*34*/ 0x01, 0x04, //Capability info
  103. /* SSID */
  104. /*36*/ 0x00
  105. };
  106. void packetMonitorMain(uint32_t currentTime);
  107. void changeChannel();
  108. void updateMidway();
  109. void tftDrawXScalButtons();
  110. void tftDrawYScaleButtons();
  111. void tftDrawChannelScaleButtons();
  112. void tftDrawColorKey();
  113. void tftDrawGraphObjects();
  114. void broadcastRandomSSID(uint32_t currentTime);
  115. void broadcastSetSSID(uint32_t current_time, char* ESSID);
  116. void RunRickRoll(uint8_t scan_mode, uint16_t color);
  117. void RunBeaconSpam(uint8_t scan_mode, uint16_t color);
  118. void RunBeaconScan(uint8_t scan_mode, uint16_t color);
  119. void RunDeauthScan(uint8_t scan_mode, uint16_t color);
  120. void RunProbeScan(uint8_t scan_mode, uint16_t color);
  121. void RunPacketMonitor(uint8_t scan_mode, uint16_t color);
  122. void RunBluetoothScan(uint8_t scan_mode, uint16_t color);
  123. static void scanCompleteCB(BLEScanResults scanResults);
  124. public:
  125. WiFiScan();
  126. bool orient_display = false;
  127. wifi_init_config_t cfg = WIFI_INIT_CONFIG_DEFAULT();
  128. String getStaMAC();
  129. String getApMAC();
  130. String freeRAM();
  131. void RunInfo();
  132. void channelHop();
  133. uint8_t currentScanMode = 0;
  134. void main(uint32_t currentTime);
  135. void StartScan(uint8_t scan_mode, uint16_t color = 0);
  136. void StopScan(uint8_t scan_mode);
  137. static void getMAC(char *addr, uint8_t* data, uint16_t offset);
  138. static void beaconSnifferCallback(void* buf, wifi_promiscuous_pkt_type_t type);
  139. static void deauthSnifferCallback(void* buf, wifi_promiscuous_pkt_type_t type);
  140. static void probeSnifferCallback(void* buf, wifi_promiscuous_pkt_type_t type);
  141. static void wifiSnifferCallback(void* buf, wifi_promiscuous_pkt_type_t type);
  142. };
  143. #endif