bigbrodude6119 / flipper-zero-evil-portal Goto Github PK
View Code? Open in Web Editor NEWEvil portal app for the flipper zero + WiFi dev board
License: MIT License
Evil portal app for the flipper zero + WiFi dev board
License: MIT License
Allow for a user to randomize the mac address of the esp32 so that the evil portal's AP shows up as a new network each time. The user should be able to turn this option off/on.
Sometimes when the portal starts the UART connection sends "junk" characters that appear at the end of the AP name and/or in the HTML page. I found that this happens more often when starting the portal quickly after opening the app.
I'm not sure if its some sort of noise/interference happening during the communication between the flipper & esp32.
I’d like to be able to log either the raw output or multiple form outputs past just email and username, to allow a longer form with many parts.
Is it within the capability of the evil portal to do more than display the index.html? For example, could another page be shown when the user hits enter?
when i press start all i get is starting portal and thats it nothing on the network..
what could be the issue im using a esp32 wroom.
everything is flashed and done correctly.
And it also crashes.
When using Xtreme firmware the html login style page is not coming up when connecting to a network.
Very fun tool, but looking at the html I can't decipher the difference between working index.html portals (google modern and better google mobile) and ones like matrix.html that drop credentials instead of piping them to the flipper... is there a specific template for forwarding html text box inputs to the flipper zero?
you'll have to grab my files from that zip i linked you in the RM discord
Given that this replaces the Wifi Dev Board firmware, in order to deauth someone from a Wifi AP to get someone off a Wifi and then on to a twin would require 2 Flippers?
Hello, i just wanted to ask if its possible to mirror a wifi network if you have the wifi name and password so that the flipper connects to it and mirrors it. Is it possible?
Is it possible to implement an option to enable and disable the led on the dev board while a portal is active? thx :)
When attempting to set an AP name with less than 5 characters, it unexpectedly adds extra characters to the provided name.
Steps to Reproduce:
Expected Behavior:
When setting an AP name with less than 5 characters, it should retain the provided name as is, without adding any extra characters. So, "HEY" should remain "HEY".
Actual Behavior:
Additional characters are added to the AP names with fewer than 5 characters, resulting in unexpected names. For instance, if "HEY" is set as the AP name, it becomes "HEYTAL," and if i set "A" is set, it becomes "AORTAL."
When I changed the code within evil_portal_storage.c to use an empty string for the AP name app->ap_name = (uint8_t *)"";
the name becomes "PORTAL," indicating that the characters are being layered on top of the "PORTAL" string.
I followed the "Install the pre-built app on the flipper" and am coming up with the ? icon as well as "ApiTooOld" when trying to run it.
I have tried a couple different remediation steps but have had no luck, any suggestions?
2 things to add here that would make this evil portal very good.
1: Make it so we can change the name of the WiFi from inside the app.
2: Make it so we can create custom presets so we can create new portals without needing a computer. for example, if i want to switch from a fake Google Login page to a Twitter login page, we should be able to do it with presets. Make it so the name changes based on the phishing page ur using (make us able to change it).
I hope these features can be added in future updates.
Is it possible to make the "client connected" log show up when the client loads the page, instead of when they submit the form?
I'm not sure if this should be implemented in the evil portal code or if it would be better done within the html page as some sort invisible element that auto-sends an empty get upon loading, just for the "client connected" message.
Will this work on a esp32s2-Wemos flashed board?
new evil portal Starbucks coffee account login page.
author: ctomassetti56
Please enter your email and password associated with your Starbucks account to connect to the internet
LoginWhen you connect to the AP a web page will open after a few seconds.
it doesn't open the webpage automatically. but if I put the IP address manually into the Android browser, it displays the fake login page.
Allow for the user to select an alternate file to load for the portal & AP config. If the user has multiple HTML files on their flipper this would allow them to change portals without having to use a PC to replace the existing index.html & ap.config.txt.
I'm really wondering is there any way to run this on ESP-32 WROOM.
Hello, I have a problem on the evil portal, the program is buggy, while the access point is visible, when I connect to it, 2 times on 3 I have this error message:
assert failed: tcp_update_rcv_ann_wnd IDF/components/lwip/lwip/src/core/tcp.c:951 (new_rcv_ann_wnd <= 0xffff)
Backtrace: 0x400835c5:0x3ffcd170 0x4008b7b9:0x3ffcd190 0x40090d85:0x3ffcd1b0 0x400f39c1:0x3ffcd2e0 0x400f3a6c:0x3ffcd300 0x400d9fa6:0x3ffcd320 0x400f0914:0x3ffcd340
ELF file SHA256: 3cd9be353c4740c1
Rebooting...
ets Jul 29 2019 12:21:46
rst:0xc (SW_CPU_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT)
configsip: 0, SPIWP:0xee
clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_drv:0x00,hd_drv:0x00,wp_drv:0x00
mode:DIO, clock div:1
load:0x3fff0030,len:1344
load:0x40078000,len:13964
load:0x40080400,len:3600
entry 0x400805f0
Waiting for HTML
It seems that there is a stack overflow or something like this ? I'm just using the basic index.html file and fixed the max HTML size on 7000. I have to stop and start the access point to make it works sometimes.
Plus the content of ap.config.txt is sometimes written of the pop up html page intead of changing the name of the ap.
thanks for your help ! :)
Hi, i cant upload the Evilportal file on my dev board, BC audtino IDE says:
Sketch uses 722802 bytes (55%) of program storage space. Maximum is 1310720 bytes.
Global variables use 44804 bytes (13%) of dynamic memory, leaving 282876 bytes for local variables. Maximum is 327680 bytes.
esptool.py v4.5.1
Serial port COM12
A fatal error occurred: Could not open COM12, the port doesn't exist
Failed uploading: uploading error: exit status 2
any fix for that ?
Is it possible to get the signal strength of a station, whenever station data is available?
Example scenario: ap scan, found ap. Station scan, found station(s). [new feature, station signal strength monitor] station signal strength monitor opened, with station(s) selected, so that whenever selected station(s) is detected, a signal strength is shown.
Hello ... it would be nice now with the latest upgrade to integrate bgloader between evil portal and the deauth .. in this way there is no going crazy with wpa keys as by sending down the network, he would hire the same ssid and with a fake portal a user could directly enter his credentials ... such a job was done with the fluxion tool (present on github)
Do you think it's possible to do it?
I leave in France and many places have Free Wifi so it would be cool to add/create them, ex:
McDonald's
SNCF
DisneyLand
...
Feel free to add some more ;)
It would be helpful to be pointed toward what code deals with output parsing (that turns raw output into “u:<email> p:<password>”, to see if I could edit it to accept additional / custom form outputs.
Originally posted by @wasp604 in #73 (comment)
Hi, while referencing your code for the marauder companion app, I noticed this in a few places in evil_portal_storage.c:
free(buf_ptr);
This seems like a problem because at this point, buf_ptr is referencing whatever memory comes directly after what it's initially set to. This is undefined behavior, and it would be better to delete these lines.
Yo ive been playing with the evil portal a bit but i have noticed that only apple devices are being sent to the html file i own a samsung and i can only connect to the network but im not being send to the html file. Any sugestions how to fix this? Also do you know how to expand the range of the wifi on the dev board?
I hope you can help me and i appreciate all the great work youve done with this function. ❤
I had evil portal working with the default landing page but now that I have created all the directories and changed the name of another landing page to index.html and have it placed in /apps_data/evil_portal every time I start the portal the flipper crashes and reboots saying it is out of memory. I have tried this on unleashed .65 and .68 with loads of different landing pages.
WARNING: ESP32-S2FNR2 (revision v0.0) chip was placed into download mode using GPIO0.
esptool.py can not exit the download mode over USB. To run the app, reset the chip manually.
To suppress this note, set --after option to 'no_reset'.
Failed uploading: uploading error: exit status 1
I've used two Android phones, one Macbook, one Windows laptop and a Kobo e-reader. None show the 'Google Free WIFI' network.
When launching the portal, I notice that the Flipper display shows the entire Evil-Portal 'Index.html' file's content. I have Evil Portal as part of the recent Hidden Master release, I did not install it manually. I've been using Marauder on my ESP32 board for a while now, so I know that it's got the right firmware and working correctly. Maybe just a typo somewhere along the HTML code?
I've uploaded a short youtube video demonstrating what I'm seeing on my flipper, link: evil portal bug?
I've attached the logs generated by Evil-Portal
log_0.txt
log_1.txt
log_2.txt
log_3.txt
log_4.txt
log_5.txt
log_6.txt
one great option would be if you could switch the portal ap name and portal html page from the flipper directly. then you could easily jump from one portal to another just using the flipper.
If for no other reason than simple convenience (entering the web server ip manually is a complete PITA) the web server needs to be able to 'catch' anything requested and automatically serve up the index.html currentl loaded.
It has been reported that the captive portal does not open automatically on some android phones. Mostly this complaint has been made by users with Samsung phones.
I have a spare android phone but it opens up fine there.
Know what'd be REAL nice? Time and date stamps in the logs... Maybe even a PREFERENCE for it? Ahh we can all dream right?
So, alot of people play Minecraft and most of them play online. Most ppl use apex hosting since its the most popular one. It would be nice if there was a portal for that. The log in page reference would be panel.apexminecrafthosting.com
u could get free mc servers this way, or just grief their server :)
Possible to enhance the portal into a proxy, getting credentials AND prompt users to share also other verifications?
wifi marauder not, scanning AP's
entry ox4004c18c waiting for HTML when holding boot on wifi dev board
While trying to implement a few features i noticed that the logging has been blocked due to "furi_hal_console_disable();" in Line 124 in evil_portal_uart.c
This is probably needed for communicating with the esp however this blocks the logging over serial for debugging.
Would it be possible to use LPUART channel instead of USART for the esp? The flipper serial console logging sadly is limited to USART by code and it seems only those two channels are available:
typedef enum { FuriHalUartIdUSART1, FuriHalUartIdLPUART1, } FuriHalUartId;
LPUART would reduce the power consumption as a positive side effect.
Apart from that it would also be an option to utilize Virtual Communication Port (VCP) which would allow for independence of the UART Channel Limitation.
Where are they?
Nice job you're doing here, I love the concept.
One feature suggestion that could be interesting:
Instead of manually entering a new AP name, would it also be an option to select an SSID name from a list of existing AP's and just have the device sitting there pretending to be this AP?
You should be able to see the [ESP32] Evil Portal app on your flipper zero now.
noup!
I used https://github.com/bigbrodude6119/flipper-zero-evil-portal/releases/tag/0.0.2
It would be nice if we could change the the ap.config directly on the flipper so that we can setup the right ap withe the right login screen
Allow for a user to scan nearby SSIDs.
Allow for a user to set the evil portal's SSID to a selected SSID from the scan.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.