jonty / idiocy

Idiocy is a warning shot to people browsing the internet insecurely.

Idiocy is a warning shot to people browsing the internet insecurely.

For more information: http://jonty.co.uk/idiocy

Idiocy quietly watches for people insecurely visiting twitter on public wifi networks, then hijacks their session to post a tweet warning them about the dangers. It was written in response to the release of Firesheep, which will result in a huge increase in session stealing attacks, with no defence other than forcing people to use SSL.

Running idiocy

Idiocy requires libpcap, python-pypcap (http://code.google.com/p/pypcap) and python-dpkt. Also python.

On Linux (as root):

• apt-get install libpcap0.8 python-pypcap python-dpkt
• iw wlan0 interface add mon0 type monitor && ifconfig mon0 up
• ./idiocy.py -i mon0

On OSX:

• Should be very similar to the above, can someone with a Mac investigate for me?

On Windows:

• God knows. I do know that getting your wifi card into monitor mode on windows can be difficult.

Notes

• The code is crap. I wrote it at 7am in a fit of irritation.
• I'd love to add support for facebook and the like.

idiocy's Issues

ubuntu 10.04 errors

Hi. I'm not sure what I'm doing but I hope that my errors can help someone out. I'm still googling around to try to solve them but no luck. I did read the readme.

$ sudo apt-get install libpcap python-pcap python-dpkt
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package libpcap
$

$ sudo iw wlan0 interface add mon0 type monitor && ifconfig mon0 up
SIOCSIFFLAGS: Permission denied
$

:/Documents/Jonty-Idiocy-80d8bd1$ ls
idiocy.py README.md
:/Documents/Jonty-Idiocy-80d8bd1$ ./idiocy.py -i mon0
bash: ./idiocy.py: Permission denied
~/Documents/Jonty-Idiocy-80d8bd1$ sudo ./idiocy.py -i mon0
sudo: ./idiocy.py: command not found

~/Documents/Jonty-Idiocy-80d8bd1$ python idiocy.py
Traceback (most recent call last):
File "idiocy.py", line 2, in
import getopt, sys, pcap, dpkt, re, httplib, urllib
ImportError: No module named pcap
~/Documents/Jonty-Idiocy-80d8bd1$

My questions are:

1. how do I install libpcap?
2. How can I get around the "SIOCSIFFLAGS: Permission denied" problem?
3. I'm making a basic error with the " ./idiocy.py -i mon0 " but I don't know what it is. Please hint?
4. Why is pcap missing and where can I find it?

Variable name

Idiocy is impressive. However before I could run it I needed to modify it a bit.

Shouldn't line #16 be "device = a" instead? I changed to that and it works just fine.

Facebook open graph support

you can easily update a person's Facebook wall by getting the access token off this page
http://developers.facebook.com/docs/api

and then post a message using the URL described here

curl -F 'access_token=...'
-F 'message=''I browsed facebook insecurely on a public network and all I got was this lousy update. http://jonty.co.uk/idiocy-what"
https://graph.facebook.com/[username]/feed

issues with second step on linux

i first tried this on my karmic wired box, and as i thought it failed. then i tried it on my netbook running ubuntu 10.10 desktop (over ssh if that matters). i installed all the packages but on the second step i get this error

root@mark-laptop:~# iw wlan0 interface add mon0 type monitor && ifconfig mon0 up command failed: Too many open files in system (-23)

Quite ironic

It's quite ironic that your website isn't https: http://jonty.co.uk/idiocy

MacOSX

Not sure about this. pcapy has a different module name and different functions (though many remain the same). Tried the macosx install of pcapy and had no joy sadly. Will continue though.

Feature request: support last.fm

Automatically submit 'Never Going To Give You Up' scrobble.