{"id":57,"date":"2010-04-21T16:31:15","date_gmt":"2010-04-21T21:31:15","guid":{"rendered":"http:\/\/darwin-mach.net\/blog\/?p=57"},"modified":"2010-10-30T23:35:31","modified_gmt":"2010-10-31T04:35:31","slug":"atheros-ar9170-backtrack-4","status":"publish","type":"post","link":"https:\/\/dmach.net\/blog\/2010\/04\/21\/atheros-ar9170-backtrack-4\/","title":{"rendered":"Atheros AR9170 &#038; BackTrack 4"},"content":{"rendered":"<p>I recently broke out my Netgear WNDA3100 adapter that I bought a while ago to replace my old Netgear WG111 that I used to use for cracking wireless networks. Granted, the WG111 was reliable, but the reasons for the replacement are obvious: the WNDA3100 is dual-band and supports 802.11n. But for beginners who don&#8217;t want to shell out as much money nor spend extra time getting a wireless card to work properly, the WG111 is still the best choice.<\/p>\n<p>Spend extra time to get the WNDA3100 to work properly? Yes, it didn&#8217;t quite readily work with BT4 (and probably not with other distros running the same kernel version). After doing some searching, I found a <a href=\"http:\/\/www.backtrack-linux.org\/forums\/backtrack-howtos\/1042-how-get-ar9170-chipset-usb-adapter-working.html\">thread<\/a> on backtrack-linux.org&#8217;s forum that allows my new adapter to work, with full monitor mode &#038; packet injection capabilities. For a matter of record &#038; for easy searching, I&#8217;ll document the directions below.<br \/>\n<!--more--><br \/>\nThese instructions work for any Atheros AR9170 based cards:<\/p>\n<p>    * Arcadyan &#8211; WN7512<br \/>\n    * Atheros &#8211; 9170<br \/>\n    * Atheros &#8211; TG121N<br \/>\n    * AVM &#8211; FRITZ!WLAN USB Stick N<br \/>\n    * AMV &#8211; FRITZ!WLAN USB Stick N 2.4<br \/>\n    * Cace &#8211; Airpcap NX<br \/>\n    * D-Link &#8211; DWA 160A1<br \/>\n    * D-Link &#8211; DWA 160A2<br \/>\n    * IO-Data &#8211; WNGDNUS2<br \/>\n    * Netgear &#8211; WNDA3100<br \/>\n    * Netgear &#8211; WN111 v2<br \/>\n    * Planex &#8211; GWUS300<br \/>\n    * Sphairon &#8211; Homelink 1202<br \/>\n    * TP-Link &#8211; TL-WN821N v2<br \/>\n    * Z-Com &#8211; UB81 BG<br \/>\n    * Z-Com &#8211; UB82 ABG<br \/>\n    * Zydas &#8211; ZD1221<br \/>\n    * Zyxel &#8211; NWD271N<\/p>\n<p>IMPORTANT: please note that the hardware revisions matter, especially for the WNDA3100 that I&#8217;m working with. The WNDA3100v2 uses a Broadcom chipset instead, which has some other issues &#038; corresponding remedies I won&#8217;t be discussing here.<\/p>\n<p>Anyways&#8230;<\/p>\n<p>1.) Download the patched firmwares <a href=\"http:\/\/www.kernel.org\/pub\/linux\/kernel\/people\/mcgrof\/firmware\/ar9170\/ar9170.fw\">ar9170.fw<\/a>, <a href=\"http:\/\/git.kernel.org\/?p=linux\/kernel\/git\/dwmw2\/linux-firmware.git;a=blob_plain;f=ar9170-1.fw;hb=master\">ar9170-1.fw<\/a>, and <a href=\"http:\/\/git.kernel.org\/?p=linux\/kernel\/git\/dwmw2\/linux-firmware.git;a=blob_plain;f=ar9170-2.fw;hb=master\">ar9170-2.fw<\/a> and place them into \/lib\/firmware.<\/p>\n<p>2.) Download <a href=\"http:\/\/www.orbit-lab.org\/kernel\/compat-wireless-2.6-stable\/v2.6.32\/compat-wireless-2.6.32.3.tar.bz2\">compat-wireless-2.6.32.3.tar.bz2<\/a> and untar it to your favorite location.<\/p>\n<p>3.) Run the following in the terminal:<br \/>\n<code>cd compat-wireless-2.6.32.3<br \/>\nmake<br \/>\nmake install<br \/>\nmake unload<\/code><\/p>\n<p>*If you get a &#8220;No such file or directory&#8221; error when you run make, run:<br \/>\n<code>ln -s \/usr\/src\/linux \/lib\/modules\/2.6.30.9\/build<\/code><\/p>\n<p>I didn&#8217;t get the error so I didn&#8217;t run it.<\/p>\n<p>4.) Add &#8220;blacklist arusb_lnx &#8221; to the end of \/etc\/modprobe.d\/blacklist. This will prevent the loading of the buggy\/incorrect drivers and load the proper ones instead.<\/p>\n<p>5.) On line 174 of \/usr\/sbin\/airmon-ng, change &#8220;xar9170&#8221; to &#8220;xar9170usb&#8221;. This will tell airmon from the aircrack suite to use the new drivers.<\/p>\n<p>6.) Save all files and reboot.<\/p>\n<p>Test it using the following:<\/p>\n<p>1.) Plug in your adapter (WNDA3100 in my case) and start the networking service.<br \/>\n<code>\/etc\/init.d\/networking start<\/code><\/p>\n<p>2.) Run:<br \/>\n<code>airmon-ng start <em>wlan0<\/em><\/code><br \/>\nReplace <em>wlan0<\/em> with your wireless interface&#8217;s name. This will put your card into monitoring mode.<\/p>\n<p>3.) Run:<br \/>\n<code>aireplay-ng -9 wlan0<\/code><br \/>\nThe -9 parameter means &#8211;test for short. This should show you some output with the APs found, whether injection was successful, etc.<\/p>\n<p>Enjoy!<\/p>\n<p>These new firmwares and drivers are likely to be incorporated in a newer version of the kernel, and thus later releases of *nix distros, hopefully eliminating the need for a large portion of this hack.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently broke out my Netgear WNDA3100 adapter that I bought a while ago to replace my old Netgear WG111 that I used to use for cracking wireless networks. Granted, the WG111 was reliable, but the reasons for the replacement are obvious: the WNDA3100 is dual-band and supports 802.11n. But for beginners who don&#8217;t want [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,15],"tags":[],"class_list":["post-57","post","type-post","status-publish","format-standard","hentry","category-it-security","category-tutorials"],"_links":{"self":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts\/57","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/comments?post=57"}],"version-history":[{"count":4,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts\/57\/revisions"}],"predecessor-version":[{"id":134,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts\/57\/revisions\/134"}],"wp:attachment":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/media?parent=57"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/categories?post=57"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/tags?post=57"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}