Pwnagotchi: download and save cracked passwords from wpa-sec on interval

[xenDE]

it would be nice if cracked passwords from wpa-secwill be downloaded automaticly and stored in handshakes dir as .pcap.cracked in plaintext - like the quickdic plugin does.

so, extend the wpa-sec plugin with downoad+proccess the cracked pasword list.

steps:

download of the passwordlist:

GET https://wpa-sec.stanev.org/?api&dl=1
with Cookie | key=3e47******************6535c

process the download:
https://github.com/xenDE/pwnagotchi-tools/blob/master/wpa-sec.founds.insert.py

[dadav]

You want to use the file to display it on the map, right?^^

[xenDE]

yes.
I already show the passwords in .pcap.cracked created from quickdic plugin.

[dadav]

Sounds nice, i will add it^^

[dadav]

Added this: https://github.com/dadav/pwnagotchi/tree/feature/wpa-sec-download

but need to test ^^

[dadav]

I'd like to keep it raw and let other plugins parse it for themself

[xenDE]

looks good, but it downloads only if it has a new handshake for upload.

I need to think about "other plugins parse it for themself" - not sure what's the best way.

the potfile is only usable for extract password - implement the parser at every plugin that wants to have the password is not a good way IMHO.

[xenDE]

is working.
only a log message i miss

[dadav]

looks good, but it downloads only if it has a new handshake for upload.

I need to think about "other plugins parse it for themself" - not sure what's the best way.

the potfile is only usable for extract password - implement the parser at every plugin that wants to have the password is not a good way IMHO.

well, its one for-loop and not really a complex parsing because the data is only seperated by ":"^^

for line in file:
  bssid,stamac,ssid,pw = line.split(":")

Will fix the "Only download on new handshake"

Edit:// Fixed it and added a log message. Now it checks every hour.
We could add a functions "get_cracked" and return an array of tuples with the read passwords..

[dadav]

Derek close

[agent932]

Would there be a way to add the cracked networks to the ignore list so the pwnagotchi stops trying to get new handshakes?

[itsdarklikehell]

Would there be a way to add the cracked networks to the ignore list so the pwnagotchi stops trying to get new handshakes?

I second this!☝️

[agent932]

👍

[jacopotediosi]

Onlinehashcrack (starting from PR #821) saves cracked passwords into .pcap.cracked files (one for each password), allowing them to be usable with the webgpsmap plugin.
It would be nice if wpa-sec did the same (?)
In my opinion, save a unique potfile isn't a great solution.