Eircog is a Python tool that is used to actively generate keys for nearby access points that are vulnerable to
-
the Netopia predictable WEP key generation issue discovered by Kevin Devine, most commonly found in the routers of a particularly large Irish telco.
-
bl4sty's WPA key generation method for UPC routers in various countries.
It uses system binaries to obtain the SSIDs of nearby access points under Linux and OS X and then generates the corresponding keys.
This tool requires iwtools under Linux (and permission to run iwlist).
This tool was not built with malice in mind but frankly has little honourable application.
--help: show help information
--s=SSIDSTRING or --ssidonly=SSIDSTRING: return the key(s) for a given string and immediately exit.
--interface=INTERFACE or -i=INTERFACE: Specify the interface to scan with. This is MANDATORY in Linux. Has no effect under OS X.
-d or --daemon: Run the script constantly, scanning every SLEEPINTERVAL (by default this is 5 seconds). The term "daemon" is used because I was a moron. To be fixed.
-4: Generate 4 keys instead of the standard 1 when using the Eircom exploit.
-U: Generate UPC key suggestions - this will VASTLY increase execution time.
Add an option for key injection without joining, to save the user copy and pasting and to
allow one scan of an area to potentially provide access to all seen APs. This might be doable
with OS X's security command, although it doesn't seem to give access to the part of the
keychain that looks after "Airport" entries. I'm not sure about how this storage could be
done in Linux, assumedly files for Network Manager or equivalent commands could be altered.
A disclaimer as regards the use of this script goes here but that would be insulting to the intelligence of the reader