Pulling WEP KEYs/MAC FILTER From Linksys/D-link ect

Dumb Newbie quesiton regarding this exploit:
http://www.securiteam.com/securitynews/6P0021P60A.html
(searched web and AO, I don't know where to look i guess)

I Copied and pasted exploit to a file named "exploit" on my Slackware *nix box and tried to execute by doing sh ./exploit I've chmod 4711 it but to know avail I keep getting errors when I run the exploit:

bash-2.05a# ./exploit
./exploit: typedef: command not found
./exploit: char: command not found
./exploit: char: command not found
./exploit: char: command not found
./exploit: char: command not found
./exploit: line 12: syntax error near unexpected token '}'
./exploit: line 12: '}'

I'm sure i'm executing the script the wrong way :)
Thanks

Dumb Newbie quesiton regarding this exploit:
http://www.securiteam.com/securitynews/6P0021P60A.html
(searched web and AO, I don't know where to look i guess)

I Copied and pasted exploit to a file named "exploit" on my Slackware *nix box and tried to execute by doing sh ./exploit I've chmod 4711 it but to know avail I keep getting errors when I run the exploit:

bash-2.05a# ./exploit
./exploit: typedef: command not found
./exploit: char: command not found
./exploit: char: command not found
./exploit: char: command not found
./exploit: char: command not found
./exploit: line 12: syntax error near unexpected token '}'
./exploit: line 12: '}'

I'm sure i'm executing the script the wrong way :)
Thanks

since it's a program and not a script.. you have to compile it.

since it's a program and not a script.. you have to compile it.

It's a c program, not a shell script. You have to compile it, not just make it executable.
It would be best to save it as exploit.c and then run

# cc exploit.c

You can then run ./a.out to try the exploit.
Good luck!

It's a c program, not a shell script. You have to compile it, not just make it executable.
It would be best to save it as exploit.c and then run

# cc exploit.c

You can then run ./a.out to try the exploit.
Good luck!

pretty wild... My old boss told me how impossible it is to get this stuff cracked with all the encryption... and then against my advice installed a linksys WAP in a bank system....
Yikes.

pretty wild... My old boss told me how impossible it is to get this stuff cracked with all the encryption... and then against my advice installed a linksys WAP in a bank system....
Yikes.

Algaen or anyone else that wants to help my dumb arse,

I tried 'cc exploit.c -o exploit' and also 'gcc exploit.c -o exploit' .. However to no avail I keep getting errors :(

bash-2.05a# cc exploit.c -o exploit
exploit.c:8: parse error before character 0240
exploit.c:8: warning: no semicolon at end of struct or union
exploit.c:13: warning: `packed' attribute ignored
exploit.c: In function `main':
exploit.c:17: parse error before character 0240

Thanks Algaen for your help..

for those of you that want to try this exploit on windows boxes lookup pong.exe and wepcrck.exe on google.com. In regards to Avenger_jcc's post, this exploit only works if you are associated with the victim access point, also if you have updated firmware on your access point you should be in the clear for now!

it did compile for me (with 1 warning)

gcc -c exploit.c -o exploit

./exploit

got me an exception error (sigsev)

so the compilation did work, the execution didn't..

well too bad..

tested on slackware 9.0 rc3 (build 14-03-2003)

Which bank????? J/K.....

lol hehe
dont think so. If anyone were to rob it Id be the FIRST one they looked at as Ive pointed this out before.
I tried compiling that code too and ran into issues, but havent sat down to really look it over yet

I really REALLY appreciate you guys taking the time and lending me a hand with this code. Atleast I'm not the only one having problems with this code. I too am running Slackware but it's v8.1. Anyways, I guess I'm gonna have to buy a book on C to figure out why this junk isn't compiling properly.

my girlfriend thanks all you guys too, for helping me be a "bigger dork" ... hmph thanks guys

keep in mind that this exploit is only usefull if you are associated with the Access Point, meaning you are still gonna have to either hack WEP or MAC Filters, maybe both to gain access to the WLAN before you can actually get this info. It would be possible for an attacker to get physical access to your wired network and send a broadcast out (this exploit) asking for all your wireless access points info. So a possible security measure would be to place a firewall or router between your WLAN and LAN keeping the broadcast domains seperate.

Thanks again guys

BINGO,

The exploit on that website wasn't spaced properly! I found another copy of the exploit on the web which would compile and execute properly, when comparing the two, the only difference was the spacing... LOL

C and C++ are not space sencitive!!!

take a look at some of the source codes on this website !!

But I don't have the time to look into it atm..

I think there must have been some other small difference . .

holy crap! That is a very interesting site, so I'll go out on a limb and say that it may not of been spacing which caused the compiling problem. However, I'm betting it is a formatting problem somewhere along the code, because I've typed in that code from the secureiteam.com website character by character and it compiled and executed.

Note that both versions of the code gave the compiler a fit with the "sendto" statement something about illegal pointer.

I'll take a look at the code tonight, we shall get to the bottom of this!

lata