Hackers of India

WiMonitor - an OpenWRT package for remote WiFi sniffing

By  Vivek Ramachandran   Nishant Sharma   Ashish Bhangale  on 29 Jul 2017 @ Defcon : DemoLabs

This Tool Demo covers following tools where the speaker has contributed or authored
WIMONITOR

Abstract

WiMonitor is ready to use OpenWRT package which allows the user to convert an OpenWRT WiFi router into a remote WiFi sniffer. It modifies the LuCI interface to show the task-specific configuration option. With the right configuration, it then captures the WiFi packets using monitor mode (while hopping on configured channels) and sends them to the remote machine as Aruba ERM (Encapsulated Remote Mirroring) packets. This allows the user to observe, capture and analyze traffic from multiple sources (read APs turned into sensors) on one machine (laptop/PC) using off the shelf OpenWRT compatible routers.