Add optional toggle to allow deauth on the internal Wi-Fi radio - #92
Open
Loukious wants to merge 1 commit into
Open
Add optional toggle to allow deauth on the internal Wi-Fi radio#92Loukious wants to merge 1 commit into
Loukious wants to merge 1 commit into
Conversation
The app hard-assumed the internal radio (wlan0/swlan0) can never do deauthentication, so attacks either silently swapped the deauth interface to the scan adapter or skipped deauth entirely. That is wrong for devices whose internal radio does support monitor mode and injection (e.g. Qualcomm qcacld chipsets). Gate the old behavior behind a new Settings switch instead of removing it, so devices whose internal radio genuinely cannot inject are unaffected: - Off (default): exactly the previous behavior - internal-radio deauth interfaces are swapped to the scan adapter or deauth is skipped - On: the internal radio is allowed as a deauth interface in the handshake attack (type 3) and the standalone deauth dialog (type 7) Monitor-mode handling is untouched: enabling/disabling still uses the existing per-adapter custom commands, so airmon-ng-based setups keep working via Settings -> Custom monitor commands.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The app hard-assumed the internal Wi-Fi radio (
wlan0/swlan0) can never perform deauthentication. In the handshake attack (type 3) the deauth interface was silently swapped to the scan adapter, or deauth was skipped entirely; in the standalone deauth dialog (type 7) the attack was refused outright with "internal wifi adapter does not support packet injection".That assumption is wrong for devices whose internal radio does support monitor mode and injection — e.g. Qualcomm qcacld chipsets, where
airmon-ng start wlan0creates a workingwlan0monmonitor vif.Fix
Gate the old behavior behind a new Settings switch — "Deauth with internal adapter" — rather than removing it, so devices whose internal radio genuinely cannot inject keep the current safe behavior:
The toggle lives next to the existing internal-adapter settings and is hidden in rootless mode (no internal radio exists in the VM there).
Deliberately out of scope
Monitor-mode enable/disable commands are untouched. Devices that need
airmon-ngfor the internal radio can already configure that per adapter via Settings → Custom monitor commands — no fallbacks or auto-detection were added.Verified on a Xiaomi 25053PC47G (Android 17, KernelSU-Next, qcacld
qca_cld3_wcn7750): withairmon-ngcommands configured on the internal adapter card and the toggle enabled, deauth runs onwlan0mon.