Below is an example of a ProbeClientsConnected table.

Arguments usage: wifi_db.py [-h] [-v] [--debug] [-o] [-t LAT] [-n LON] [--source [{aircrack-ng,kismet,wigle}]] [-d DATABASE] capture [capture ...]

positional arguments:
capture capture folder or file with extensions .csv, .kismet.csv, .kismet.netxml, or .log.csv. If no extension is provided, all types will
be added. This option supports the use of wildcards (*) to select multiple files or folders.

options:
-h, --help show this help message and exit
-v, --verbose increase output verbosity
--debug increase output verbosity to debug
-o, --obfuscated Obfuscate MAC and BSSID with AA:BB:CC:XX:XX:XX-defghi (WARNING: replace all database)
-t LAT, --lat LAT insert a fake lat in the new elements
-n LON, --lon LON insert a fake lon i n the new elements
--source [{aircrack-ng,kismet,wigle}]
source from capture data (default: aircrack-ng)
-d DATABASE, --database DATABASE
output database, if exist append to the given database (default name: db.SQLITE) Kismet TODO Wigle TODO Database wifi_db contains several tables to store information related to wireless network traffic captured by airodump-ng. The tables are as follows: AP: This table stores information about the access points (APs) detected during the captures, including their MAC address (bssid), network name (ssid), whether the network is cloaked (cloaked), manufacturer (manuf), channel (channel), frequency (frequency), carrier (carrier), encryption type (encryption), and total packets received from this AP (packetsTotal). The table uses the MAC address as a primary key. Client: This table stores information about the wireless clients detected during the captures, including their MAC address (mac), network name (ssid), manufacturer (manuf), device type (type), and total packets received from this client (packetsTotal). The table uses the MAC address as a primary key. SeenClient: This table stores information about the clients seen during the captures, including their MAC address (mac), time of detection (time), tool used to capture the data (tool), signal strength (https://www.kitploit.com/search/label/Signal%20Strength) (signal_rssi), latitude (lat), longitude (lon), altitude (alt). The table uses the combination of MAC address and detection time as a primary key, and has a foreign key relationship with the Client table. Connected: This table stores information about the wireless clients that are connected to an access point, including the MAC address of the access point (bssid) and the client (mac). The table uses a combination of access point and client MAC addresses as a primary key, and has foreign key relationships with both the AP and Client tables. WPS: This table stores information about access points that have Wi-Fi Protected Setup (WPS) enabled, including their MAC address (bssid), network name (wlan_ssid), WPS version (wps_version), device name (wps_device_name), model name (wps_model_name), model number (wps_model_number), configuration methods (wps_config_methods), and keypad configuration methods (wps_config_methods_keypad). The table uses the MAC address as a primary key, and has a foreign key relationship with the AP table. SeenAp: This table stores information about the access points seen during the captures, including their MAC address (bssid), time of detection (time), tool used to capture the data (tool), signal strength (signal_rssi), latitude (lat), longitude (lon), altitude (alt), and timestamp (bsstimestamp). The table uses the combination of access point MAC address and detection time as a primary key, and has a foreign key relationship with the AP table. Probe: This table stores information about the probes sent by clients, including the client MAC address (mac), network name (ssid), and time of probe (time). The table uses a combination of client MAC address and

network name as a primary key, and has a foreign key relationship with the Client table. Handshake: This table stores information about the handshakes captured during the captures, including the MAC address of the access point (bssid), the client (mac), the file name (file), and the hashcat format (hashcat). The table uses a combination of access point and client MAC addresses, and file name as a primary key, and has foreign key relationships with both the AP and Client tables. Identity: This table represents EAP (Extensible Authentication (https://www.kitploit.com/search/label/Authentication) Protocol) identities and methods used in wireless authentication. The bssid and mac fields are foreign keys that reference the AP and Client tables, respectively. Other fields include the identity and method used in the authentication process. Views ProbeClients: This view selects the MAC address of the probe, the manufacturer and type of the client device, the total number of packets transmitted by the client, and the SSID of the probe. It joins the Probe and Client tables on the MAC address and orders the results by SSID. ConnectedAP: This view selects the BSSID of the connected access point, the SSID of the access point, the MAC address of the connected client device, and the manufacturer of the client device. It joins the Connected, AP, and Client tables on the BSSID and MAC address, respectively, and orders the results by BSSID. ProbeClientsConnected: This view selects the BSSID and SSID of the connected access point, the MAC address of the probe, the manufacturer and type of the client device, the total number of packets transmitted by the client, and the SSID of the probe. It joins the Probe, Client, and ConnectedAP tables on the MAC address of the probe, and filters the results to exclude probes that are connected to the same SSID that they are probing. The results are ordered by the SSID of the probe. HandshakeAP: This view selects the BSSID of the access point, the SSID of the access point, the MAC address of the client device that performed the handshake, the manufacturer of the client device, the file containing the handshake, and the hashcat output. It joins the Handshake, AP, and Client tables on the BSSID and MAC address, respectively, and orders the results by BSSID. HandshakeAPUnique: This view selects the BSSID of the access point, the SSID of the access point, the MAC address of the client device that performed the handshake, the manufacturer of the client device, the file containing the handshake, and the hashcat output. It joins the Handshake, AP, and Client tables on the BSSID and MAC address, respectively, and filters the results to exclude handshakes that were not cracked by hashcat. The results are grouped by SSID and ordered by BSSID. IdentityAP: This view selects the BSSID of the access point, the SSID of the access point, the MAC address of the client device that performed the identity request, the manufacturer of the client device, the identity string, and the method used for the identity request. It joins the Identity, AP, and Client tables on the BSSID and MAC address, respectively, and orders the results by BSSID. SummaryAP: This view selects the SSID, the count of access points broadcasting the SSID, the encryption type, the manufacturer of the access point, and whether the SSID is cloaked. It groups the results by SSID and orders them by the count of access points in descending order. TODO Aircrack-ng All in 1 file (and separately) Kismet Wigle install parse all files in folder -f --folderFix Extended errors, tildes, etc (fixed in aircrack-ng 1.6) Support bash multi files: "capture*-1*" Script to delete client or AP from DB (mac). - (Whitelist) Whitelist to don't add mac to DB (file whitelist.txt, add macs, create DB) Overwrite if there is new info (old ESSID='', New ESSID='WIFI') Table

Handhsakes and PMKID Hashcat hash format 22000 Table files, if file exists skip (full path) Get HTTP POST passwords DNS querys
This program is a continuation of a part of: https://github.com/T1GR3S/airo-heat Author Raúl Calvo Laorden (@r4ulcl) License GNU General Public License v3.0 (https://github.com/r4ulcl/wifi_db/blob/master/LICENSE)

Download Wifi_Db (https://github.com/r4ulcl/wifi_db/)

How to turn a non-applicable vulnerability into an accepted one in bug bounty hunting

It happens and it can be annoying when you’re very certain that you are onto something valuable. A bug bounty program may initially mark a…Continue reading on Medium »
Read more...

Hacking on Medium
JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x02)

https://cdn-images-1.medium.com/max/1280/0*-9m5oYWUOlc0ICr3.png
Hi! My name is Hashar Mujahid. I am a security researcher and a penetration tester. This blog is part 2 of the comprehensive exploitation…

Continue reading on InfoSec Write-ups »

Hacking on Medium
TwoFish Encryption: A Comprehensive Guide | 2023

https://cdn-images-1.medium.com/max/1366/1*5aHfYrK9iEsGf7AqJf2Hpw.png
Understanding the Key Features, Strengths, and Weaknesses of TwoFish Encryption | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
OSCP review and comparison

https://cdn-images-1.medium.com/max/619/1*gUF5L96xI_jRAzBiOHxhLg.png
PEN-200 course and lab review, OSCP certification preparation and comparison versus INE eCPPTv2, TCM Security PNTP and Hack The Box CPTS.

Continue reading on Medium »

Hacking on Medium
Cold Boot Attack

https://cdn-images-1.medium.com/max/728/0*w5JhYvaQkWbi5xQr.jpg
What is a Cold Boot Attack?

Continue reading on Medium »

Hacking on Medium
Sandworm’s kingpin, a CISA ransomware pilot and pandemic scams

https://cdn-images-1.medium.com/max/2500/1*U_zigx1X2T0EnFF7gMVsTA.png
Welcome to Changelog for 3/19/23, published by Synack! Blake here, basking in the annual D.C. tradition of peak cherry blossom bloom. I’ll…

Continue reading on README_ »

hacking: security in practice
Prepping for OSCP

Good Morning,

Little bit of background about myself, I have currently 8 years of total experience so far in IT/CYBER/SIGINT work. I've done a lot of DCO and OCO related work during my time and I've submitted a fair bit of reports in terms of what I see and collect. I'm looking to get the OSCP certification, and I know I'm no where near the expert level that a lot of you are at. I've completed a fair bit of tryhackme learning paths however they primarily use Metasploit and from what I understand, the OSCP exam doesn't allow you to use that tool.

What courses or pipeline training would you recommend I take that will better prepare me to take the exam on top of the provided PWK?

submitted by /u/Ja-sot
[link] [comments]

hacking: security in practice
Hackers Can Access Exynos Chip Phones with Just a Contact Number. Google has Reported 18 Vulnerabilities.

https://external-preview.redd.it/-zgCJvfFffLk1BU8nKXMcM1QTaxFCaql22z0XaHpxJI.jpg?width=640&crop=smart&auto=webp&s=116cfe2a2fc20f96a83824fa4eb1d600d23bc46c submitted by /u/Damanjain
[link] [comments]

iOS Mobile Application (i.e. .IPA) Vulnerability Assessment and Penetration Testing Walkthrough.
https://medium.com/@livelession/ios-mobile-application-i-e-ipa-vulnerability-assessment-and-penetration-testing-walkthrough-4e351484fdb9?source=rss------bug_bounty-5