Mirrors
/
fluxion
mirror of https://github.com/FluxionNetwork/fluxion.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fixed a bug caused by unescaped strings.

This commit is contained in:
Matias Barcenas 2017-12-21 22:15:44 -06:00
parent 086693782b
commit 85f692b50e
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
attacks/Captive Portal/attack.sh
View File

@ -670,7 +670,7 @@ while [ \$AuthenticatorState = \"running\" ]; do
echo
echo -e \" ACCESS POINT:\"
echo -e \" SSID ...........: $CWht$APTargetSSID$CClr\"
echo -e \" SSID ...........: $CWht$APTargetSSIDEscaped$CClr\"
echo -e \" MAC ............: $CYel$APTargetMAC$CClr\"
echo -e \" Channel ........: $CWht$APTargetChannel$CClr\"
echo -e \" Vendor .........: $CGrn${APTargetMaker:-UNKNOWN}$CClr\"
@ -731,7 +731,7 @@ fi
echo \"
FLUXION $FLUXIONVersion
SSID: $APTargetSSID
SSID: $APTargetSSIDEscaped
BSSID: $APTargetMAC ($APTargetMaker)
Channel: $APTargetChannel
Security: $APTargetEncryption

4
fluxion.sh
View File

@ -695,7 +695,9 @@ function fluxion_set_target_ap() {
# network something like "; rm -rf / ;". If the string isn't sanitized accidentally
# shit'll hit the fan and we'll have an extremely distressed person subit an issue.
# Removing: ' ', '/', '.', '~'
APTargetSSIDClean=$(echo "$APTargetSSID" | sed -r 's/( |\/|\.|\~)+/_/g')
local strippedSSID=$(echo "$APTargetSSID" | sed -r 's/( |\/|\.|\~)+/_/g')
APTargetSSIDClean=$(printf "%q" "$strippedSSID") # Escape specials for safety.
APTargetSSIDEscaped=$(printf "%q" "$APTargetSSID") # Regular with escaped specials too.
# We'll change a single hex digit from the target AP's MAC address.
# This new MAC address will be used as the rogue AP's MAC address.