-
Notifications
You must be signed in to change notification settings - Fork 12
Home
- Set the desired "Scan Frequency" (in seconds). The default value configures the scanner to run every 300 seconds (5 minutes).
- Press "Start" to enable the scanner scheduled scans.
- Press "Stop" to disable the scanner scheduled scans.
- Enable "Auto start at boot" to automatically start the scanner scheduled scans at boot time.
The core detection procedure is implemented as an IntentService and can run scans in the background, at a determined time frequency (configured in seconds).
The application creates a random 16 alphanumeric character SSID (preceded by the string "KD-") and configures a new WPA2-PSK profile with a random 63 alphanumeric character key, set as an hidden SSID network. This network will serve as the decoy network for Karma attacks detection. Every time a scan is executed on the scheduled timeframe, the list of received SSDIs is compared to the decoy network created. If a match is found, a notification is dispatched to the device, along with details of the origin BSSID, signal level, frequency and wireless capabilities.
Note: the application removes all wifi networks that start with "KD-" and are 16 characters long. This process is necessary to properly clean networks left behind because of a possible application crash or other non-graceful exit scenario.
The application requires the wifi module to be enabled, in order to send SSID probes for the hidden networks configured on the device. Apparently the Android WIFI_MODE_SCAN_ONLY does not include hidden SSIDs on their scans.
The application requires the following permissions:
- Location: to get the current networks list.
- Wi-Fi change: to enable the wifi connection, add and remove decoy networks.
- Keep awake: to scan even when the device is in sleep mode.
- Auto start: to automatically start the scanner when the device boots.