gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Want to share your OpenWrt / Gargoyle knowledge? Implemented a new feature? Let us know here.

Moderator: Moderators

ispyisail
Moderator
Posts: 5180
Joined: Mon Apr 06, 2009 3:15 am
Location: New Zealand

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by ispyisail »

breakstuff wrote:How do I apply the KRACK fix? I already installed Gargoyle using this and it's working great:

gargoyle_1.8.1-ar71xx-generic-wzr-hp-g300nh-squashfs-tftp.bin

Which one of ispysail's files do I download from /gargoyle_ispyisail/images-October-17-2017/atheros to get the KRACK fix, and how do I install it?:

I'm assuming that after I download the appropriate file I would install it using this command?:

mtd -e linux -r write <file> linux
Download the torrent and things will become a little clearer

I don't have that model router but I would assume you would upgrade from the Gargoyle GUI

Image

breakstuff
Posts: 6
Joined: Sun Oct 22, 2017 3:25 pm

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by breakstuff »

I've downloaded the torrent and see the following files under \gargoyle-ispy 2017-October-17 22_47\images\atheros

[ ] gargoyle_1.9.x-ath25-combined.squashfs.img 2017-10-16 23:19 4.0M
[ ] gargoyle_1.9.x-ath25-root.squashfs 2017-10-16 23:19 2.9M
[ ] gargoyle_1.9.x-ath25-ubnt2-pico2-squashfs.bin 2017-10-16 23:19 3.9M
[ ] gargoyle_1.9.x-ath25-vmlinux.elf 2017-10-16 23:19 3.1M
[ ] gargoyle_1.9.x-ath25-vmlinux.gz 2017-10-16 23:19 1.5M
[ ] gargoyle_1.9.x-ath25-vmlinux.lzma 2017-10-16 23:19 1.1M

Which one do I use?

Lantis
Moderator
Posts: 6735
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by Lantis »

Look under ar71xx. Not atheros
Don’t preserve settings when upgrading.
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

breakstuff
Posts: 6
Joined: Sun Oct 22, 2017 3:25 pm

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by breakstuff »

Ah. Thank you. I'm going to install this from the GUI then:

gargoyle_1.9.x-ar71xx-generic-wzr-hp-g300nh-squashfs-sysupgrade.bin

I'll let you know how it goes.

breakstuff
Posts: 6
Joined: Sun Oct 22, 2017 3:25 pm

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by breakstuff »

Applied the fix and everything is running great. Thanks for your help!

Btw, from what I'm reading, there are a very limited number of configurations where patching the access point even matters. I'm assuming the fix released in this thread only really matters if you were using the configuration described here?:

https://github.com/vanhoefm/krackattacks-test-ap-ft

Would that configuration even be expected to be used with a standard Gargoyle implementation?

Lantis
Moderator
Posts: 6735
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by Lantis »

FT is only one aspect that is vulnerable to this exploit.
You are correct that it is not common in Gargoyle (you would need to custom compile and configure it by the command line)

But, Gargoyle being used as a wireless client IS a common configuration. That is very much vulnerable.
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

andreic
Posts: 3
Joined: Mon Feb 15, 2016 5:51 am

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by andreic »

Hi, I applied this version to one of my wrt1900acv2 access points. I am having some horrible issues with devices not being able to communicate with each other over wifi.

Things are fine after reboot, then at some stage things start going bad. e.g. I can't see the chromecast device from my tablet, or I cannot connect to the printer from my laptop.

Anyone else seeing similar issues in this or subsequent releases?

All seemed fine on the "2017-06-14 ispy" release I had previously running on the wrt1900ac device.

ispyisail
Moderator
Posts: 5180
Joined: Mon Apr 06, 2009 3:15 am
Location: New Zealand

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by ispyisail »

andreic wrote:Hi, I applied this version to one of my wrt1900acv2 access points. I am having some horrible issues with devices not being able to communicate with each other over wifi.

Things are fine after reboot, then at some stage things start going bad. e.g. I can't see the chromecast device from my tablet, or I cannot connect to the printer from my laptop.

Anyone else seeing similar issues in this or subsequent releases?

All seemed fine on the "2017-06-14 ispy" release I had previously running on the wrt1900ac device.
failsafe reset or reflash (don't persevere settings)

after that we can look at other things.......

andreic
Posts: 3
Joined: Mon Feb 15, 2016 5:51 am

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by andreic »

ispyisail wrote: failsafe reset or reflash (don't persevere settings)

after that we can look at other things.......
Reflashed. Still seeing some weirdness. My android phone is not finding the chromecast device, but my macbook and android tablet can... maybe this is nothing to do with the gargoyle firmware but I did not have these issues previously.

ispyisail
Moderator
Posts: 5180
Joined: Mon Apr 06, 2009 3:15 am
Location: New Zealand

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Post by ispyisail »

Reflashed. Still seeing some weirdness. My android phone is not finding the chromecast device, but my macbook and android tablet can... maybe this is nothing to do with the gargoyle firmware but I did not have these issues previously.
you need to get somebody else to confirm

i've not had any problems with my chromecast?

Post Reply