Page 5 of 5

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Sun Oct 22, 2017 4:47 pm
by ispyisail
breakstuff wrote:How do I apply the KRACK fix? I already installed Gargoyle using this and it's working great:

gargoyle_1.8.1-ar71xx-generic-wzr-hp-g300nh-squashfs-tftp.bin

Which one of ispysail's files do I download from /gargoyle_ispyisail/images-October-17-2017/atheros to get the KRACK fix, and how do I install it?:

I'm assuming that after I download the appropriate file I would install it using this command?:

mtd -e linux -r write <file> linux
Download the torrent and things will become a little clearer

I don't have that model router but I would assume you would upgrade from the Gargoyle GUI

Image

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Sun Oct 22, 2017 4:59 pm
by breakstuff
I've downloaded the torrent and see the following files under \gargoyle-ispy 2017-October-17 22_47\images\atheros

[ ] gargoyle_1.9.x-ath25-combined.squashfs.img 2017-10-16 23:19 4.0M
[ ] gargoyle_1.9.x-ath25-root.squashfs 2017-10-16 23:19 2.9M
[ ] gargoyle_1.9.x-ath25-ubnt2-pico2-squashfs.bin 2017-10-16 23:19 3.9M
[ ] gargoyle_1.9.x-ath25-vmlinux.elf 2017-10-16 23:19 3.1M
[ ] gargoyle_1.9.x-ath25-vmlinux.gz 2017-10-16 23:19 1.5M
[ ] gargoyle_1.9.x-ath25-vmlinux.lzma 2017-10-16 23:19 1.1M

Which one do I use?

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Sun Oct 22, 2017 5:12 pm
by Lantis
Look under ar71xx. Not atheros
Don’t preserve settings when upgrading.

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Sun Oct 22, 2017 5:21 pm
by breakstuff
Ah. Thank you. I'm going to install this from the GUI then:

gargoyle_1.9.x-ar71xx-generic-wzr-hp-g300nh-squashfs-sysupgrade.bin

I'll let you know how it goes.

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Mon Oct 23, 2017 12:26 am
by breakstuff
Applied the fix and everything is running great. Thanks for your help!

Btw, from what I'm reading, there are a very limited number of configurations where patching the access point even matters. I'm assuming the fix released in this thread only really matters if you were using the configuration described here?:

https://github.com/vanhoefm/krackattacks-test-ap-ft

Would that configuration even be expected to be used with a standard Gargoyle implementation?

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Mon Oct 23, 2017 3:13 am
by Lantis
FT is only one aspect that is vulnerable to this exploit.
You are correct that it is not common in Gargoyle (you would need to custom compile and configure it by the command line)

But, Gargoyle being used as a wireless client IS a common configuration. That is very much vulnerable.

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Wed Nov 01, 2017 8:32 am
by andreic
Hi, I applied this version to one of my wrt1900acv2 access points. I am having some horrible issues with devices not being able to communicate with each other over wifi.

Things are fine after reboot, then at some stage things start going bad. e.g. I can't see the chromecast device from my tablet, or I cannot connect to the printer from my laptop.

Anyone else seeing similar issues in this or subsequent releases?

All seemed fine on the "2017-06-14 ispy" release I had previously running on the wrt1900ac device.

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Wed Nov 01, 2017 2:54 pm
by ispyisail
andreic wrote:Hi, I applied this version to one of my wrt1900acv2 access points. I am having some horrible issues with devices not being able to communicate with each other over wifi.

Things are fine after reboot, then at some stage things start going bad. e.g. I can't see the chromecast device from my tablet, or I cannot connect to the printer from my laptop.

Anyone else seeing similar issues in this or subsequent releases?

All seemed fine on the "2017-06-14 ispy" release I had previously running on the wrt1900ac device.
failsafe reset or reflash (don't persevere settings)

after that we can look at other things.......

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Tue Nov 07, 2017 6:34 am
by andreic
ispyisail wrote: failsafe reset or reflash (don't persevere settings)

after that we can look at other things.......
Reflashed. Still seeing some weirdness. My android phone is not finding the chromecast device, but my macbook and android tablet can... maybe this is nothing to do with the gargoyle firmware but I did not have these issues previously.

Re: gargoyle-ispy 2017-October-17 22:47.torrent - Krack FIX

Posted: Tue Nov 07, 2017 3:01 pm
by ispyisail
Reflashed. Still seeing some weirdness. My android phone is not finding the chromecast device, but my macbook and android tablet can... maybe this is nothing to do with the gargoyle firmware but I did not have these issues previously.
you need to get somebody else to confirm

i've not had any problems with my chromecast?