Omphalos: Difference between revisions
| (23 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
[[File:omphalos.png|right]] | |||
[[File:omphalos-2011-12-01.jpg|thumb|right|Three omphalos processes, 2011-12-01]] | [[File:omphalos-2011-12-01.jpg|thumb|right|Three omphalos processes, 2011-12-01]] | ||
A tool for network enumeration, protection, observation and domination. Omphalos makes use of passive and active portscanning, DNS/DHCP/[[Zeroconf]] server interrogation, portknock detection, covert channel detection and establishment, ARP scanning, automatic WEP cracking, man-in-the-middling, and a whole host of other tricks. GPS integration? Oh yes. Coordination across multiple interfaces? Of course. Use of Linux's <tt>MMAP_RX_SOCKET</tt> and <tt>MMAP_TX_SOCKET</tt>? Wouldn't have it any other way. Userspace networking is made visible to the host via a [[TUN/TAP]] device. While designed as an offensive tool, omphalos has proven useful for network debugging and troubleshooting, as well as experimentation. | |||
* '''The latest release is [https://github.com/dankamongmen/omphalos/releases/tag/v0.99.9 0.99.9], released 2019-11-20.''' | |||
* [[Arch]]'s AUR contains [https://aur.archlinux.org/packages/omphalos/ omphalos] | |||
'''Omphalos: Because one layer is never enough.''' Code is hosted on [https://github.com/dankamongmen/omphalos GitHub]. | Omphalos is not a "''point-and-click''" tool so much as "''pull the pin''" or perhaps "''spray the area''". Default behavior is to redirect and seize all traffic, attack weak cryptosystems, archive authentication materials, and learn everything that can be learned. Ideally, a tiny microprocessor would be paired with power and a network device, stealthily physically inserted into a network, and left there; <tt>omphalos</tt> and [[Hackery#liburine|liburine]] would then combine to provide complete network dominance. I hope to combine network programming and the techniques of high-performance computing to create a tool capable of much havoc. | ||
'''Omphalos: Because one layer is never enough.''' Code is hosted on [https://github.com/dankamongmen/omphalos GitHub], as are [https://github.com/dankamongmen/omphalos/issues modern issues]. Old bugs are still available at [https://nick-black.com/bugzilla/buglist.cgi?cmdtype=runnamed&namedcmd=omphalos bugzilla]. There's a mailing list at [http://groups.google.com/group/omphalos-dev Google Groups]. | |||
==Similar Tools== | ==Similar Tools== | ||
* [http://www.thoughtcrime.org/software/sslsniff/ SSLSNIFF] from Thoughtcrime Labs | * [http://www.thoughtcrime.org/software/sslsniff/ SSLSNIFF] from Thoughtcrime Labs | ||
| Line 14: | Line 17: | ||
* [http://www.jdisc.com/ JDisc Discovery] from JDisc UG | * [http://www.jdisc.com/ JDisc Discovery] from JDisc UG | ||
* [http://www.lantopolog.com/ LanTopolog] by Yuriy Volokitin | * [http://www.lantopolog.com/ LanTopolog] by Yuriy Volokitin | ||
* [http://code.google.com/p/mirandaupnptool/ Miranda] by Craig Heffner | |||
===Countertools=== | ===Countertools=== | ||
We want to defeat systems like: | We want to defeat systems like: | ||
| Line 374: | Line 378: | ||
* VLAN hopping | * VLAN hopping | ||
====802.11==== | ====[[WiFi|802.11]]==== | ||
* Passively attack weak cryptosystems (especially WEP), or do so actively if configured | * Passively attack weak cryptosystems (especially WEP), or do so actively if configured | ||
* Channel hopping or locked operation | * Channel hopping or locked operation | ||
| Line 380: | Line 384: | ||
* Respond as master to probed networks, on a to-order basis | * Respond as master to probed networks, on a to-order basis | ||
* Ability to run omphalos in as an AP client via userspace networking atop radiotap (Monitor mode) and WPA/EAPOL support | * Ability to run omphalos in as an AP client via userspace networking atop radiotap (Monitor mode) and WPA/EAPOL support | ||
** Or, more likely, some kind of hostapd control using Master mode | |||
* "[http://www.airtightnetworks.com/WPA2-Hole196 Hole 196]" injection | * "[http://www.airtightnetworks.com/WPA2-Hole196 Hole 196]" injection | ||
* Viehbock's [http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf WPS EAP-NACK] brute-force attack ([http://www.kb.cert.org/vuls/id/723755 US-CERT #723755]) | * Viehbock's [http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf WPS EAP-NACK] brute-force attack ([http://www.kb.cert.org/vuls/id/723755 US-CERT #723755]) | ||
| Line 406: | Line 411: | ||
Omphalos currently only runs or indeed builds on fairly recent Linux systems, due to extensive use of advanced capabilities of the Linux networking stack (and the small fact that I don't run anything else). I doubt that I would accept patches to add Windows/MacOSX support, but you're certainly welcome to maintain them yourself. Once the main functionality set is complete (0.98 release), I'll add support for falling back to plain old PF_PACKET sockets without ringbuffers; that ought add support for any UNIX-based OS with a basic <tt>rtnetlink</tt> implementation. | Omphalos currently only runs or indeed builds on fairly recent Linux systems, due to extensive use of advanced capabilities of the Linux networking stack (and the small fact that I don't run anything else). I doubt that I would accept patches to add Windows/MacOSX support, but you're certainly welcome to maintain them yourself. Once the main functionality set is complete (0.98 release), I'll add support for falling back to plain old PF_PACKET sockets without ringbuffers; that ought add support for any UNIX-based OS with a basic <tt>rtnetlink</tt> implementation. | ||
===User Interfaces=== | ===User Interfaces=== | ||
* <tt>omphalos-tty</tt>: line-based console output with readline-based input | * <tt>omphalos-tty</tt>: line-based console output with [[readline]]-based input | ||
* <tt>omphalos-ncurses</tt>: screen-based terminal output with ncurses-based input | * <tt>omphalos-ncurses</tt>: screen-based terminal output with [[ncurses]]-based input | ||
* GTK: I'd like to add a GTK UI, but it's not a major priority | * GTK: I'd like to add a GTK UI, but it's not a major priority | ||
** If you'd like to contribute freely-licensed, original artwork to this effort, please contact me! | ** If you'd like to contribute freely-licensed, original artwork to this effort, please contact me! | ||
* WxWidgets, QT: Dubious that I'll add one, but I'd take patches. | * WxWidgets, QT: Dubious that I'll add one, but I'd take patches. | ||
* Java: nope | * Java: nope | ||
==Project documentation== | ==Project documentation== | ||
Transcluded from top of my git repository at GitHub. | Transcluded from top of my git repository at GitHub. | ||