gapcast: an IEEE 802.11 packet injection and analyzer software
Gapcast
Gapcast is an IEEE 802.11 packet injection and analyzer software.
The purpose of gapcast is to accurately detect each router’s clients, analyze, capture, inject packets & perform attacks (like Evil-Twin). Gapcast adds more and more parameters for filters and functionality during releases. Gapcast therefore requires good documentation to use the software to its fullest.
Injection Table
The Injection table is a table where you can insert data and perform an attack or injection.
Advantages:
- You don’t need to specify the channel.
- You don’t need to specify the BSSID.
- Multiple synchronized attacks.
- Quick and easy attack initialization.
- Interface with attack information.
For more info click here.
Deep Scanning
The Single Deep Scanning feature focuses on a single target, splitting the scan into three phases. By using the BSSID alone, you can obtain a wide range of information.
Step 1: detect the channel of the AP or STA.
Step 2: collects the packets that are exchanged.
Step 3: arrange the data and calculate the distance based on different antennas.
For more info click here.
Evil-Twin with Captive Portal
By utilizing the INJ Table, you can initiate Evil Twin mode. After selecting the appropriate parameters, the attack will commence. One adapter, if available, will deauthenticate the victim’s AP, while the second adapter will establish a rogue AP equipped with a Captive Portal system. This setup allows for the collection of credentials if the LogIn page templates are configured.
For more info click here.
Monitor mode handler
For each driver there is a correct sequence of commands to start the network card correctly in monitor mode. Drivers supported by gapcast can also have a txpower modification, bug fixing etc. If the driver is not supported, it will start monitor mode directly with airmon-ng.
Supported drivers:
RTL88XXAUmon+txpowerR8187mon+bugfixRTL8812CUmonRTL8821CUmon
