WPA/2 Handshake Capture

hostapd-mana can now capture WPA/2 handshakes from stations attempting to associate to a WPA/2 network. The handshakes are captured directly to hashcat's hccapx format. This is covered in the wiki:
https://github.com/sensepost/hostapd-mana/wiki/MANA-WPA-2-Options-(handshakes)

Two bugfixes:

• Fixed ACL white/black list when no mask is specified
• Fixed a SSID filter parsing error

Defcon 26

The shiny new mana released for Defcon 26 complete with @cablethief's new EAP relay attack, sycophant.
You'll need wpa_sycophant for the relay.

WPE Rewrite

Rewrote all WPE options & wrapped them all in configuration options. Check the wiki for more information: https://github.com/sensepost/hostapd-mana/wiki/Basic-WPE-Options

Huge shouts to hostapd-wpe and Brad Anton for the original work, however this is a very different implementation with more extensive EAP support.

NB The ennode option has changed, and this version is not backwards compatible with mana-toolkit.

Defcon 26 pre-release

A pre-release before Defcon. Includes:

• Update to hostapd v2.6 from v2.4
• EAP-TLS rogue'ing works again
• Management-frame level MAC ACL's (see ref )
• Denton Gentry's device taxonomy output to device activity log (see ref )
• Full output of device probing activity/logging (see above)
• Implemented CYBERDEViLNL's SSID filter (see ref )
• Includes AWS CodeBuild and Travis-CI build configs.

AWS CodeBuild Automated Builds

AWS CodeBuild now builds this automagically. You can get them at:
https://s3.amazonaws.com/sensepost-hostapd-mana/binaries/hostapd-mana-ELF-x86-64

The build is currently:

If you'd like them for different arch's wait for the proper release, or check out the buildspec.yml