|
| 1 | +This module is scanner which enumerates wifi access points visible from a Google Chromecast via its HTTP interface (default port 8080). Any wifi access point the Chromecast is associated with or can be associated with is marked with an `(*)`. |
| 2 | + |
| 3 | +## Verification Steps |
| 4 | + |
| 5 | +1. Do: ```use auxiliary/scanner/http/chromecast_wifi``` |
| 6 | +2. Do: ```set RHOSTS [IP]``` |
| 7 | +3. Do: ```run``` |
| 8 | + |
| 9 | +## Sample Output |
| 10 | + |
| 11 | +Of note, all 3 of the devices are the 1st generation Google Chromecast (USB stick looking, not circular) |
| 12 | + |
| 13 | +``` |
| 14 | +msf > use auxiliary/scanner/http/chromecast_wifi |
| 15 | +msf auxiliary(chromecast_wifi) > set rhosts 10.10.10.0/24 |
| 16 | +rhosts => 10.10.10.0/24 |
| 17 | +msf auxiliary(chromecast_wifi) > set threads 20 |
| 18 | +threads => 20 |
| 19 | +msf auxiliary(chromecast_wifi) > set verbose true |
| 20 | +verbose => true |
| 21 | +msf auxiliary(chromecast_wifi) > run |
| 22 | +
|
| 23 | +Wireless Access Points from 10.10.10.11 |
| 24 | +======================================== |
| 25 | +
|
| 26 | +BSSID PWR ENC CIPHER AUTH ESSID |
| 27 | +----- --- --- ------ ---- ----- |
| 28 | +00:11:22:33:44:55 -59 WPA2 CCMP PSK Rapid7 (*) |
| 29 | +aa:11:22:33:44:66 -71 OPN xfinitywifi |
| 30 | +
|
| 31 | +[*] Scanned 26 of 256 hosts (10% complete) |
| 32 | +[*] Scanned 53 of 256 hosts (20% complete) |
| 33 | +[*] Scanned 79 of 256 hosts (30% complete) |
| 34 | +[*] Scanned 105 of 256 hosts (41% complete) |
| 35 | +[*] Scanned 129 of 256 hosts (50% complete) |
| 36 | +[*] Scanned 154 of 256 hosts (60% complete) |
| 37 | +Wireless Access Points from 10.10.10.12 |
| 38 | +========================================= |
| 39 | +
|
| 40 | +BSSID PWR ENC CIPHER AUTH ESSID |
| 41 | +----- --- --- ------ ---- ----- |
| 42 | +bb:aa:22:33:44:66 -94 WPA TKIP PSK wifi |
| 43 | +bb:aa:cc:dd:44:66 -54 WPA2 CCMP PSK wifi2 (*) |
| 44 | +
|
| 45 | +[*] Scanned 180 of 256 hosts (70% complete) |
| 46 | +Wireless Access Points from 10.10.10.16 |
| 47 | +========================================= |
| 48 | +
|
| 49 | +BSSID PWR ENC CIPHER AUTH ESSID |
| 50 | +----- --- --- ------ ---- ----- |
| 51 | +bb:aa:cc:dd:44:66 -54 WPA2 CCMP PSK wifi2 (*) |
| 52 | +
|
| 53 | +[*] Scanned 222 of 256 hosts (86% complete) |
| 54 | +Wireless Access Points from 10.10.10.23 |
| 55 | +========================================= |
| 56 | +
|
| 57 | +BSSID PWR ENC CIPHER AUTH ESSID |
| 58 | +----- --- --- ------ ---- ----- |
| 59 | +bb:aa:cc:dd:44:66 -63 WPA2 CCMP PSK wifi2 (*) |
| 60 | +00:11:22:33:44:55 -85 WPA2 CCMP PSK Rapid7 (*) |
| 61 | +
|
| 62 | +[*] Scanned 241 of 256 hosts (94% complete) |
| 63 | +[*] Scanned 256 of 256 hosts (100% complete) |
| 64 | +[*] Auxiliary module execution completed |
| 65 | +``` |
0 commit comments