OpenWIPS-ng: open source and modular Wireless IPS

by do son · January 11, 2018

OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System). It is composed of three parts:

Sensor(s): “Dumb” devices that capture wireless traffic and sends it to the server for analysis. Also responds to attacks.
Server: Aggregates the data from all sensors, analyzes it and responds to attacks. It also logs and alerts in case of an attack.
Interface: GUI manages the server and displays information about the threats on your wireless network(s).

Installation

Requirements
————

Hardware
– A wireless capable of monitor mode

Operating system
– Linux

Development software (build-essential package on Debian/Ubuntu based distro):
– gcc
– make

Libraries
– Openssl development package
– libpcap
– libz
– m
– sqlite3 (development package)

Libpcap installation on cygwin
——————————

1. Install Winpcap 4.1.1 or higher (http://winpcap.org)
2. Close any Cygwin shell opened
3. Open a new Cygwin shell and do the following to install it on Cygwin

wget https://www.winpcap.org/install/bin/WpdPack_4_1_2.zip
unzip WpdPack_4_1_2.zip
cd WpdPack
cp Lib/*.a /lib
cp -R Include /usr/include/pcap

# The following should return the path to these files
# and usually it is /cygdrive/c/WINDOWS/system32/
which Packet.dll
which wpacp.dll

Compilation
———–