OpenWIPS-ng: open source and modular Wireless IPS

OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System). It is composed of three parts:

  • Sensor(s): “Dumb” devices that capture wireless traffic and sends it to the server for analysis. Also responds to attacks.
  • Server: Aggregates the data from all sensors, analyzes it and responds to attacks. It also logs and alerts in case of an attack.
  • Interface: GUI manages the server and displays information about the threats on your wireless network(s).

Installation

Requirements
————

Hardware
– A wireless capable of monitor mode

Operating system
– Linux

Development software (build-essential package on Debian/Ubuntu based distro):
– gcc
– make

Libraries
– Openssl development package
– libpcap
– libz
– m
– sqlite3 (development package)

Libpcap installation on cygwin
——————————

1. Install Winpcap 4.1.1 or higher (http://winpcap.org)
2. Close any Cygwin shell opened
3. Open a new Cygwin shell and do the following to install it on Cygwin

wget https://www.winpcap.org/install/bin/WpdPack_4_1_2.zip
unzip WpdPack_4_1_2.zip
cd WpdPack
cp Lib/*.a /lib
cp -R Include /usr/include/pcap

# The following should return the path to these files
# and usually it is /cygdrive/c/WINDOWS/system32/
which Packet.dll
which wpacp.dll

Compilation
———–

git clone https://github.com/aircrack-ng/OpenWIPS-ng.git
cd OpenWIPS-ng
make

sudo make install

Configuration
————-

Edit the configuration file /usr/local/etc/openwips-ng/openwips-ng-server.conf

Usage
—–
openwips-ng MONITOR_MODE_INTERFACE SERVER_IP SERVER_PORT LOGIN PASS
openwips-ng-server PATH_TO_CONFIGURATION_FILE

Source: https://github.com/aircrack-ng/