Is You Geeked Up? | Technology Blog for the Computer Geek | isyougeekedup.com

Here’s a really cheap way to make a battery pack for the Fonera. It runs off of 4x AA Batteries, which would give the Fonera 5-6 volts (depending on type of battery). The AC adapter that comes with it says it provides 7.5v on the plug, but I measured 8.5v with a DMM. I knew 4x AA batteries would work because I have another Fonera running off of 5v power from the USB bus.

1. First, you need to get a battery holder. I found this one from Radio Shack to be perfect. It’s great because it has an on/off switch built right on and it’s only $1.99.

2. Cut the connector off of the Fonera AC adapter. Leave about 2-3 inches of wire on the end.

3. This is important. You need to figure out which wire is positive and which is negative. On the AC adapter that came with my Fonera 2200, the dotted lines indicated the negative wire and the writing indicated positive.

4. Solder the wires together (red to positive, black to negative). Use flux if you’re having trouble making the solder stick.

5. Then you’re going to have to cover the solder points. I used electrical tape to cover each point individually, then I wrapped the entire area with the tape.

6. Throw some batteries in and you’re done. Use velcro or double sided tape/adhesive to attach the battery pack to the Fonera. I would estimate about 8 hours with the wireless on, but it may vary depending on the batteries used.

The DD-WRT firmware for the Fonera does not support packet injection as it does not have the proper patched Mad-wifi driver. I’ve tried to make injection work with the DD-WRT firmware, but to no avail. As soon as injection begins, the router immediately freezes up. I am not going to go into the process of flashing open source firmware. You can find that guides for that at FoneraHacks.com

A quick rundown of what was done:

* Mount network share for capture files (Fonera does not have enough memory to store capture files)
* Create wireless interface “ath1? in monitor mode
* Start airodump to get quick snapshot
* Restart airodump with “–bssid” option to cut down on file size and “-w” to specify write location
* Start aireplay in fake authentication mode
* Once attack has completed, start aireplay in replay mode
* Collect 35,000 - 60,000 packets (for 128-bit WEP)
* Use aircrack-ptw to decrypt the key

More: