Create_ap has been modified to run hostapd-mana with multiple options

This script requires hostapd-mana to be in the path.

This may be done by adding the binary to your path directly:

export PATH="$PATH:/path/to/hostapd-mana"

To make this permanent you may add to your shells .rc file

or you may link hostapd-mana into a directory that is within your path

cd /usr/bin
sudo ln -s /path/to/hostapd-mana hostapd-mana

Run Mana to trick users into connecting to your access point. The eap users file is not passed so that the default mana eap user file is used:

create_ap --eap --mana wlan0 eth0 MyAccessPoint 

Run Mana in loud mode to show devices every access point seen by Mana:

create_ap --eap --mana --mana-loud wlan0 eth0 MyAccessPoint 

Run Mana and bridge the network connection to your ethernet address:

create_ap --eap --mana -m bridge wlan0 eth0 MyAccessPoint 

Run Mana and be stingy by not providing any upstream Internet access:

create_ap --eap --mana -n wlan0 MyAccessPoint  

• Create an AP (Access Point) at any channel.
• Choose one of the following encryptions: WPA, WPA2, WPA/WPA2, Open (no encryption).
• Support for Enterprise setups
• Hide your SSID.
• Disable communication between clients (client isolation).
• IEEE 802.11n & 802.11ac support
• Internet sharing methods: NATed or Bridged or None (no Internet sharing).
• Choose the AP Gateway IP (only for 'NATed' and 'None' Internet sharing methods).
• You can create an AP with the same interface you are getting your Internet connection.
• You can pass your SSID and password through pipe or through arguments (see examples).

• bash (to run this script)
• util-linux (for getopt)
• procps or procps-ng
• hostapd
• iproute2
• iw
• iwconfig (you only need this if 'iw' can not recognize your adapter)
• haveged (optional)

• dnsmasq
• iptables

git clone https://github.com/sensepost/berate_ap

create_ap wlan0 eth0 MyAccessPoint

create_ap wlan0 eth0 MyAccessPoint MyPassPhrase

create_ap -n wlan0 MyAccessPoint MyPassPhrase

create_ap -m bridge wlan0 eth0 MyAccessPoint MyPassPhrase

create_ap -m bridge wlan0 br0 MyAccessPoint MyPassPhrase

create_ap wlan0 wlan0 MyAccessPoint MyPassPhrase

create_ap --driver rtl871xdrv wlan0 eth0 MyAccessPoint MyPassPhrase

echo -e "MyAccessPoint" | create_ap wlan0 eth0

echo -e "MyAccessPoint\nMyPassPhrase" | create_ap wlan0 eth0

create_ap --ieee80211n --ht_capab '[HT40+]' wlan0 eth0 MyAccessPoint MyPassPhrase

create_ap --isolate-clients wlan0 eth0 MyAccessPoint MyPassPhrase

create_ap --eap --eap-user-file /tmp/users.eap_hosts --eap-cert-path /tmp/certificates wlan0 eth0 MyAccessPoint 

create_ap --eap --radius-server 192.168.1.1:1812 --radius-secret=P@ssw0rd wlan0 eth0 MyAccessPoint

Using the persistent systemd service

systemctl start create_ap

systemctl enable create_ap

FreeBSD