Is currently possible to target single ip/mac's or predefined lists of the adresses ?

[nanoR4K]

ESP-ROM:esp32c3-api1-20210207
Build:Feb  7 2021
rst:0x3 (RTC_SW_SYS_RST),boot:0xd (SPI_FAST_FLASH_BOOT)
Saved PC:xxxx
xxxx: esp_restart_noos_dig at C:/Espressif/frameworks/esp-idf-v4.4.2/components/esp_system/esp_system.c:44 (discriminator 1)

SPIWP:0xee
mode:DIO, clock div:1
load:0x3fcd6100,len:0x16b4
load:0x403ce000,len:0x930
load:0x403d0000,len:0x2d28
SHA-256 comparison failed:
Calculated: 914f430064c18aa6f1e8411cff3699a3383cfedec7d26382845d17af1fa02f6b
Expected: db91a362aa70763ad27897ba7136473ecf928ff7066f2b1c5b5c9543d9a60b93
Attempting to boot anyway...
entry 0x403ce000
I (53) boot: ESP-IDF v4.4.2 2nd stage bootloader
I (53) boot: compile time 18:02:26
I (54) boot: chip revision: 3
I (55) boot.esp32c3: SPI Speed      : 80MHz
I (60) boot.esp32c3: SPI Mode       : DIO
I (65) boot.esp32c3: SPI Flash Size : 4MB
I (69) boot: Enabling RNG early entropy source...
I (75) boot: Partition Table:
I (78) boot: ## Label            Usage          Type ST Offset   Length
I (86) boot:  0 nvs              WiFi data        01 02 00009000 00006000
I (93) boot:  1 phy_init         RF data          01 01 0000f000 00001000
I (101) boot:  2 factory          factory app      00 00 00010000 00100000
I (108) boot: End of partition table
I (112) esp_image: segment 0: paddr=00010020 vaddr=3c090020 size=16a20h ( 92704) map      
I (135) esp_image: segment 1: paddr=00026a48 vaddr=3fc8ea00 size=03a40h ( 14912) load     
I (138) esp_image: segment 2: paddr=0002a490 vaddr=40380000 size=05b88h ( 23432) load     
I (146) esp_image: segment 3: paddr=00030020 vaddr=42000020 size=8139ch (529308) map      
I (232) esp_image: segment 4: paddr=000b13c4 vaddr=40385b88 size=08c94h ( 35988) load     
I (239) esp_image: segment 5: paddr=000ba060 vaddr=50000010 size=00010h (    16) load     
I (244) boot: Loaded app from partition at offset 0x10000
I (244) boot: Disabling RNG early entropy source...
I (261) cpu_start: Pro cpu up.
I (270) cpu_start: Pro cpu start user code
I (270) cpu_start: cpu freq: 160000000
I (271) cpu_start: Application information:
I (273) cpu_start: Project name:     esp32-wifi-penetration-tool
I (280) cpu_start: App version:      1
I (284) cpu_start: Compile time:     Nov  5 2022 18:02:05
I (290) cpu_start: ELF file SHA256:  6f3cead1765b8307...
I (296) cpu_start: ESP-IDF:          v4.4.2
I (301) heap_init: Initializing. RAM available for dynamic allocation:
I (308) heap_init: At 3FC96A50 len 000295B0 (165 KiB): DRAM
I (315) heap_init: At 3FCC0000 len 0001F060 (124 KiB): STACK/DRAM
I (321) heap_init: At 50000020 len 00001FE0 (7 KiB): RTCRAM
I (328) spi_flash: detected chip: boya
I (332) spi_flash: flash io: dio
I (337) sleep: Configure to isolate all GPIO pins in sleep state
I (343) sleep: Enable automatic switching of GPIO sleep configuration
I (350) cpu_start: Starting scheduler.
I (355) pp: pp rom version: 9387209
I (355) net80211: net80211 rom version: 9387209
I (365) wifi:wifi driver task: 3fc9f2d4, prio:23, stack:6656, core=0
I (365) system_api: Base MAC address is not set
I (375) system_api: read default base MAC address from EFUSE
I (375) wifi:wifi firmware version: eeaa27d
I (385) wifi:wifi certification version: v7.0
I (385) wifi:config NVS flash: disabled
I (385) wifi:config nano formating: disabled
I (395) wifi:Init data frame dynamic rx buffer num: 32
I (395) wifi:Init management frame dynamic rx buffer num: 32
I (405) wifi:Init management short buffer num: 32
I (405) wifi:Init dynamic tx buffer num: 32
I (415) wifi:Init static tx FG buffer num: 2
I (415) wifi:Init static rx buffer size: 1600
I (415) wifi:Init static rx buffer num: 10
I (425) wifi:Init dynamic rx buffer num: 32
I (425) wifi_init: rx ba win: 6
I (435) wifi_init: tcpip mbox: 32
I (435) wifi_init: udp mbox: 6
I (435) wifi_init: tcp mbox: 6
I (445) wifi_init: tcp tx win: 5744
I (445) wifi_init: tcp rx win: 5744
I (455) wifi_init: tcp mss: 1440
I (455) wifi_init: WiFi IRAM OP enabled
I (455) wifi_init: WiFi RX IRAM OP enabled
I (465) phy_init: phy_version 912,d001756,Jun  2 2022,16:28:07
E (475) phy_init: esp_phy_load_cal_data_from_nvs: NVS has not been initialized. Call nvs_flash_init before starting WiFi/BT.
W (485) phy_init: failed to load RF calibration data (0x1101), falling back to full calibration
I (515) wifi:mode : sta (xxxx) + softAP (xxxx)
I (515) wifi:enable tsf
I (515) wifi:Total power save buffer number: 16
I (525) wifi:Init max length of beacon: 752/752
I (525) phy: chan:1,max_power:80
I (525) phy: chan:2,max_power:80
I (535) phy: chan:3,max_power:80
I (535) phy: chan:4,max_power:80
I (535) phy: chan:5,max_power:80
I (545) phy: chan:6,max_power:80
I (545) phy: chan:7,max_power:80
I (555) phy: chan:8,max_power:80
I (555) phy: chan:9,max_power:80
I (555) phy: chan:10,max_power:80
I (565) phy: chan:11,max_power:80
I (565) phy: chan:12,max_power:80
I (575) phy: chan:13,max_power:80
I (575) phy: chan:14,max_power:80
I (575) wifi:Init max length of beacon: 752/752
I (1235) wifi:Total power save buffer number: 16
I (1235) wifi_controller: AP started with SSID=ManagementAP
I (20335) wifi:new:<1,0>, old:<1,1>, ap:<1,1>, sta:<0,0>, prof:1
I (20335) wifi:station: xxxx join, AID=1, bgn, 20
W (20365) wifi:<ba-add>idx:2 (ifx:1, xxxx), tid:0, ssn:0, winSize:64
I (20445) esp_netif_lwip: DHCP server assigned IP to a station, IP is: xxxx
I (23725) wifi_controller/ap_scanner: Found 3 APs.
I (35095) wifi_controller/ap_scanner: Found 3 APs.
I (37145) attack: Starting attack...
I (37145) main:attack_dos: Starting DoS attack...
I (37145) wifi:station: xxxx leave, AID = 1, bss_flags is xxxx, bss:xxxx
I (37155) wifi:new:<1,0>, old:<1,0>, ap:<1,1>, sta:<0,0>, prof:1
W (37155) wifi:<ba-del>idx
I (37165) wifi:Total power save buffer number: 16
I (37815) wifi:Total power save buffer number: 16
I (37815) wifi_controller: AP started with SSID=XXXX
W (37815) httpd_txrx: httpd_sock_err: error in recv : 113
W (37825) httpd: httpd_accept_conn: error in accept (128)
W (37825) httpd: httpd_server: error accepting new connection
I (40385) wifi:new:<11,0>, old:<11,2>, ap:<11,2>, sta:<0,0>, prof:11
I (40395) wifi:station: xxxx join, AID=1, bgn, 20
I (40415) wifi:max connection, deauth!
I (40455) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (40455) wifi:max connection!
I (40515) wifi:max connection, deauth!
I (40595) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (40595) wifi:max connection!
I (40615) wifi:max connection, deauth!
I (40665) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (40665) wifi:max connection!
I (40685) wifi:max connection, deauth!
I (40755) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (40755) wifi:max connection!
W (42695) wifi:ba not setup
I (43055) wifi:max connection, deauth!
I (43105) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (43105) wifi:max connection!
I (43115) wifi:max connection, deauth!
I (43125) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (43125) wifi:max connection!
I (43155) wifi:max connection, deauth!
I (43165) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (43165) wifi:max connection!
I (43225) wifi:max connection, deauth!
I (43235) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (43235) wifi:max connection!
I (44275) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (44275) wifi:max connection!
I (44395) wifi:station: xxxx leave, AID = 1, bss_flags is xxxx, bss:xxxx
I (44395) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (49075) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (49075) wifi:station: xxxx join, AID=1, bgn, 20
W (49175) wifi:ba not setup
W (49815) wifi:ba not setup
I (53085) wifi:station: xxxx leave, AID = 1, bss_flags is xxxx, bss:xxxx
I (53085) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (54245) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (54245) wifi:station: xxxx join, AID=1, bgn, 20
W (54485) wifi:ba not setup
W (54935) wifi:ba not setup
W (55085) wifi:<ba-add>idx:2 (ifx:1, xxxx), tid:0, ssn:16, winSize:64
W (57675) wifi:<ba-del>idx
I (57675) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (57675) wifi:station: xxxx join, AID=1, bgn, 20
I (61685) wifi:station: xxxx leave, AID = 1, bss_flags is xxxx, bss:xxxx
I (61685) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (61725) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (61725) wifi:station: xxxx join, AID=1, bgn, 20
I (65725) wifi:station: xxxx leave, AID = 1, bss_flags is xxxx, bss:xxxx
I (65725) wifi:new:<11,0>, old:<11,0>, ap:<11,2>, sta:<0,0>, prof:11
I (67145) attack: Abort DOS attack...```

[risinek]

Check out the opened PR, maybe it does what you want. I didn't have time to test it out and merge unfortunately.

[nanoR4K]

Will do, besides that do you see anything unusual on the log ?

[risinek]

Yes, there is the I (43055) wifi:max connection, deauth! which means, that you are trying to connect to the AP with more devices than allowed. If your problem is, that you cannot connect to management AP, then try to set more allowed devices for management AP in config file. By default it's 1. This may be a bug/race condition in WiFi module itself. But I'm not sure, just guessing.

[eaudaim]

Maybe I did not understand your request, but it seems to me that (in my tests with a WROOM 32 esp) the deauth also disconnects your peripheral (pc/smartphone...) from the ESP and you have to reconnect it manually (depending on the wifi settings of your device)

Regards

[nanoR4K]

That's what is currently happening, I did manage to find how the code stores the target Mac/IP to sent the deauth request, but I failed to try hard coding a limited list of ips that I specifically want to target

[risinek]

Well the device that is connected to ESP32 management AP will be disconnected from ESP32 by design, because ESP32 has only one Wi-Fi interface, hence it has to stop management AP to be able to start the rogue hotspot.