wifi-arsenal

WiFi Arsenal

Repo fully maintained by 0x90/wifi-arsenal

README.md created by techge/wifi-arsenal

Table of Contents

• General WiFi Information
• Noteworthy Tools of Different Categories
• Attack/PenTesting
  • Denial of Service
  • Encryption Attack
    • WEP/WPA/WPA2
    • WPS
    • Others
  • Injection
  • Rogue AP/Fake AP/ MITM
  • Sniffing
  • Wardriving
  • Miscellaneous Attacking Tools
• Information Gathering
• Defence/Detection
• Libraries/General Purpose Tools
• Visualization
• Localisation
• Configuration/setup
• Monitoring
• Miscellaneous/not sorted :)

TOC created by gh-md-toc

General WiFi Information

• 802.11 frames - A starter guide to learn wireless sniffer traces
• 80211 Pocket Reference Guide - Cheat Sheet for 802.11
• 802.11p-wireless-regdb - Wireless regulatory database for CRDA
• 802.11 Wireless Networks: The Definitive Guide - Partly open chapters of O‘Reilly 802.11 book
• Armory - The 802.11 Hacking Repo (Meta Information, Link collection)
• Awesome-wifi-security - A collection of awesome resources related to 802.11 security, tools and other things
• Call-for-wpa3 - Call for WPA3 - what's wrong with WPA2 security and how to fix it
• Known manufacturer MAC list -
• Wikipedia - IEEE802.11 site of Wikipedia

Noteworthy Tools of Different Categories

• Aircrack-ng - WiFi security auditing tools suite
• airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks
• karma - KARMA Attacks Radioed Machines Automatically (KARMA)
• kismet - Wireless network detector, sniffer, and intrusion detection system
• mdk3_6.1 - A fork and modification of the original MDK3
• pyrit - The famous WPA precomputed cracker, Migrated from Google
• Scapy - Python-based interactive packet manipulation program & library
• waidps - Wireless Auditing, Intrusion Detection & Prevention System
• WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack
• Wireless-ids - Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets
• zarp - Network attack tool centered around the exploitation of local networks

Attack/PenTesting

Denial of Service

• 80211mgmtDoS - 802.11 DoS Attacks based on unprotected Management frames
• airodump_mod - Improved version of airodump-ng with ability to kick-off a stations from AP
• android_packetspammer - Packetspammer sends unencrypted broadcast packets down a mac80211 wireless interface that should be set for Monitor mode
• apflood - Flood area with fake essids
• dw - Small tool for sending 802.11 disassociation and deauthentication packets to specific clients.
• hwk - Hwk is a collection of packet crafting/network flooding tools
• JamWiFi - A GUI, easy to use WiFi network jammer for Mac OS X
• Mass-deauth-attack - A program that does Deauthentication Attack on every nearby wireless device
• Mass-deauth - A script for 802.11 mass-deauthentication
• mdk3_6.1 - A fork and modification of the original MDK3
• modwifi - Advanced Wi-Fi Attacks Using Commodity Hardware
• netattack - Python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks
• Scapy-deauth - Scapy based wifi Deauth
• ska - Framework for sniffing ieee80211 packets and generating deauth packets and sending raw packets.
• wificurse - WiFi DoS attack tool created for educational purposes only. It works only in Linux and requires wireless card drivers capable of injecting packets in wireless networks
• WifiDeauth - A lightweight Wi-Fi auto deauthentication attack tool (libtins/C++)
• wifijammer - Continuously jam all wifi clients/routers
• WiFi-Rifle - Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi
• wirelessjammer - Continuously jam all wifi clients and access points within range
• zizzania - Automated DeAuth attack

Encryption Attack

WEP/WPA/WPA2

• Eicrog - WEP key generator for predictable key weaknesses
• huawei_wifi - Wifi utilities for finding Huawei routers' default key
• Aircrack-ng - WiFi security auditing tools suite
• airmode - AirMode is a GUI that can help you to use the Aircrack framework
• airoscriptng - Airoscript-ng python complete implementation
• Airvengers - A GUI to pentest wifi Network, based on Aircrack-ng tools
• asleap - Recovers weak LEAP password. Pronounced asleep.
• autokwaker - Creating an auto cracker for 802.11 networks
• cenarius - Cenarius tool for crack Wi-Fi , crack wpa-psk , crack wpa2-psk , crack wep , crack wps pin and crack hidden AP . cenarius psk crack
• cherry - Distributed WPA/WPA2 cracker
• Cowpatty - Offline dictionary attack against WPA/WPA2 networks using PSK-based authentication (e.g. WPA-Personal)
• dot11decrypt - An 802.11 WEP/WPA2 on-the-fly decrypter.
• Fern-wifi-cracker - Crack and recover WEP/WPA/WPS keys and also run other network based attacks on wireless or ethernet based networks
• HandShaker - Detect, capture, crack WPA/2 handshakes, WEP Keys and geotag with Android GPS
• hcxtools - Solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper
• kismet-deauth-wpa2-handshake-plugin - Python plugin for Kismet to perform deauthentication to collect WPA2 handshakes
• marfil - Assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers
• peapwn - Proof-of-concept implementation of the Apple relay attack in Python
• pyrcrack - Python Aircrack-ng
• pyrit - The famous WPA precomputed cracker, Migrated from Google
• pythonAir - Flask/aircrack
• uploadwpa - This module will upload a wpa handshake from a single capture file to an online hash cracker site
• WiFi-autopwner - Script to automate searching and auditing Wi-Fi networks with weak security
• Wifi-bruteforcer-fsecurify - Android application to brute force WiFi passwords without requiring a rooted device
• wificracking - Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
• Wifi-hacker - Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
• wifite2 - Python script for auditing wireless networks
• wifite - An automated wireless attack tool
• Wifite-mod-pixiewps - Wifite with PixieWPS support
• Wifite-openwrt - Wifite for the WiFi Pineapple NANO + TETRA (Chaos Calmer - openWrt)
• wlandecrypter - Dictionary attack (spanish)
• WPA2-HalfHandshake-Crack - Capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP
• wpa2hc - Quick script to automate converting WPA .cap files for Hashcat .hccap files.
• Wpa-autopwn - WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
• Wpa-bruteforcer - Attacking WPA/WPA encrypted access point without client.
• wpacrack - Open-source distributed Wifi-Protected Access (WPA) cracker
• WPA_DECRYPTION_MPI - WPA/WPA2 for cluster processing
• WPAdiz - Bruteforce - New method for generate dictionaries (Wireless)

WPS

• autoreaver - Automatically exported from code.google.com/p/auto-reaver
• bully - New implementation of the WPS brute force attack, written in C
• greaver - GUI for Reaver, WPS brute force tool
• HT-WPS-Breaker - HT-WPS Breaker (High Touch WPS Breaker)
• Penetrators-wps - Experimental tool that is capable of atta