wireless-ids

Wireless IDS Sistema de Detección de Intrusiones Wireless IDS es una herramienta de código abierto escrita en Python y funciona en entorno Linux. Esta herramienta analizará el tráfico aéreo circundante en busca de actividades sospechosas como paquetes de ataque WEP/WPA/WPS. Realiza lo siguiente:...

Auto_EAP

AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...

h4rpy

h4rpy h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2...

airgorah

Airgorah 一个主要基于 aircrack-ng 工具套件的 WiFi 安全审计软件 安装 | 使用 | 致谢 Airgorah 是一个 WiFi 安全审计软件，可以捕获附近的 WiFi 流量，发现连接到接入点的客户端，执行去认证攻击，捕获握手包，并破解接入点的密码。 它使用 Rust 编写，并采用 GTK4 作为图形界面部分。 ⭐ 如果你喜欢这个项目，别忘了点个星！ 法律声明 ⚠️ Airgorah 旨在用于测试和发现你自己拥有的网络中的漏洞。在几乎所有国家，对不属于你自己的 WiFi 网络进行攻击都是非法的。对于你使用本软件可能造成的任何损害，我不承担任何责任。 系统要求...

wifite2

Wifite 这个仓库是对 wifite 的完全重写，一个用于审计无线网络的 Python 脚本。 Wifite 为你运行现有的无线审计工具。不用再记忆命令参数和开关了！ Wifite 旨在使用所有已知的方法来获取无线接入点（路由器）的密码。这些方法包括： 1. WPS：离线 Pixie-Dust 攻击 2. WPS：在线暴力破解 PIN 攻击 3. WPA：WPA 握手捕获 + 离线破解。 4. WPA：PMKID 哈希捕获 + 离线破解。 5. WEP：多种已知的针对 WEP 的攻击，包括 fragmentation 、 chop-chop 、 aireplay 等。 运行...

w1f1t3kAl1

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

airbash

airba.sh Airbash is a POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell tested on Kali Linux and Cyanogenmod 10.2 and uses aircrack-ng to scan for clients that are currently connected to access...

zizzania

zizzania zizzania 嗅探无线流量，监听 WPA 握手包，并仅转储那些适合解密的数据帧（一个信标帧 + EAPOL 帧 + 数据帧）。为加速处理过程，zizzania 向需要握手的站点发送 IEEE 802.11 解除认证帧，同时妥善处理重传和重新关联，并尽量限制向每个站点发送的解除认证帧数量。 示例 将网络接口置于 RFMON 模式，信道 6，并保存从关联到特定接入点的站点收集的流量，排除 MAC 地址以 00:11:22 开头的站点： root@kitploit: zizzania -i wlan0 -c 6 -b AA:BB:CC:DD:EE:FF -x...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

wifi-cracking

Wi-Fi 破解 利用 Airodump-ng 以及 Aircrack-ng / Hashcat 破解 WPA/WPA2 WI-FI 路由器。 这是个简洁的教程，一步一步的描述了如何破解使用弱密码保护的 WI-FI 网络。它不会极尽其详，但是足够你用来测试自己的网络安全或者入侵附近网络。下面列出的攻击完全是被动式的（仅仅监听，不会广播你电脑上的任何东西），并且对于你破解的但是却未真正使用的密码是无法监测到的。不过一个可选的 deauthentication 攻击可以用于加速侦查过程，在文档末尾有描述。...

linset

Linset Is Not a Social Enginering Tool First of all, commented that this is a project for educational purposes that have served to me and hopefully others to be more in touch with the world of programming and Wireless. It is prohibited under any circumstances the use this tool in foregin Wireless...

marfil

Marfil Marfil 是 Aircrack-ng 套件的扩展，用于评估 WiFi 网络安全。它允许将执行长时间字典攻击的工作分配给多台计算机。 动机 Aircrack-ng 套件提供了 aircrack-ng 工具，这是一个 802.11 WEP 和 WPA/WPA2-PSK 密钥破解程序。在破解后者时，必须使用字典或单词列表。这些字典越长，过程所需的时间就越长。根据您的硬件，甚至可能需要数天或数周。 如果您恰好有一些额外的硬件可供使用，aircrack-ng 不允许您在它们之间分配负载：您必须选择最快的硬件并坚持使用它。这正是 Marfil 发挥作用的地方。 解决方案 Marfi...

fluxion

Fluxion es el futuro de los ataques MITM WPA Fluxion es una reescritura de linset por vk496 con con suerte menos errores y más funcionalidad. Es compatible con la última versión de Kali rolling. Las últimas compilaciones estable y beta se pueden encontrar aquí aquí...

external_wpa_supplicant_8_AOSP10_r33CVE-2021-0326

wpasupplicant and hostapd Copyright c 2002-2019, Jouni Malinen [email protected] and contributors All Rights Reserved. These programs are licensed under the BSD license the one with advertisement clause removed. If you are submitting changes to the project, please see CONTRIBUTIONS file for...

CVE-2025-63353

FiberHome Wi-Fi Password Predictor CVE-2025-63353 A Python utility designed for security auditing and proof-of-concept demonstration of the deterministic password generation flaw found in FiberHome HG6145F1 RP4423 routers. 📋 Overview This script exploits CVE-2025-63353, a critical vulnerability...

CVE-2025-26202-Details

CVE-2025-26202-Details CVE-2025-26202: Cross-Site Scripting XSS in DZS Router Web Interface Description A Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in the DZS Router Web Interface. An authenticated attacker...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: wifi: mwifiex: Do not return unused priv pointers in mwifiexgetprivbyid. mwifiexgetprivbyid returns the priv pointer corresponding to bssnum and bsstype, but without checking whether the priv is actually in use. Unused priv...

Astra Linux – Vulnerability in Linux

A issue was discovered in the kernel of OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can exploit this to inject arbitrary network packets, regardless of the network configuration...

Astra Linux – Vulnerability in wpa, pupnp-1.8

The Open Connectivity Foundation’s UPnP specification prior to April 17, 2020, does not prohibit the acceptance of a subscription request with a delivery URL located in a different network segment than the fully qualified event-subscription URL. This is known as the “CallStranger” issue...

Security update for NetworkManager

This update for NetworkManager fixes the following issues: CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation bypass...