56 matches found
airgorah
Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...
KTO
KTO - Kick Them Out https://github.com/user-attachments/assets/0ebf61af-c306-4825-b836-95df59052c27 Apúntalo a un SSID y desconecta los dispositivos de esa red, incluidos los que se reconectan. Le das el nombre de la red; encuentra el punto de acceso, encuentra los clientes y elige un método de...
wifi-deauth
一种拒绝服务攻击，可断开目标WiFi网络中的所有设备。 不需要网络密码 已在Kali NetHunter上测试（底部有截图） 重要提示 在某些情况下，网络AP可能会在同一个BSSID/SSID名称下同时运行5GHz和2.4GHz频段。 为了真正使AP瘫痪，我通常同时运行两个去认证工具，使用两个网络接口：一个用于2.4GHz，一个用于5GHz。 频段| 信道范围 ---|--- 2.4 GHz| 1 14 5 GHz| 35 165 工作原理 程序遍历所有可能的信道，通过嗅探802.11包来确定哪些接入点可用。 攻击者选择要攻击的目标接入点后，程序会： 1...
bcm4360-wpa3
在 Broadcom BCM4360（封闭的 wl blob）上实现 WPA3-SAE + 802.11w Apple/Broadcom 从未为 BCM4360 14e4:43a0 提供 WPA3。其唯一的 Linux 驱动是封闭的 broadcom-sta wl blob；brcmfmac 无法驱动它。本项目为这一封闭 blob 添加了 WPA3-SAE + 完整 802.11w PMF —— 完全通过主机软件实现，无需固件源码 。 已在空中与仅支持 WPA3、要求 MFP 的 AP 验证：SAE 认证 → 关联 → 四次握手 → CCMP 数据，稳定运行，并能抵抗 去认证洪水 和...
autodeauth
autodeauth 一个自动解除本地网络认证的工具/服务 已在 Raspberry Pi OS 和 Kali Linux 上测试 安装 $ chmod +x setup.sh $ sudo ./setup.sh 可通过编辑 /etc/systemd/system/autodeauth.service 修改此项 ? 输入用于 autodeauth 服务的 WiFi 接口：wlan0 安装完成！你可以使用 sudo autodeauth -h 查看可用选项。 查看 README 获取关于配置/启动服务的更多信息 选项 $ sudo autodeauth -h /\ | | | \ | ||...
zizzania
zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...
zizzania
zizzania zizzania 嗅探无线流量，监听 WPA 握手包，并仅转储那些适合解密的数据帧（一个信标帧 + EAPOL 帧 + 数据帧）。为加速处理过程，zizzania 向需要握手的站点发送 IEEE 802.11 解除认证帧，同时妥善处理重传和重新关联，并尽量限制向每个站点发送的解除认证帧数量。 示例 将网络接口置于 RFMON 模式，信道 6，并保存从关联到特定接入点的站点收集的流量，排除 MAC 地址以 00:11:22 开头的站点： zizzania -i wlan0 -c 6 -b AA:BB:CC:DD:EE:FF -x...
WiFi-Pumpkin-deprecated
此仓库已⛔️废弃，wifipumpkin3 已发布，快去看看吧！ WiFi-Pumpkin - 用于流氓Wi-Fi接入点攻击的框架 描述 WiFi-Pumpkin 是一个流氓AP框架，可以轻松创建这些虚假网络，同时将合法流量转发给毫无戒心的目标。它功能丰富，包括流氓Wi-Fi接入点、对客户端AP的取消认证攻击、探测请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理器、ARP欺骗、DNS欺骗、Pumpkin-Proxy和即时图像捕获。此外，WiFi-Pumpkin 是一个非常完整的Wi-Fi安全审计框架，功能列表相当广泛。 安装 Python 2.7 git clone...
rickmote
rickmote El Controlador Rickmote: Secuestra televisores usando Google Chromecast Rickmote es un programa en Python para secuestrar Chromecasts y reproducir vídeo arbitrario en sus televisores conectados. Los detalles completos sobre cómo funciona el hack se presentaron en la charla "Rickrolleando...
PT-2026-98005
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the wifi cfg80211 component. The functions cfg80211 rx mlme mgmt and cfg80211 tx mlme mgmt fail to properly validate the length of frames relative t...
KTO v2.1.8
KTO 🦿 Kick Them Out Point it at an SSID and it automatically discovers every connected client and kicks them --- including ones that try to reconnect --- with no manual targeting needed. Tools like aireplay-ng make you supply a BSSID and a client MAC. You have to know who's on the network first,...
JesterSploit
JesterSploit – Advanced WiFi Penetration Testing Framework !...
CVE-2026-26048 Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function
The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encryption. An attacker can use this to cause unauthorized disruptions and create a...
CVE-2025-69822
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame...
CVE-2025-69822
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame...
CVE-2025-69822
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame...
CVE-2025-69822: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame...
CVE-2025-69822
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate privileges via a crafted deauth frame...
CVE-2025-69822
The Atomberg Erica Smart Fan (Firmware Version V1.0.36 ) is vulnerable to an issue where an attacker can obtain sensitive information and escalate privileges by sending a crafted deauth frame . The root cause is a lack of protection mechanisms against forged deauthentication frames and a lack of ...
PT-2026-3937
Name of the Vulnerable Software and Affected Versions Atomberg Atomberg Erica Smart Fan Firmware version V1.0.36 Description A flaw exists in Atomberg Atomberg Erica Smart Fan Firmware that could allow an attacker to gain sensitive information and increase their access level. This is achieved by...