CVE-2020-27301-hostapd

CVE-2020-27301-hostapd PoC di un Rogue AP per CVE-2020-27301 Compilazione Su Ubuntu 20.04 LTS root@kitploit: apt install libnl-genl-3-dev libssl-dev libsqlite3-dev libgnutls28-dev cd hostapd && make -j4 all Esecuzione Nella directory hostapd, usa root@kitploit: ./start.sh hostapd README...

access-point

Fake Access Point Offener Rogue-WLAN-AP zur Erfassung von Datenverkehr in kontrollierten Umgebungen. Verwendet hostapd nativer nl80211-AP-Modus + dnsmasq DHCP/DNS + iptables für NAT in Richtung einer Uplink-Schnittstelle. Anforderungen Linux, root. WLAN-Karte mit AP-Modus-Unterstützung iw phy →...

WEF

WiFi Exploitation Framework Creato con 💙 da D3Ext Introduzione • Attacchi • Funzionalità • Installazione • Utilizzo README in spagnolo Introduzione Questo strumento è progettato per ricercatori di sicurezza e penetration tester per analizzare e sfruttare le vulnerabilità nelle reti Wi-Fi. Fornisc...

PRISM-AP

PRISM-AP DESCRIZIONE: PRISM-AP è un framework automatizzato per attacchi MITM Wireless RogueAP. FUNZIONALITÀ: Facile da configurare e usare, completamente automatizzato Sfrutta l'attacco WiFi MANA per attirare le connessioni dei client Bypass parziale di HSTS tramite bettercap Intercetta e...

esp32-wifi-penetration-tool

Strumento di Penetrazione Wi-Fi per ESP32 Questo progetto introduce uno strumento universale per la piattaforma ESP32 per implementare vari attacchi Wi-Fi. Fornisce alcune funzionalità comuni tipicamente utilizzate negli attacchi Wi-Fi e semplifica l'implementazione di nuovi attacchi. Include anc...

killosx

killosx Utilizza l'exploit CoreText di Apple CVE-2012-3716 e lancia un AP per colpire tutti i dispositivi Apple vulnerabili nel raggio wifi. Installazione: Esegui 'make install' nella directory killosx. killosx può ora essere eseguito da qualsiasi posizione con 'killosx'. Utilizzo: root@kitploit:...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API

PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...

Framework for Rogue Wi-Fi Access Point Attack: WiFi-Pumpkin

The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...

HikVision Wi-Fi IP Camera Wireless Access Point State

Hikvision Wi-Fi IP Cameras associate to a default unencrypted rogue SSIDs in a wired configuration Full disclosure Nov 27, 2017 Synopsis: --- HikVision Wi-Fi IP cameras come with a default SSID "davinci", with a setting of no WiFi encryption or authentication. Depending on the firmware version,...

WiFi-Pumpkin v0.8.5 - Framework for Rogue Wi-Fi Access Point Attack

WiFi-Pumpkin is a very complete framework for auditing Wi-Fi security. The main feature is the ability to create a fake AP and make Man In The Middle attack, but the list of features is quite broad. Installation Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin...

[Wireless IDS] Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets

Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to client / access point which unreasonable...

Cisco Prime Infrastructure Rogue AP SSID Cross-Site Scripting Vulnerability

A vulnerability in the wireless configuration module of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to insert scripts into the listing of rogue access points. The vulnerability is due to a failure to properly sanitize SSIDs before inserting them into the XML windowi...