access-point

Fake Access Point Rogue open Wi-Fi AP for traffic capture in controlled environments. Uses hostapd native nl80211 AP mode + dnsmasq DHCP/DNS + iptables NAT toward an uplink interface. Requirements Linux, root. Wireless card with AP-mode support iw phy → Supported interface modes: ... AP. Packages...

PRISM-AP

PRISM-AP ACERCA DE: PRISM-AP es un framework automatizado de ataque MITM con RogueAP inalámbrico. CARACTERÍSTICAS: Fácil de configurar y usar, y totalmente automatizado Aprovecha el ataque wifi MANA para atraer conexiones de clientes Bypass parcial de HSTS mediante bettercap Intercepta y visualiz...

killosx

killosx Usa el exploit de Apple CoreText CVE-2012-3716 y lanza un AP para afectar a todos los dispositivos Apple vulnerables dentro del alcance wifi. Instalación: Ejecuta 'make install' en el directorio de killosx. Ahora killosx se puede ejecutar desde cualquier lugar con 'killosx'. Uso:...

WEF

WiFi 利用框架 由 D3Ext 用 💙 编写 介绍 • 攻击 • 功能 • 安装 • 使用 西班牙语版本的 README 介绍 本工具专为安全研究人员和渗透测试人员设计，用于分析和利用 Wi-Fi 网络中的漏洞。它提供了直观的界面以及一系列自动化和手动攻击技术，用于测试 WPA/WPA2、WPS 和 WEP 的安全性。支持 2.4 GHz 和 5 GHz 网络、详细日志记录和可自定义的攻击选项，为不同的测试场景提供了灵活性。这不是一个专业工具。 如果你发现错误，请提交 issue（你可以用英语或西班牙语编写，随你便）。 支持的攻击 DoS（可选握手包捕获）： 去认证/去关联攻击 WI...

esp32-wifi-penetration-tool

ESP32 Wi-Fi 渗透工具 本项目介绍了一款适用于 ESP32 平台的通用工具，用于实施多种 Wi-Fi 攻击。它提供了一些在 Wi-Fi 攻击中常用的通用功能，并使实现新攻击变得更加简单。它还包含了 Wi-Fi 攻击本身，例如从握手包中捕获 PMKID，或通过不同方法（如启动恶意克隆 AP 或直接发送解除认证帧）捕获握手包等。 显然，破解并不属于本项目的范围，因为 ESP32 不具备高效破解哈希的能力。其余工作都可以在这个小巧、廉价、低功耗的 SoC 上完成。 功能特性 PMKID 捕获 WPA/WPA2 握手包捕获 与解析 解除认证攻击 （多种方法） 拒绝服务攻击...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2020-27301-hostapd

CVE-2020-27301-hostapd PoC de AP Rogue para CVE-2020-27301 Compilación En Ubuntu 20.04 LTS root@kitploit: apt install libnl-genl-3-dev libssl-dev libsqlite3-dev libgnutls28-dev cd hostapd && make -j4 all Ejecución En el directorio hostapd, use root@kitploit: ./start.sh README de hostapd...

WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API

PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...

Framework for Rogue Wi-Fi Access Point Attack: WiFi-Pumpkin

The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...

HikVision Wi-Fi IP Camera Wireless Access Point State

Hikvision Wi-Fi IP Cameras associate to a default unencrypted rogue SSIDs in a wired configuration Full disclosure Nov 27, 2017 Synopsis: --- HikVision Wi-Fi IP cameras come with a default SSID "davinci", with a setting of no WiFi encryption or authentication. Depending on the firmware version,...

WiFi-Pumpkin v0.8.5 - Framework for Rogue Wi-Fi Access Point Attack

WiFi-Pumpkin is a very complete framework for auditing Wi-Fi security. The main feature is the ability to create a fake AP and make Man In The Middle attack, but the list of features is quite broad. Installation Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin...

[Wireless IDS] Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets

Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to client / access point which unreasonable...

Cisco Prime Infrastructure Rogue AP SSID Cross-Site Scripting Vulnerability

A vulnerability in the wireless configuration module of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to insert scripts into the listing of rogue access points. The vulnerability is due to a failure to properly sanitize SSIDs before inserting them into the XML windowi...