Skip to content

Wifi

WiFi

Source

Tools:
The Rogue Access Point Framework
Raspberry Pi Zero W Simultaneous AP and Managed Mode Wifi
Turn linux into a public Wi-Fi network that silently mitms all http traffic
Brute Force attack against WPS to recover WPA/WPA2 passphrases
Wireless network auditor
Wireless Pentest Framework
WIFI KRACK attack against WPA2
Brute-force WiFi passwords with un-rooted Android Device
easy-to-use platform to deploy Access Points for the purpose of conducting penetration testing and red team engagements.
HostAPD patch for WPA Enterprise Creds
FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
WiFi security auditing tools suite
Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
eaphammer
Like nmap for mapping wifi networks you're not connected to, plus device tracking

Hardware

Hardware is important, specifically the chip used in the WiFi Adapter. Your inbuilt WiFi is unlikely to be sufficient. Consult lists to see what currently works, Alfa cards are a good bet.

  • Alfa Network AWUS036ACH
  • ALFA NETWORKS AWUS036NHA
  • TL-WN821N 300Mbps Wireless N USB Adapter

Wifi Phisher

Configuring 5Ghz and 802.11AC devices for injection

Monitor Mode on AWUS036ACH

Use the rtl8814au-dkms-git Repo

#Set interface down
sudo ip link set wlp0s20u2 down
#Set monitor mode
sudo iw dev wlp0s20u2 set type monitor
#Set interface up
sudo ip link set wlp0s20u2 up



#Set channel 6, width 40 MHz:
sudo iw wlp0s20u2 set channel 6 HT40-
#Set channel 149, width 80 MHz:
sudo iw wlp0s20u2 set freq 5745 80 5775

Monitor Mode

Start Monitor Mode and Save captures

iw dev wlan0 add interface mon0 type monitor
airmon-ng start wlan0 <Chanel>
airodump-ng -c <Chanel> --bssid <MAC AP> -w <NameCapture> <InterfaceMonitor>

Auto Crack WPA/WEP

besside-ng -W -v wlan0mon