alexandre/wifite2
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
284 Commits 3 Branches 10 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
derv82 e190794149 Use enums to describe target WPS state. 
To avoid confusion about wps = True/False/None.
Came about because of #130
 2018-09-09 10:39:57 -07:00
derv82 710dd98b66 Detect when --dict is a directory, show warning and ignore wordlist. 
In case people pass in a directory, until we figure out #135
 2018-09-03 17:02:27 -07:00
derv82 79b2753929 Small fixes for #133 
* Avoid cracking the same PMKID twice when selecting multiple files &
specifying a tool that is not hashcat.

* Mention PMKID hashes can only be cracked using hashcat:
  1. If all files are PMKID, or
  2. If the file is PMKID but a tool other than hashcat was chosen.

* Fix header colors if a warning is printed before the handshake files.
 2018-09-03 11:02:34 -07:00
derv82 5e204686fa 2.2.5: PMKID timeout changed to 30sec. --pmkid-timeout option to change. 
For #134
 2018-09-03 10:42:55 -07:00
derv82 838ea43a73 2.2.4: Version bump for recent fixes (more ctrl+c options). 
Includes:
* More options when interrupting mid-attack (continue/skip/exit)
* Show error when --wps-only and --pmkid are both specified
* Use `--force` when calling Bully to force-continue.
* README (updated, new screenshots).
 2018-09-02 12:33:03 -07:00
derv82 13e51576d5 Updating screenshots 2018-09-02 12:31:12 -07:00
derv82 0f8b6d6a66 Use --force with bully 2018-09-02 12:04:04 -07:00
derv82 467f40d68a Fixing logic with switches, updating README. 
Some switches are not compatible (--wps-only + --pmkid).
Wifite detects & stops if options are incompatible.

README was oudated (said no PIN attack), updated some URLs.
 2018-09-02 10:59:11 -07:00
derv82 7309dfcce6 Interrupting mid-attack, users can Continue/Skip/Exit. 2018-09-02 09:58:26 -07:00
derv82 d7c51461f6 Detect when reaver does not support --pixie-dust, use bully if possible. 2018-09-01 14:47:16 -07:00
derv82 5d77cb63a3 Avoid WPS if no reaver+bully. Use bully if reaver isn't available. 2018-08-26 22:29:23 -07:00
derv82 e30a8cad07 Fix Airmon output-parsing. 
On latest ubuntu, apt-get install aircrack, output is slightly different.
 2018-08-26 22:01:54 -07:00
derv82 17bd96f297 Python improvements, messaging improvements. 
Small code changed as proposed in #128.
This should close #128.

Slowly moving towards Camel-case in script output.
 2018-08-24 19:37:55 -07:00
derv82 7f0197e80e Rewording some printed text. 2018-08-24 19:17:06 -07:00
derv82 2e671e0273 Detect when AP has WPS Locked, show in target list 2018-08-24 16:50:24 -07:00
derv82 141934a7b1 Bully: Stop if AP becomes locked 2018-08-23 19:05:20 -07:00
derv82 750fe086fa Reaver: Stop if AP becomes locked. Config/Args cleanup 2018-08-23 18:57:56 -07:00
derv82 9beae4beb2 2.2.3: Version bump for WPS PIN changes 
Brought back the WPS PIN attack as asked in #90.

Also in this commit: Fixed PIN counter in reaver's PIN attack.
 2018-08-23 15:37:43 -07:00
derv82 a637855ab4 Fix & optimize reaver output parsing. 2018-08-23 15:11:52 -07:00
derv82 75d4d8e99d Bully works. Pixie and PIN attacks are separate attacks. 2018-08-23 14:46:21 -07:00
derv82 3f947b98c0 Reaver PIN attack counts time forwards, does not time out. 2018-08-23 08:32:30 -07:00
derv82 aac6740fc1 Small fixes for Python 3 2018-08-23 08:31:57 -07:00
derv82 d6c1c8d82e Refactor/reformat config + args. 2018-08-23 08:30:41 -07:00
derv82 96db340b57 (Reaver) Run WPS Pin Attack if Pixie-Dust fails. 2018-08-22 16:42:16 -07:00
derv82 04e67dba21 2.2.2: Version bump for --crack improvements. Fix wordlists. 
Finally clears up #102.
 2018-08-21 14:02:54 -07:00
derv82 f641ea53c4 Fix but when cracking with John, small fixes. 
* --crack commands printed consistently (same color/format).
* Only warn about PMKID -> hashcat once if any selected handshakes are PMKIDs
 2018-08-21 13:55:22 -07:00
derv82 d01470a8e4 Bringing back Wifite.py 
Because why not.
 2018-08-21 00:16:15 -07:00
derv82 dd0e44cf53 --crack: Dependency management, avoid dupes in cracked.txt 
* Dupes are skipped if everything *except* date matches (same bssid/ssid/type/key)
* John: Detect and use OpenCL or CUDA using `john --list=formats`
* Removed `wifite.py` as it's no longer used & is confusing.
 2018-08-21 00:04:21 -07:00
derv82 4173ef46e5 --crack supports hashcat, aircrack, john, cowpatty, and pyrit. 
* Still not "print" option for --crack.
* Checks hashcat for devices, uses --force if no devices are found.
* Interrupting --crack stops entire process, not just a single crack attempt
* Changed wordlist location, hopefully completes #102.
 2018-08-20 19:33:42 -07:00
derv82 a063f08388 Updating README 
Moved things around, added more info, added links to required tools.
 2018-08-20 11:44:10 -07:00
derv82 b889cb93af 2.2.1: Version bump for setup.py changes. Save wordlists to share/dict 
Should resolve #102
 2018-08-20 10:53:48 -07:00
derv82 95798c36f6 Install to /usr/sbin/wifite, save wordlists to /usr/local/share/wordlists/ 
As asked in #102.
 2018-08-19 22:02:14 -07:00
derv82 8b786b70b0 Added setup.py. Run: python -m wifite 
As asked by @blshkv in #102.

Running: `sudo python -m wifite`
Install: `sudo python setup.py install`

These steps (and "uninstalling") are mentioned in the README.
 2018-08-19 15:32:14 -07:00
derv82 a157132387 2.1.9: --pmkid option, cleaned up --cracked, other bug fixes. 
PMKID:

* `--pmkid` option only attacks WPA networks with PMKID capture + crack
* Decreased PMKID capture time from 60 seconds to 15 seconds.
* Ignores PMKID attack if `--wps-only` is set.

WPS:

* Ctrl+C while waiting for `bully` to fetch PSK = remembers PIN, PSK is unknown.

Misc:

* `--cracked` prints results on single lines (much easier to read)
* Fixed typo when required dependencies are not found (closes #127)
 2018-08-19 10:37:27 -07:00
derv82 ebb7cac91c Removing the last of the double-quoted strings (now single-quoted) 2018-08-18 03:01:52 -07:00
derv82 c4ed911490 Rewrote --crack behavior; supports multiple handshakes at once. 2018-08-18 02:55:12 -07:00
derv82 0977f48d0c Documentation, code-formatting, and refactoring. 
* Added some docs, updated existing docs.
* Use single-quotes for strings when possible.
* Color.pexception() prints exception and stack trace.
 2018-08-17 03:46:58 -07:00
derv82 6adca64154 2.1.8: Check hashcat tools before trying PMKID attack. 
Should resolve #124.

Also, capturing PMKID will skip WPA handshake capture.
 2018-08-16 11:10:03 -07:00
derv82 7ed30f0973 Making all .py files executable 2018-08-16 01:56:42 -07:00
derv82 ba847442d5 Don't overwrite john files in --crack output. 
For pull request #117
 2018-08-16 01:23:35 -07:00
derv82 f76c339bb7 Avoiding needless mac_address lookup, empty interfaces, banner tweak. 
mac_address lookup & empty iface for #112.
Banner tweak for #92
 2018-08-16 01:23:35 -07:00
derv82 d7120bca50 2.1.7: Version bump for recent updates (PMKID, AttributeError fix). 2018-08-16 01:23:35 -07:00
derv82 e48f3bb035 Avoid AttributeErrors, support re-cracking PMKIDs 
Process.__del__() swallows AttributeErrors now (for #120).

And hashcat won't output the key if it's already been cracked (it's in the pot file).
So we run hashcat again, with the --show parameter. This does not try to crack again.
 2018-08-16 01:23:35 -07:00
derv82 fd3c955c48 Added Hashcat library, PMKID is persisted in ./hs/ and re-used 2018-08-16 01:23:35 -07:00
derv82 dd7e93666a Cleaning up PMKID attack. 2018-08-16 01:23:35 -07:00
derv82 936230dd50 Added PMKID attack. Simplified attack-loop. 2018-08-16 01:23:35 -07:00
derv82 0d44a6bc3d Fix bug in dependency failure. 2018-08-16 01:23:35 -07:00
derv82 305d6b9e3b Cleaning up wifite.py, added wordlist. 
Moved logic from main module into helper classes.
Wordlist from https://github.com/berzerk0/Probable-Wordlists/tree/master/Real-Passwords/WPA-Length
 2018-08-16 01:23:35 -07:00
derv82 c335391bca Only depend on 'aicrack' to avoid messages for entire air* suite. 2018-08-16 01:23:35 -07:00
derv82 f24ec55999 Silently ignore failure to kill conflicting processes. 
Resolves #97
 2018-06-09 22:48:10 -04:00
derv82 9d1db5966b Change shebang from /usr/bin/python to /usr/bin/env python 
Resolves #99
 2018-06-09 22:46:30 -04:00
derv82 1edba23c32 2.1.6: Support non-ASCII ESSIDs in scanner. Don't silently exit on crash. 
Resolves #88
Resolves #92
Might be related to #85
 2018-06-09 22:22:38 -04:00
derv82 96e846aa82 Removing EvilTwin-related dependencies 
Resolves #89
 2018-05-27 20:27:37 -04:00
derv82 72fc0b27a1 2.1.5 version bump for recent changes. 2018-05-27 17:16:11 -04:00
derv82 9a12e38dda Dependency cleanup 2018-04-21 11:36:39 -04:00
derv82 0adcd55742 All tools inherit "Dependency". 2018-04-21 11:34:30 -04:00
derv82 1083db6f88 Add eviltwin args. Add "Dependency" subclass 2018-04-21 04:25:46 -04:00
derv82 28b2d8312c --keep-ivs option to retain .ivs files across attacks on the same target 
For #27
 2018-04-20 14:57:31 -04:00
derv82 9f95f554ae Lots of changes to improve WEP, but don't actually improve WEP. 2018-04-19 22:49:59 -04:00
derv82 adc7d37318 Don't kill+restart aircrack after 30s, wait 60s for target, 
Also detect enabled/disabled interfaces when putting in/out of monitor mode.
 2018-04-19 12:59:11 -04:00
derv82 1bbc7fefaf Better colors on stack traces 2018-04-19 02:50:25 -04:00
derv82 4ef3236e4d Don't disable monitor mode / put interface up on exit. 2018-04-18 21:36:36 -04:00
derv82 bd495966f0 v2.1.4: Version bump for recent fixes/changes. 2018-04-18 15:03:34 -04:00
derv82 6f71957753 iface before PHY in output. 
Remove "Interface" model, rely on ifconfig
 2018-04-18 15:01:25 -04:00
derv82 ec49c0336e Change all *.py to exectuable 2018-04-18 14:44:56 -04:00
derv82 2b40ce3706 Code cleanup 2018-04-18 14:42:24 -04:00
derv82 8f32972546 Fix bug in macchanger 2018-04-18 06:16:53 -04:00
derv82 3542381b3e Move Ifconfig and Iwconfig logic to separate classes. 2018-04-18 06:15:14 -04:00
derv82 bd13bf69cf testing discord https://discord.gg/Zc7Ej8D 
[discord for wifite](https://discord.gg/Zc7Ej8D)
 2018-04-17 18:27:25 -04:00
derv82 f6fb7d688e Adding SniffAir documentation 2018-04-17 14:35:22 -04:00
derv82 830e3794fe Added "proof-of-concept" commands to start AP & redirect traffic 2018-04-17 14:15:34 -04:00
derv82 c13021266e Including more info on Rogue AP requirements (hostapd/dnsmasq) 2018-04-17 02:13:12 -04:00
derv82 978973e507 Added note to improve dependency handling. 2018-04-17 02:11:23 -04:00
derv82 d92e3a6f92 Adding info about creating Evil Twin AP. 2018-04-15 23:18:40 -04:00
derv82 42781dedcc Added Airmon-ng test. 2018-04-15 23:10:47 -04:00
derv82 64c0662d30 More Evil Twin ideas. 2018-04-15 06:09:38 -04:00
derv82 3d6f30af0a Adding thoughts/ideas about an "Evil Twin" feature in Wifite. 2018-04-15 05:57:36 -04:00
derv82 90c99b11f1 2.1.3: Better WPS attack messaging. Leave device in Monitor Mode. 
Unrelated to WPS:
* Do not take device out of monitor mode when finished (informs user)
* Do not restart NetworkManager when finished (informs user)

Changes to CLI switches:
* --wps-time X: Total time for WPS attack to complete
* --wps-timeouts X: Max number of timeouts before failing
* --wps-fails X: Max number of WPSFails before failing
* Removed unused WPS switches.
* Improved --help messaging for WPS switches.
* Fail/Timeout threshold default is 100

Bully now outputs useful information:
* Current PIN + status
* Time remaining
* Number of Timeout messages
* Number of "WPSFail" messages
* If AP is locked

Better reaver output.
* Looks more like Bully's output.
* Timer shows time remaining for attack.
* Mentions "Running pixiewps" during "M2 message" step.
* pixiewps failure looks like this: "Reaver says: 'WPS pin not found'"
* Counts Timeouts and "WPS Transaction Failure" (WPSFail)

For #28
 2018-04-07 19:22:51 -04:00
derv82 20ea673a3d 2.1.2: Quiet decloak. Support ESSIDs with commas and trailing spaces 
Decloaked ESSIDs will have a "*" next to their name. For #78

While testing, I found that Wifite did not parse Airodump's CSV correctly.
Specifically, ESSIDs with commas or trailing spaces.
Fixed in this commit.

Also fixed hidden ESSID detection introduced by the new CSV parsing logic.
 2018-04-06 18:56:35 -04:00
derv82 cef4c451fe Better help messages for -v and -i 2018-04-06 17:29:09 -04:00
derv82 2b7870cb7c 2.1.1: Option to ignore APs without clients (--clients-only or -co) 
Requested in #79
 2018-04-06 17:27:43 -04:00
derv82 b716e6099f Don't specify reaver timeout (was 4s, default is 10s) 2018-04-06 16:21:30 -04:00
derv82 e0ec0e72b2 Change version to 2.1.0 
See https://github.com/derv82/wifite/issues/130 for more info.
 2018-04-06 15:55:58 -04:00
derv82 699578abed Allow spaces in target selection (e.g. 3, 4, 7-8) 2018-04-01 15:57:58 -04:00
derv82 57ad097d49 --check: Detect BSSID based on Wifite's handshake filename format. 2018-04-01 15:31:12 -04:00
derv82 a4110b4cf9 Put quotes around Tshark filter ... otherwise tshark locks up 2018-04-01 15:23:56 -04:00
derv82 e8c0843bdf Use stdbuf only if it exists 2018-04-01 01:09:57 -04:00
derv82 5db801b414 Cleaning up handshake code 2018-04-01 01:03:10 -04:00
derv82 2cd6116a8c Move Pyrit logic to tools/pyrit.py 2018-04-01 00:55:41 -04:00
derv82 a2dbf4c382 Moving Tshark logic into /tools/tshark.py 
Added tests for analyzing handshakes
 2018-04-01 00:37:28 -04:00
derv82 acc8e296d5 Dim the [+] box colors 2018-03-31 23:59:50 -04:00
derv82 72382cf381 Updating README for latest developments. 2018-03-31 23:36:53 -04:00
derv82 3eddcaa59f Support for Python3 
That was fun.
 2018-03-31 23:02:33 -04:00
derv82 1ad17472b2 Tshark is optional, falls-back to Wash for WPS-detection. 
Should resolve #77
 2018-03-31 18:57:11 -04:00
derv82 528741f89f Fix bully: --force when deriving PSK from PIN 2018-03-31 18:40:04 -04:00
derv82 909b10e517 Make tshark non-required. 
* WPS-detection is not required for non-WPS attacks.
* Handshake analysis can be done using aircrack, cowpatty, pyrit, etc.
 2018-03-31 18:05:47 -04:00
derv82 b0bd57b1a3 Improve messaging during chopchop & fragment attacks 
Bugfix when chopchop fails.
Displays aircrack's error message when chopchop fails.

For improving WEP attacks in #27
 2018-03-25 16:03:20 -04:00
derv82 d8da6798de Update README. Add ideas to TODO after reading the first 20 issues on wifite v1 :( 2018-03-25 04:48:55 -04:00
derv82 19c38bd06c Fetch PSK when reaver fails to find it using Bully 
Also changed reaver --timeout from 10 seconds (default) to 4 seconds.

Resolves #76
 2018-03-24 15:02:11 -04:00
derv82 a488cf86f1 Bugfix: Don't infinitely loop while calculating Hex & ASCII key from WEP attack. 
* Simplified HEX/ASCII conversion. Avoids infinite loop 🤔
* Added integration test: python -m wifite.tools.aircrack

Should resolve "hanging" issues during WEP attacks such as #27.
 2018-03-24 14:10:48 -04:00