alexandre/wifite2
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
191 Commits 3 Branches 10 Tags
3d6f30af0a55335c275c0d5a6babfb8a9c328f7e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
derv82 3d6f30af0a Adding thoughts/ideas about an "Evil Twin" feature in Wifite. 2018-04-15 05:57:36 -04:00
derv82 90c99b11f1 2.1.3: Better WPS attack messaging. Leave device in Monitor Mode. 
Unrelated to WPS:
* Do not take device out of monitor mode when finished (informs user)
* Do not restart NetworkManager when finished (informs user)

Changes to CLI switches:
* --wps-time X: Total time for WPS attack to complete
* --wps-timeouts X: Max number of timeouts before failing
* --wps-fails X: Max number of WPSFails before failing
* Removed unused WPS switches.
* Improved --help messaging for WPS switches.
* Fail/Timeout threshold default is 100

Bully now outputs useful information:
* Current PIN + status
* Time remaining
* Number of Timeout messages
* Number of "WPSFail" messages
* If AP is locked

Better reaver output.
* Looks more like Bully's output.
* Timer shows time remaining for attack.
* Mentions "Running pixiewps" during "M2 message" step.
* pixiewps failure looks like this: "Reaver says: 'WPS pin not found'"
* Counts Timeouts and "WPS Transaction Failure" (WPSFail)

For #28
 2018-04-07 19:22:51 -04:00
derv82 20ea673a3d 2.1.2: Quiet decloak. Support ESSIDs with commas and trailing spaces 
Decloaked ESSIDs will have a "*" next to their name. For #78

While testing, I found that Wifite did not parse Airodump's CSV correctly.
Specifically, ESSIDs with commas or trailing spaces.
Fixed in this commit.

Also fixed hidden ESSID detection introduced by the new CSV parsing logic.
 2018-04-06 18:56:35 -04:00
derv82 cef4c451fe Better help messages for -v and -i 2018-04-06 17:29:09 -04:00
derv82 2b7870cb7c 2.1.1: Option to ignore APs without clients (--clients-only or -co) 
Requested in #79
 2018-04-06 17:27:43 -04:00
derv82 b716e6099f Don't specify reaver timeout (was 4s, default is 10s) 2018-04-06 16:21:30 -04:00
derv82 e0ec0e72b2 Change version to 2.1.0 
See https://github.com/derv82/wifite/issues/130 for more info.
 2018-04-06 15:55:58 -04:00
derv82 699578abed Allow spaces in target selection (e.g. 3, 4, 7-8) 2018-04-01 15:57:58 -04:00
derv82 57ad097d49 --check: Detect BSSID based on Wifite's handshake filename format. 2018-04-01 15:31:12 -04:00
derv82 a4110b4cf9 Put quotes around Tshark filter ... otherwise tshark locks up 2018-04-01 15:23:56 -04:00
derv82 e8c0843bdf Use stdbuf only if it exists 2018-04-01 01:09:57 -04:00
derv82 5db801b414 Cleaning up handshake code 2018-04-01 01:03:10 -04:00
derv82 2cd6116a8c Move Pyrit logic to tools/pyrit.py 2018-04-01 00:55:41 -04:00
derv82 a2dbf4c382 Moving Tshark logic into /tools/tshark.py 
Added tests for analyzing handshakes
 2018-04-01 00:37:28 -04:00
derv82 acc8e296d5 Dim the [+] box colors 2018-03-31 23:59:50 -04:00
derv82 72382cf381 Updating README for latest developments. 2018-03-31 23:36:53 -04:00
derv82 3eddcaa59f Support for Python3 
That was fun.
 2018-03-31 23:02:33 -04:00
derv82 1ad17472b2 Tshark is optional, falls-back to Wash for WPS-detection. 
Should resolve #77
 2018-03-31 18:57:11 -04:00
derv82 528741f89f Fix bully: --force when deriving PSK from PIN 2018-03-31 18:40:04 -04:00
derv82 909b10e517 Make tshark non-required. 
* WPS-detection is not required for non-WPS attacks.
* Handshake analysis can be done using aircrack, cowpatty, pyrit, etc.
 2018-03-31 18:05:47 -04:00
derv82 b0bd57b1a3 Improve messaging during chopchop & fragment attacks 
Bugfix when chopchop fails.
Displays aircrack's error message when chopchop fails.

For improving WEP attacks in #27
 2018-03-25 16:03:20 -04:00
derv82 d8da6798de Update README. Add ideas to TODO after reading the first 20 issues on wifite v1 :( 2018-03-25 04:48:55 -04:00
derv82 19c38bd06c Fetch PSK when reaver fails to find it using Bully 
Also changed reaver --timeout from 10 seconds (default) to 4 seconds.

Resolves #76
 2018-03-24 15:02:11 -04:00
derv82 a488cf86f1 Bugfix: Don't infinitely loop while calculating Hex & ASCII key from WEP attack. 
* Simplified HEX/ASCII conversion. Avoids infinite loop 🤔
* Added integration test: python -m wifite.tools.aircrack

Should resolve "hanging" issues during WEP attacks such as #27.
 2018-03-24 14:10:48 -04:00
derv82 34d6b69b48 Fixing whitespace (tabs) on 'baddriver' methods 2018-03-17 17:42:44 -04:00
derv82 ad0265cd92 Merge branch 'refactor' 2018-03-17 17:30:11 -04:00
derv82 7d4219808d Wait for WPS results if target is specified in switches and --wps-only as well 2018-03-17 17:29:33 -04:00
derv82 964bf23763 Small fixes to verbose output 2018-03-17 17:29:33 -04:00
derv82 b5cb8b69f1 Filter *out* by ESSID using -E (--ignore-essid) 
More refactoring!
 2018-03-17 05:47:02 -04:00
derv82 a100d53300 Cleaning up --help, banner, small fixes 2018-03-17 05:30:12 -04:00
derv82 0a089c8aab Verbose mode for --help 2018-03-17 05:14:41 -04:00
derv82 9ff7404d53 Small refactoring 2018-03-17 04:41:44 -04:00
derv82 d63f43016d Fixing tests 2018-03-17 04:33:42 -04:00
derv82 7b9a023bd6 Cleaning up imports, fixing a few bugs. 2018-03-17 04:32:00 -04:00
derv82 f4a11f9acb Refactor arguments 2018-03-17 04:15:19 -04:00
derv82 622ec064a5 Massive refactor/renaming. No more upper-case filenames. 2018-03-17 04:04:05 -04:00
derv82 88bb2c0ac2 Fix bug when crack succeeds with Reaver. 
As reported in #60
 2018-03-17 03:12:31 -04:00
derv82 93af516c45 Always print stack traces for errors during WEP attack 
Should make troubleshooting #27 easier.
 2018-03-11 01:49:41 -05:00
derv82 697207f11b Don't kill conflicting processes by-default, require --kill 
Shows warning to user that the processes may conflict with Wifite, & how to kill them.

Should resolve #57
 2018-03-10 21:18:20 -05:00
derv82 e95b4a99a0 Slight adjustments to format of printed information. 2018-03-10 20:36:50 -05:00
derv82 a50d633861 New ascii art. Because why not. 2018-03-10 20:28:17 -05:00
derv82 3257755094 Some "hidden" helper switches (-nd --no-deauths --nodeauths) 
When skipping an attack (WPA/WPS), explain why and mention the AP ESSID
 2018-03-10 16:00:17 -05:00
derv82 100528cac3 Removed WPS PIN attack completely from Wifite. 2018-03-10 16:00:17 -05:00
derv82 0bfc82c356 BUGFIX: Detect when Reaver/Bully is successful. 
Reported in #60

Also removed PIN attack.
 2018-03-10 15:59:52 -05:00
derv82 9661da51e0 Restart NetworkManager if killed, using 'service' command. 
Previously only restarted network-manager if iface was put into monitor mode.

Also tries systemctrl if 'service' fails.

Should resolve #70
 2018-03-10 14:47:14 -05:00
derv82 0a81774c59 BugFix: Selects full range of clients when given ("N-M") 
Previously selected from N to (M-1)
 2018-03-10 14:36:40 -05:00
derv82 82f0a2ae96 Trying to fix bully & reaver Pixie-Dust attacks. 
Haven't even looked at PIN attacks yet.

Hopefully helps out with #28
 2018-03-03 23:40:15 -05:00
derv82 1a063edc42 Check required/recommended apps are installed during startup 
Closes #61
 2018-03-03 02:47:00 -05:00
derv82 22e655215c Bring back --showb due to popular demand 
Closes #69 (heh)
 2018-03-03 02:27:18 -05:00
derv82 222b89dee6 Fix but when cracking WPA handshakes. 
Resolves #68
 2018-02-28 05:09:11 -05:00
derv82 6249d53819 Reordering/rewording --help output 2018-02-28 04:47:14 -05:00
derv82 ff4e85f20a Updated TODO with more ideas, tech debt, etc. 2018-02-28 04:40:43 -05:00
derv82 992a84fd3b Improved --crack option. 
* Detect handshakes instead of relying on cracked.txt
  * cracked.txt doesn't store non-cracked handshakes!
* Sort handshakes by capture date
* Use cap2hccapx.bin found in /usr/lib/hashcat-utils
* Link to tool if it's not found.
* Include BSSID in --crack commands if relevant
 2018-02-28 04:40:43 -05:00
derv82 001fc19eac Locked WPS = 'no'. And new Option to ignore old handshakes 
* Targets with WPS Locked will say "no" under WPS in the target list.
* `--new-hs` will ignore existing handshakes.
 2018-02-28 04:39:40 -05:00
derv82 aaf7845177 --bully option to use bully (instead of reaver). 
Previously used bully by-default.
Removed Configurations named 'reaver' (instead of 'WPS attack')

Should resolve #39
 2018-02-28 04:36:06 -05:00
derv82 21e340ab08 Merge branch 'kimocoder-master' 2018-02-27 20:39:00 -05:00
derv82 562bf438bf Refactor WPA handshake capture 
TODO: Argument to ignore old handshakes
 2018-02-27 20:33:24 -05:00
derv82 0c5558fb74 Consolidate scan_time and pillage into one argument 2018-02-27 20:07:51 -05:00
derv82 608940bf2e Merge branch 'master' of https://github.com/kimocoder/wifite2 into kimocoder-master 2018-02-27 16:50:51 -05:00
derv82 59c566a28d Avoid crashing when airodump exits 2018-02-27 15:23:32 -05:00
derv82 a8f05d31d4 Gracefully handle airodump crashing. 
Apparently Airodump is capturing the SIGINT on some Ctrl+C presses.
Wifite will print out that airodump crashed w/ the return code & command executed.
Wifite will not change the list of targets if airodump crashes (to avoid wps:n/a).
 2018-02-27 04:54:15 -05:00
derv82 bf1545578c Merge branch 'master' of https://github.com/kimocoder/wifite2 into kimocoder-master 2018-02-27 04:24:39 -05:00
derv82 af5e3aaca9 Ignore error when parsing Client row. 
Explanation of bug (Why error wasn't being caught):

```
try:
    ...
except IndexError, ValueError:
    # Only catches IndexError.
    # ValueError is a *variable* holding the IndexError !
```
 2018-02-27 04:20:21 -05:00
derv82 080e674aa6 Remove dependency on Wash; detect WPS via Tshark. 
Should resolve #62
 2018-02-27 04:09:46 -05:00
derv82 a6c0a58013 .gitignore hs/ directory 
Braindump into TODO file
 2018-02-26 22:21:06 -05:00
derv82 aa75970ad1 Fix WEP fragment attack. 
Whoops.
 2017-06-12 03:33:15 -04:00
derv82 db5aaf78f5 Ignore case when filtering MACs. 
Should resolve #32
 2017-06-11 22:59:20 -04:00
derv82 41402c6481 Don't hide hidden networks with 0 length ESSIDs 
Whoops
 2017-06-11 21:55:37 -04:00
derv82 ebdde675e9 Filter multicast/broadcast BSSIDs from appearing in target list 
Should resolve #32
 2017-06-11 17:49:02 -04:00
derv82 b9c90b3d48 Custom number of deauths. 
Also fixed bug with Airodump's ESSID decloaking: now specifies target access point.

Should resolve #31
 2017-06-11 17:36:41 -04:00
derv82 433d30861d Exit gracefully when run as non-root 
Patch for pull request #33
 2017-05-18 01:58:26 -04:00
derv82 c812edf630 Fix bug when airodump output for clients is unexpected/unparsable 2017-05-18 00:14:49 -04:00
derv82 c4773c6d1a Use bully instead of reaver. 
Detailed WPS output.

TODO:
* Actually test that cracked PINs are detected & saved, pending #28
* Command-line options to specify max lockout/timeout/noassoc/failure
 2017-05-17 23:19:49 -04:00
derv82 c19332c25c Enable persistent fakeauth, bypass AP detection when deauthing. 
AP bypass should make 5ghz deauths work for all systems (should fix #24)
 2017-05-17 05:55:48 -04:00
derv82 5d44c1b0c4 Remove --delay=0 and --no-nacks from Reaver PixieDust attack 
I can't get the PixieDust attack to work to save my life.
 2017-05-17 05:08:49 -04:00
derv82 63e8c9c8cc Gussying up WEP attacks. 
For #27

* Shows status of chopchop and arpreplay attacks.
* Fakeauth runs continously in the background, reassociating every 30 sec
* Detects fakeauth success/failure, shows in attack status line.
 2017-05-17 04:41:38 -04:00
derv82 c3fa522189 Fixing WEP chopchop attack. Works, but needs more work... 2017-05-16 21:08:43 -04:00
derv82 8621d422ac Don't crack if --dict wordlist is not found (e.g. --dict none) 
Should probably be another option like --no-crack
 2017-05-16 19:16:58 -04:00
derv82 bcde906a77 Timer module. WPA Handshake attack is prettier. 
1. Timer module for timing things. Should've done this a while ago.
2. WPA handshake attack outputs # of clients, lists all clients, has countdown
3. WPA Handshake Attack deauths all clients at the same time.
4. Fixed bug where WPA handshake attack never timed out. Fixes #23
5. WPA Cracking via aircrack-ng shows percentage & ETA.
6. Mild refactoring / cleanup of AttackWPA module.
 2017-05-16 19:02:57 -04:00
derv82 a8337a47a7 Fix order of hashcat arguments (hccapx <-> wordlist) 
For #15
 2017-05-16 14:24:38 -04:00
derv82 c23e228d3c Input validation, show # targets attacked when completed 2017-05-15 23:32:53 -04:00
derv82 e6c02bd98b More options when interrupting a WEP attack. 
Options: Move to a specific attack, deauth & retry current attack, or skip the target.
 2017-05-15 23:03:54 -04:00
derv82 a226cdb9a1 Added --nodeauths command, try to fix WEP replay attacks. 
Aireplay can optionally NOT store the process output (via `devnull=False`).
By-default, Aireplay attacks will not capture aireplay-ng output, to
avoid deadlock when overloading the OS buffer (see #21).
 2017-05-15 20:36:04 -04:00
derv82 a8d16d1b69 Remove --strip option 
Tried to make it work but alas, no dice.
 2017-05-15 01:25:20 -04:00
derv82 5031de7f3c Less-invasive interface management, catch Exceptions at the target-level 
Exception-handling should resolve #18 (move onto next target instead of crashing).

Interface management changes:
 1. Interfaces are left in monitor-mode if they were already in monitor mode
   * Previously *always* put the iface out of monitor mode & restarted network manager
 2. Only the interface that was put into monitor mode is brought back up
   * Previously all interfaces were brought back up
 2017-05-14 23:57:49 -04:00
derv82 936c34bd28 Auto-cleanup-on-shutdown output is consistent. 2017-05-14 23:41:31 -04:00
derv82 a08dbf99c5 --crack option provides commands to crack a handshake 
Requested in #15
 2017-05-14 23:07:34 -04:00
derv82 0a6e0d8ee7 -mac option to randomize mac before attack 
Resets mac back after attack using macchanger's -p option.

Requested in #2
 2017-05-14 20:25:30 -04:00
derv82 250e89b21e --5ghz scans *only* 5ghz networks (not 2ghz) 
Also fixed ugly output when waiting for handshakes
 2017-05-14 19:03:13 -04:00
derv82 2a5258ceef Fixing unit tests 2017-05-14 17:42:52 -04:00
derv82 ecfeeaae41 Decloak hidden APs when channel is fixed 2017-05-14 17:26:13 -04:00
derv82 02df6ed084 Minor reformatting 2017-05-14 15:37:05 -04:00
derv82 890915b9b3 Output target info during WPS attacks. 
Also using reaver's --no-nacks option
 2017-05-14 15:37:05 -04:00
derv82 2726381017 Changing default wordlists, fix bug in wps/wash 2017-05-14 15:37:05 -04:00
derv82 c836cb9e6b Fix tshark ssid discovery 2017-05-14 15:37:05 -04:00
derv82 62503b0d0c Various small fixes + tweaks 2017-05-14 15:37:05 -04:00
derv82 b0bd0342d7 Airodump writes to csv every second (instead of every 5) 2017-05-14 15:37:05 -04:00
derv82 842144129a Fixing reaver & wash 2017-05-14 15:37:05 -04:00
derv82 8381fed1ea Cleaning up arguments and help message 2016-04-17 17:26:20 -04:00
derv82 8b5f5ce3f4 Fix deauth, Pixie step timeout, better handshake options. 
Deauth now deauths clients (whoops).
Checks all handshakes if no filename is given to --check-hs
Times out a --pixie attack if the step does not change in 30 seconds.
 2016-04-16 13:15:23 -04:00