alexandre/wifite2
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
176 Commits 3 Branches 10 Tags
72382cf381a46d26a0d163c0a6b6e865990d98da
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
derv82 72382cf381 Updating README for latest developments. 2018-03-31 23:36:53 -04:00
derv82 3eddcaa59f Support for Python3 
That was fun.
 2018-03-31 23:02:33 -04:00
derv82 1ad17472b2 Tshark is optional, falls-back to Wash for WPS-detection. 
Should resolve #77
 2018-03-31 18:57:11 -04:00
derv82 528741f89f Fix bully: --force when deriving PSK from PIN 2018-03-31 18:40:04 -04:00
derv82 909b10e517 Make tshark non-required. 
* WPS-detection is not required for non-WPS attacks.
* Handshake analysis can be done using aircrack, cowpatty, pyrit, etc.
 2018-03-31 18:05:47 -04:00
derv82 b0bd57b1a3 Improve messaging during chopchop & fragment attacks 
Bugfix when chopchop fails.
Displays aircrack's error message when chopchop fails.

For improving WEP attacks in #27
 2018-03-25 16:03:20 -04:00
derv82 d8da6798de Update README. Add ideas to TODO after reading the first 20 issues on wifite v1 :( 2018-03-25 04:48:55 -04:00
derv82 19c38bd06c Fetch PSK when reaver fails to find it using Bully 
Also changed reaver --timeout from 10 seconds (default) to 4 seconds.

Resolves #76
 2018-03-24 15:02:11 -04:00
derv82 a488cf86f1 Bugfix: Don't infinitely loop while calculating Hex & ASCII key from WEP attack. 
* Simplified HEX/ASCII conversion. Avoids infinite loop 🤔
* Added integration test: python -m wifite.tools.aircrack

Should resolve "hanging" issues during WEP attacks such as #27.
 2018-03-24 14:10:48 -04:00
derv82 34d6b69b48 Fixing whitespace (tabs) on 'baddriver' methods 2018-03-17 17:42:44 -04:00
derv82 ad0265cd92 Merge branch 'refactor' 2018-03-17 17:30:11 -04:00
derv82 7d4219808d Wait for WPS results if target is specified in switches and --wps-only as well 2018-03-17 17:29:33 -04:00
derv82 964bf23763 Small fixes to verbose output 2018-03-17 17:29:33 -04:00
derv82 b5cb8b69f1 Filter *out* by ESSID using -E (--ignore-essid) 
More refactoring!
 2018-03-17 05:47:02 -04:00
derv82 a100d53300 Cleaning up --help, banner, small fixes 2018-03-17 05:30:12 -04:00
derv82 0a089c8aab Verbose mode for --help 2018-03-17 05:14:41 -04:00
derv82 9ff7404d53 Small refactoring 2018-03-17 04:41:44 -04:00
derv82 d63f43016d Fixing tests 2018-03-17 04:33:42 -04:00
derv82 7b9a023bd6 Cleaning up imports, fixing a few bugs. 2018-03-17 04:32:00 -04:00
derv82 f4a11f9acb Refactor arguments 2018-03-17 04:15:19 -04:00
derv82 622ec064a5 Massive refactor/renaming. No more upper-case filenames. 2018-03-17 04:04:05 -04:00
derv82 88bb2c0ac2 Fix bug when crack succeeds with Reaver. 
As reported in #60
 2018-03-17 03:12:31 -04:00
derv82 93af516c45 Always print stack traces for errors during WEP attack 
Should make troubleshooting #27 easier.
 2018-03-11 01:49:41 -05:00
derv82 697207f11b Don't kill conflicting processes by-default, require --kill 
Shows warning to user that the processes may conflict with Wifite, & how to kill them.

Should resolve #57
 2018-03-10 21:18:20 -05:00
derv82 e95b4a99a0 Slight adjustments to format of printed information. 2018-03-10 20:36:50 -05:00
derv82 a50d633861 New ascii art. Because why not. 2018-03-10 20:28:17 -05:00
derv82 3257755094 Some "hidden" helper switches (-nd --no-deauths --nodeauths) 
When skipping an attack (WPA/WPS), explain why and mention the AP ESSID
 2018-03-10 16:00:17 -05:00
derv82 100528cac3 Removed WPS PIN attack completely from Wifite. 2018-03-10 16:00:17 -05:00
derv82 0bfc82c356 BUGFIX: Detect when Reaver/Bully is successful. 
Reported in #60

Also removed PIN attack.
 2018-03-10 15:59:52 -05:00
derv82 9661da51e0 Restart NetworkManager if killed, using 'service' command. 
Previously only restarted network-manager if iface was put into monitor mode.

Also tries systemctrl if 'service' fails.

Should resolve #70
 2018-03-10 14:47:14 -05:00
derv82 0a81774c59 BugFix: Selects full range of clients when given ("N-M") 
Previously selected from N to (M-1)
 2018-03-10 14:36:40 -05:00
derv82 82f0a2ae96 Trying to fix bully & reaver Pixie-Dust attacks. 
Haven't even looked at PIN attacks yet.

Hopefully helps out with #28
 2018-03-03 23:40:15 -05:00
derv82 1a063edc42 Check required/recommended apps are installed during startup 
Closes #61
 2018-03-03 02:47:00 -05:00
derv82 22e655215c Bring back --showb due to popular demand 
Closes #69 (heh)
 2018-03-03 02:27:18 -05:00
derv82 222b89dee6 Fix but when cracking WPA handshakes. 
Resolves #68
 2018-02-28 05:09:11 -05:00
derv82 6249d53819 Reordering/rewording --help output 2018-02-28 04:47:14 -05:00
derv82 ff4e85f20a Updated TODO with more ideas, tech debt, etc. 2018-02-28 04:40:43 -05:00
derv82 992a84fd3b Improved --crack option. 
* Detect handshakes instead of relying on cracked.txt
  * cracked.txt doesn't store non-cracked handshakes!
* Sort handshakes by capture date
* Use cap2hccapx.bin found in /usr/lib/hashcat-utils
* Link to tool if it's not found.
* Include BSSID in --crack commands if relevant
 2018-02-28 04:40:43 -05:00
derv82 001fc19eac Locked WPS = 'no'. And new Option to ignore old handshakes 
* Targets with WPS Locked will say "no" under WPS in the target list.
* `--new-hs` will ignore existing handshakes.
 2018-02-28 04:39:40 -05:00
derv82 aaf7845177 --bully option to use bully (instead of reaver). 
Previously used bully by-default.
Removed Configurations named 'reaver' (instead of 'WPS attack')

Should resolve #39
 2018-02-28 04:36:06 -05:00
derv82 21e340ab08 Merge branch 'kimocoder-master' 2018-02-27 20:39:00 -05:00
derv82 562bf438bf Refactor WPA handshake capture 
TODO: Argument to ignore old handshakes
 2018-02-27 20:33:24 -05:00
derv82 0c5558fb74 Consolidate scan_time and pillage into one argument 2018-02-27 20:07:51 -05:00
derv82 608940bf2e Merge branch 'master' of https://github.com/kimocoder/wifite2 into kimocoder-master 2018-02-27 16:50:51 -05:00
derv82 59c566a28d Avoid crashing when airodump exits 2018-02-27 15:23:32 -05:00
derv82 a8f05d31d4 Gracefully handle airodump crashing. 
Apparently Airodump is capturing the SIGINT on some Ctrl+C presses.
Wifite will print out that airodump crashed w/ the return code & command executed.
Wifite will not change the list of targets if airodump crashes (to avoid wps:n/a).
 2018-02-27 04:54:15 -05:00
derv82 bf1545578c Merge branch 'master' of https://github.com/kimocoder/wifite2 into kimocoder-master 2018-02-27 04:24:39 -05:00
derv82 af5e3aaca9 Ignore error when parsing Client row. 
Explanation of bug (Why error wasn't being caught):

```
try:
    ...
except IndexError, ValueError:
    # Only catches IndexError.
    # ValueError is a *variable* holding the IndexError !
```
 2018-02-27 04:20:21 -05:00
derv82 080e674aa6 Remove dependency on Wash; detect WPS via Tshark. 
Should resolve #62
 2018-02-27 04:09:46 -05:00
derv82 a6c0a58013 .gitignore hs/ directory 
Braindump into TODO file
 2018-02-26 22:21:06 -05:00
derv82 aa75970ad1 Fix WEP fragment attack. 
Whoops.
 2017-06-12 03:33:15 -04:00
derv82 db5aaf78f5 Ignore case when filtering MACs. 
Should resolve #32
 2017-06-11 22:59:20 -04:00
derv82 41402c6481 Don't hide hidden networks with 0 length ESSIDs 
Whoops
 2017-06-11 21:55:37 -04:00
derv82 ebdde675e9 Filter multicast/broadcast BSSIDs from appearing in target list 
Should resolve #32
 2017-06-11 17:49:02 -04:00
derv82 b9c90b3d48 Custom number of deauths. 
Also fixed bug with Airodump's ESSID decloaking: now specifies target access point.

Should resolve #31
 2017-06-11 17:36:41 -04:00
derv82 433d30861d Exit gracefully when run as non-root 
Patch for pull request #33
 2017-05-18 01:58:26 -04:00
derv82 c812edf630 Fix bug when airodump output for clients is unexpected/unparsable 2017-05-18 00:14:49 -04:00
derv82 c4773c6d1a Use bully instead of reaver. 
Detailed WPS output.

TODO:
* Actually test that cracked PINs are detected & saved, pending #28
* Command-line options to specify max lockout/timeout/noassoc/failure
 2017-05-17 23:19:49 -04:00
derv82 c19332c25c Enable persistent fakeauth, bypass AP detection when deauthing. 
AP bypass should make 5ghz deauths work for all systems (should fix #24)
 2017-05-17 05:55:48 -04:00
derv82 5d44c1b0c4 Remove --delay=0 and --no-nacks from Reaver PixieDust attack 
I can't get the PixieDust attack to work to save my life.
 2017-05-17 05:08:49 -04:00
derv82 63e8c9c8cc Gussying up WEP attacks. 
For #27

* Shows status of chopchop and arpreplay attacks.
* Fakeauth runs continously in the background, reassociating every 30 sec
* Detects fakeauth success/failure, shows in attack status line.
 2017-05-17 04:41:38 -04:00
derv82 c3fa522189 Fixing WEP chopchop attack. Works, but needs more work... 2017-05-16 21:08:43 -04:00
derv82 8621d422ac Don't crack if --dict wordlist is not found (e.g. --dict none) 
Should probably be another option like --no-crack
 2017-05-16 19:16:58 -04:00
derv82 bcde906a77 Timer module. WPA Handshake attack is prettier. 
1. Timer module for timing things. Should've done this a while ago.
2. WPA handshake attack outputs # of clients, lists all clients, has countdown
3. WPA Handshake Attack deauths all clients at the same time.
4. Fixed bug where WPA handshake attack never timed out. Fixes #23
5. WPA Cracking via aircrack-ng shows percentage & ETA.
6. Mild refactoring / cleanup of AttackWPA module.
 2017-05-16 19:02:57 -04:00
derv82 a8337a47a7 Fix order of hashcat arguments (hccapx <-> wordlist) 
For #15
 2017-05-16 14:24:38 -04:00
derv82 c23e228d3c Input validation, show # targets attacked when completed 2017-05-15 23:32:53 -04:00
derv82 e6c02bd98b More options when interrupting a WEP attack. 
Options: Move to a specific attack, deauth & retry current attack, or skip the target.
 2017-05-15 23:03:54 -04:00
derv82 a226cdb9a1 Added --nodeauths command, try to fix WEP replay attacks. 
Aireplay can optionally NOT store the process output (via `devnull=False`).
By-default, Aireplay attacks will not capture aireplay-ng output, to
avoid deadlock when overloading the OS buffer (see #21).
 2017-05-15 20:36:04 -04:00
derv82 a8d16d1b69 Remove --strip option 
Tried to make it work but alas, no dice.
 2017-05-15 01:25:20 -04:00
derv82 5031de7f3c Less-invasive interface management, catch Exceptions at the target-level 
Exception-handling should resolve #18 (move onto next target instead of crashing).

Interface management changes:
 1. Interfaces are left in monitor-mode if they were already in monitor mode
   * Previously *always* put the iface out of monitor mode & restarted network manager
 2. Only the interface that was put into monitor mode is brought back up
   * Previously all interfaces were brought back up
 2017-05-14 23:57:49 -04:00
derv82 936c34bd28 Auto-cleanup-on-shutdown output is consistent. 2017-05-14 23:41:31 -04:00
derv82 a08dbf99c5 --crack option provides commands to crack a handshake 
Requested in #15
 2017-05-14 23:07:34 -04:00
derv82 0a6e0d8ee7 -mac option to randomize mac before attack 
Resets mac back after attack using macchanger's -p option.

Requested in #2
 2017-05-14 20:25:30 -04:00
derv82 250e89b21e --5ghz scans *only* 5ghz networks (not 2ghz) 
Also fixed ugly output when waiting for handshakes
 2017-05-14 19:03:13 -04:00
derv82 2a5258ceef Fixing unit tests 2017-05-14 17:42:52 -04:00
derv82 ecfeeaae41 Decloak hidden APs when channel is fixed 2017-05-14 17:26:13 -04:00
derv82 02df6ed084 Minor reformatting 2017-05-14 15:37:05 -04:00
derv82 890915b9b3 Output target info during WPS attacks. 
Also using reaver's --no-nacks option
 2017-05-14 15:37:05 -04:00
derv82 2726381017 Changing default wordlists, fix bug in wps/wash 2017-05-14 15:37:05 -04:00
derv82 c836cb9e6b Fix tshark ssid discovery 2017-05-14 15:37:05 -04:00
derv82 62503b0d0c Various small fixes + tweaks 2017-05-14 15:37:05 -04:00
derv82 b0bd0342d7 Airodump writes to csv every second (instead of every 5) 2017-05-14 15:37:05 -04:00
derv82 842144129a Fixing reaver & wash 2017-05-14 15:37:05 -04:00
derv82 8381fed1ea Cleaning up arguments and help message 2016-04-17 17:26:20 -04:00
derv82 8b5f5ce3f4 Fix deauth, Pixie step timeout, better handshake options. 
Deauth now deauths clients (whoops).
Checks all handshakes if no filename is given to --check-hs
Times out a --pixie attack if the step does not change in 30 seconds.
 2016-04-16 13:15:23 -04:00
derv82 3847f2c5c9 Lots of fixes. 
1. WEP attack gracefully handles ctrl+c
2. Very verbose (-vv) prints out commands and output
3. Doesn't fetch WPS info when attacking WEP
 2016-01-04 18:20:25 -05:00
derv82 c5ffac75c5 Ignore -1 channels, bug/crash fix, support newer tshark 2016-01-01 02:04:10 -05:00
derv82 746da03580 Adding 5ghz support 2015-12-28 12:52:29 -05:00
derv82 95b7296444 Verbose mode, colored help, highlighted error trace 2015-08-04 22:05:16 -07:00
derv82 ac50614e5b Reformat when WPS PIN attack succeeds 2015-06-15 00:55:04 -07:00
derv82 c1711dee6a Terminate conflicting processe at startup 2015-06-14 11:25:12 -07:00
derv82 c32462a045 Root check. And attacks can be stopped/skipped 2015-06-13 13:59:20 -07:00
derv82 491854ddb0 Derive WPS pins left. ETA is sticky 2015-06-12 22:54:22 -07:00
derv82 f839ad4818 WPS max_failures is honored now. 
Handshake attack copies .cap file to temp for consistency.
 2015-06-12 22:34:44 -07:00
derv82 b79025f1dc More aircrack 1.2 rc1 fixes 
Airmon-ng works.
* Deletes conflicting processes on rc1, need to test on rc2 before
  adding to Wifite.py (main).

WPS PIN-attack *sort of* works for reaver 1.4. Needs a way to derive
    current pin count when restarting a session.
 2015-06-11 22:35:06 -07:00
derv82 633d11b7d1 Backwards compatibility attempt #1 
Got a fresh copy of Kali 1.1.0, didn't upgrade aircrack or reaver.

Supports:
* Aircrack-ng 1.2 rc1
* Reaver 1.4
 2015-06-10 00:59:04 -07:00
derv82 27e786803a Trying to add support for older versions of reaver 2015-06-09 22:00:48 -07:00
derv82 f90aa7f7d6 WPS PIN attack: show percentage 2015-06-08 23:10:23 -07:00
derv82 920970f4e7 Fix configuration/argument for wps rate limits 
Also made WPS PIN attack prettier
 2015-06-07 16:37:10 -07:00
derv82 337bed23c6 WPS pin attack mostly works. 
Haven't tested if it reads the PIN or not...
Also fixed bugs in configuratin/arguments setup.
 2015-06-06 22:51:56 -07:00