Wireless Cracking Tool

This repo is a Python script for auditing wireless networks.

Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches!

To run:

cd wifite2
sudo ./Wifite.py

Installation:

To install onto your computer (so you can just run wifite from any terminal), run:

sudo python setup.py install

Wifite is designed to use all known methods for retrieving the password of a wireless access point (router). These methods include:

1. WPS: The Offline Pixie-Dust attack
2. WPS: The Online Brute-Force PIN attack
3. WPA: The WPA Handshake Capture + offline crack.
4. WPA: The PMKID Hash Capture + offline crack.
5. WEP: Various known attacks against WEP, including fragmentation, chop-chop, aireplay, etc.

Run wifite, select your targets, and Wifite will automatically start trying to capture or crack the password.

Supported Operating Systems

Wifite is designed specifically for the latest version of Kali Linux. ParrotSec is also supported.

Other pen-testing distributions (such as BackBox or Ubuntu) have outdated versions of the tools used by Wifite. Do not expect support unless you are using the latest versions of the Required Tools, and also patched wireless drivers that support injection.

Required Tools

First and foremost, you will need a wireless card capable of "Monitor Mode" and packet injection (see this tutorial for checking if your wireless card is compatible and also this guide). There are many cheap wireless cards that plug into USB available from online stores.

Second, only the latest versions of these programs are supported and must be installed for Wifite to work properly:

Required:

• python: Wifite is compatible with both python2 and python3.
• iwconfig: For identifying wireless devices already in Monitor Mode.
• ifconfig: For starting/stopping wireless devices.
• Aircrack-ng suite, includes:
  • airmon-ng: For enumerating and enabling Monitor Mode on wireless devices.
  • aircrack-ng: For cracking WEP .cap files and WPA handshake captures.
  • aireplay-ng: For deauthing access points, replaying capture files, various WEP attacks.
  • airodump-ng: For target scanning & capture file generation.
  • packetforge-ng: For forging capture files.

Optional, but Recommended:

• tshark: For detecting WPS networks and inspecting handshake capture files.
• reaver: For WPS Pixie-Dust & brute-force attacks.
  • Note: Reaver's wash tool can be used to detect WPS networks if tshark is not found.
• bully: For WPS Pixie-Dust & brute-force attacks.
  • Alternative to Reaver. Specify --bully to use Bully instead of Reaver.
  • Bully is also used to fetch PSK if reaver cannot after cracking WPS PIN.
• coWPAtty: For detecting handshake captures.
• pyrit: For detecting handshake captures.
• hashcat: For cracking PMKID hashes.
  • hcxdumptool: For capturing PMKID hashes.
  • hcxpcaptool: For converting PMKID packet captures into hashcat's format.