WiFi Arsenal

Repo fully maintained by 0x90/wifi-arsenal

README.md created by techge/wifi-arsenal

General WiFi Information

802.11 frames - A starter guide to learn wireless sniffer traces
80211 Pocket Reference Guide - Cheat Sheet for 802.11
802.11p-wireless-regdb - Wireless regulatory database for CRDA
802.11 Wireless Networks: The Definitive Guide - Partly open chapters of O‘Reilly 802.11 book
Armory - The 802.11 Hacking Repo (Meta Information, Link collection)
Awesome-wifi-security - A collection of awesome resources related to 802.11 security, tools and other things
Call-for-wpa3 - Call for WPA3 - what's wrong with WPA2 security and how to fix it
Known manufacturer MAC list -
Wikipedia - IEEE802.11 site of Wikipedia

Noteworthy Tools of Different Categories

Aircrack-ng - WiFi security auditing tools suite
airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks
karma - KARMA Attacks Radioed Machines Automatically (KARMA)
kismet - Wireless network detector, sniffer, and intrusion detection system
mdk3_6.1 - A fork and modification of the original MDK3
pyrit - The famous WPA precomputed cracker, Migrated from Google
Scapy - Python-based interactive packet manipulation program & library
waidps - Wireless Auditing, Intrusion Detection & Prevention System
WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack
Wireless-ids - Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets
zarp - Network attack tool centered around the exploitation of local networks

Attack/PenTesting

Denial of Service

80211mgmtDoS - 802.11 DoS Attacks based on unprotected Management frames
airodump_mod - Improved version of airodump-ng with ability to kick-off a stations from AP
android_packetspammer - Packetspammer sends unencrypted broadcast packets down a mac80211 wireless interface that should be set for Monitor mode
apflood - Flood area with fake essids
dw - Small tool for sending 802.11 disassociation and deauthentication packets to specific clients.
hwk - Hwk is a collection of packet crafting/network flooding tools
JamWiFi - A GUI, easy to use WiFi network jammer for Mac OS X
Mass-deauth-attack - A program that does Deauthentication Attack on every nearby wireless device
Mass-deauth - A script for 802.11 mass-deauthentication
mdk3_6.1 - A fork and modification of the original MDK3
modwifi - Advanced Wi-Fi Attacks Using Commodity Hardware
netattack - Python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks
Scapy-deauth - Scapy based wifi Deauth
ska - Framework for sniffing ieee80211 packets and generating deauth packets and sending raw packets.
wificurse - WiFi DoS attack tool created for educational purposes only. It works only in Linux and requires wireless card drivers capable of injecting packets in wireless networks
WifiDeauth - A lightweight Wi-Fi auto deauthentication attack tool (libtins/C++)
wifijammer - Continuously jam all wifi clients/routers
WiFi-Rifle - Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi
wirelessjammer - Continuously jam all wifi clients and access points within range
zizzania - Automated DeAuth attack

Encryption Attack

WEP/WPA/WPA2

Eicrog - WEP key generator for predictable key weaknesses
huawei_wifi - Wifi utilities for finding Huawei routers' default key
Aircrack-ng - WiFi security auditing tools suite
airmode - AirMode is a GUI that can help you to use the Aircrack framework
airoscriptng - Airoscript-ng python complete implementation
Airvengers - A GUI to pentest wifi Network, based on Aircrack-ng tools
asleap - Recovers weak LEAP password. Pronounced asleep.
autokwaker - Creating an auto cracker for 802.11 networks
cenarius - Cenarius tool for crack Wi-Fi , crack wpa-psk , crack wpa2-psk , crack wep , crack wps pin and crack hidden AP . cenarius psk crack
cherry - Distributed WPA/WPA2 cracker
Cowpatty - Offline dictionary attack against WPA/WPA2 networks using PSK-based authentication (e.g. WPA-Personal)
dot11decrypt - An 802.11 WEP/WPA2 on-the-fly decrypter.
Fern-wifi-cracker - Crack and recover WEP/WPA/WPS keys and also run other network based attacks on wireless or ethernet based networks
HandShaker - Detect, capture, crack WPA/2 handshakes, WEP Keys and geotag with Android GPS
hcxtools - Solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper
kismet-deauth-wpa2-handshake-plugin - Python plugin for Kismet to perform deauthentication to collect WPA2 handshakes
marfil - Assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers
peapwn - Proof-of-concept implementation of the Apple relay attack in Python
pyrcrack - Python Aircrack-ng
pyrit - The famous WPA precomputed cracker, Migrated from Google
pythonAir - Flask/aircrack
uploadwpa - This module will upload a wpa handshake from a single capture file to an online hash cracker site
WiFi-autopwner - Script to automate searching and auditing Wi-Fi networks with weak security
Wifi-bruteforcer-fsecurify - Android application to brute force WiFi passwords without requiring a rooted device
wificracking - Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
Wifi-hacker - Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
wifite2 - Python script for auditing wireless networks
wifite - An automated wireless attack tool
Wifite-mod-pixiewps - Wifite with PixieWPS support
Wifite-openwrt - Wifite for the WiFi Pineapple NANO + TETRA (Chaos Calmer - openWrt)
wlandecrypter - Dictionary attack (spanish)
WPA2-HalfHandshake-Crack - Capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP
wpa2hc - Quick script to automate converting WPA .cap files for Hashcat .hccap files.
Wpa-autopwn - WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
Wpa-bruteforcer - Attacking WPA/WPA encrypted access point without client.
wpacrack - Open-source distributed Wifi-Protected Access (WPA) cracker
WPA_DECRYPTION_MPI - WPA/WPA2 for cluster processing
WPAdiz - Bruteforce - New method for generate dictionaries (Wireless)

WPS

autoreaver - Automatically exported from code.google.com/p/auto-reaver
bully - New implementation of the WPS brute force attack, written in C
greaver - GUI for Reaver, WPS brute force tool
HT-WPS-Breaker - HT-WPS Breaker (High Touch WPS Breaker)
Penetrators-wps - Experimental tool that is capable of attacking multiple WPS-enabled wireless access points in real time.
phpreaver - A command line PHP script which uses the reaver WPS pin cracker to test multiple AP's with multiple WiFi adapters.
Pixiewps-android - Pixiewps is a tool written in C used to bruteforce offline the WPS pin exploiting the low or non-existing entropy of some APs (pixie dust attack).
pixiewps - An offline WPS brute-force utility
pyReaver - WPS attack tool written in Python
pyxiewps_WPShack-Python - Wireless attack tool written in python that uses reaver, pixiewps and aircrack to retrieve the WPS pin of any vulnerable AP in seconds
reaver_reattempt - Change the Mac address of the wifi connection as well as the emulated one created by airmon-ng in an attempt to avoid being locked out of routers for repeated WPS attack attempts
Reaver-ui - Hacky UI to wrap around reaver-wps
Reaver-webui - Simple WebUI to crack wireless networks using reaver
Reaver-wps-fork-t6x - Community forked version which includes various bug fixes, new features and additional attack method (such as the offline Pixie Dust attack)
Reaver-wps - Brute force attack against Wifi Protected Setup
wpscrack - Continuation of wpscrack originally written by Stefan Viehböck
wps - WPS related utilities
WPSIG - Simple tool (written in Python) that does information gathering using WPS information elements.
wpsoffline - PoC for routers vulnerable with WPS and deficiencies in their PRNG state
Wps-scripts - WPS hacking scripts
Wps-Ultimate-Cracker - This script will help help you to get the most of router in morocco by using pixiewps , reaver , aircrack-ng ,wifite

Others

apbleed - Allows you to use existing heartbleed tools to test the RADIUS server
eapmd5pass - An implementation of an offline dictionary attack against the EAP-MD5 protocol. This utility can be used to audit passwords used for EAP-MD5 networks from wireless packet captures, or by manually specifying the challenge, response and associated authentication information.
haircrack - Automated aircrack/reaver/pyrit (An interface for aircrack/reaver/pyrit written in python. The interface itself may never get finished.)
IKECrack - IKE/IPSec authentication crack tool. This tool is designed to bruteforce or dictionary attack the key/password used with Pre-Shared-Key [PSK] IKE authentication.
Wpe-parse - This is a simple parsing script to convert output from hostapd-wpe (which makes John the Ripper-formatted logs) to Hashcat format.

Injection

Aggr-inject - Remote frame injection PoC by exploiting a standard compliant A-MPDU aggregation vulnerability in 802.11n networks.
Aircrack-db - A list of wireless cards tested with the dual-card injection test and in the field
airown - Packet injection tool
airpwn - A generic packet injection tool for 802.11 networks.
Airpwn-ng - New and improved version of airpwn
Iitis-generator - Software for distributed statistical evaluation of IEEE 802.11 wireless networks using Linux mac80211 packet injection facility
libfcap - Library for manipulate 802.11 frame in monitor mode
libmoep - Allows for frame injection on monitor mode devices with per-frame radiotap options such as TX rate / MCS index and RTS/CTS protection
Lorcon-examples - Various examples and patches for LORCON
lorcon - A common injection and control library for wireless packet crafting
lrc - Fast Wi-Fi hijacker in C, based on AirPwn ideas and LORCON
moepdefend - Example monitoring/injection tool based on libmoep
packetinjector - Packet analyzer and injector, written in JavaScript
packetvector - 802.11 management packet injection tool based on packetspammer
pylorcon2 - Pure Python wrapper for the LORCON library.
wifitap - WiFi injection tool through tun/tap device
wiwo - Wiwo is a distributed 802.11 monitoring and injecting system that was designed to be simple and scalable
wperf - 802.11 frame injection/reception tool for Linux mac80211 stack

Rogue AP/Fake AP/ MITM

Aerial - Multi-mode wireless LAN Based on a Software Access point for Kali Linux.
AIRBASE-NG-SSLSTRIP-AIRSTRIP- - AIRBASE-NG + SSLSTRIP = AIRSTRIP
cupid - Patch for hostapd and wpa_supplicant to attempt to exploit heartbleed on EAP-PEAP/TLS/TTLS connections
FakeAP - Create fake AP in Kali with 1 command
fakeaps - Fake Access Points using Atheros wireless cards in Linux
fluxion - Fluxion is the future of MITM WPA attacks
FuzzAP - A python script for obfuscating wireless networks
Hostapd-karma - DigiNinja patches to hostapd for rogue access points.
Hostapd-wpe-extended - Modification and tools for using hostapd for rogue AP attacks impersonating WPA-Enterprise networks to steal user credentials
Hostapd-wpe - Modified hostapd to facilitate AP impersonation attacks
karma - KARMA Attacks Radioed Machines Automatically (KARMA)
mana - Our mana toolkit for wifi rogue AP attacks and MitM
mitmAP - A python program to create a fake AP and sniff data
Mitm-helper-wifi - Make it easy and straight-forward to configure a Ubuntu virtual machine to act as a WiFi access point (AP)
Mitm-rogue-WiFi-AP - MITM Attack Example Code with Rogue Wi-Fi AP
openrtls -
Platform-hostapd - Wireless access point for experimental-platform.
PwnSTAR - PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs
rogue_ap - RogueAP_hostapd.py is a script designed to create a Rogue Access Point
rogueap - Start a rogue access point with no effort, with support for hostapd, airbase, sslstrip, sslsplit, tcpdump builtin
rogueDetect -
RogueSploit - Powerfull Wi-Fi trap
Rspoof - Wifi Automated Fake HotSpot Hijacking with aicrack-ng, airbase, ssl-strip, and dns spoof in Python
Scapy-fakeap - Fake wireless Access Point (AP) implementation using Python and Scapy
snifflab - Scripts to create your own MITM'ing, packet sniffing WiFi access point
startools - To use a RasPi to do an Evil Twin attack and capture 802.1x RADIUS creds
wifi_honey - Setting up four fake access points, each with a different type of encryption, None, WEP, WPA and WPA2 and the seeing which of the four the client connects to
wifiphisher - Automated victim-customized phishing attacks against Wi-Fi clients
WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack
wifisoftap -
Wifi_Trojans - Collection of wireless based bind and reverse connect shells for penetration testers

Sniffing

Airodump-iv - A python implementation of airodump-ng
Airodump-logger - Logging clients with airodump-ng
Airport-sniffer - Very simple Wi-Fi sniffer and dump parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
airtraf - Wireless 802.11 network sniffer and analyzer
darm - Intelligent network sniffer for the masses
datasamalen - Pick up wifi-probe requests
DeSniffer - 802.11 wireless sniffer
dot11sniffer - Sniffs 802.11 traffic and counts the number of active wireless devices in an area
eap_detect - A simple script using the python library Scapy to detect the 802.1X authentication mechanism
handshakeharvest -
liber80211 - 802.11 monitor mode for Android without root
libpcap-80211-c - Sniffs on a RFMON-enabled device for a beacon when compiled, linked and loaded
mac80211-user - Intercept 80211 data frame and put it into userspace
milicone - Investigating interaction with wireless communication traffic
Mr-nosy - Liked to know about everything that was going on
mupe - MUltiPath Estimator - Create statistical analysis of 802.11 Radiotap sniffs
Naive-project -
Native-WiFi-API-Beacon-Sniffer - Tool that dumps beacon frames to a pcap file. Works on Windows Vista or Later with any Wireless Card
oculus - Lightweight tool to collect traces from wifi
ofxSniffer - Wrapper for the libtins library. Libtins can be used to sniff network packages, or to generate network pacakages yourself.
phystats - Gather & plot ieee80211 counters from Linux debugfs
probecap - A quick and dirty utility to capture and store WiFi probes.
probemon - Monitors 802.11 probe packets sent from roaming mobile devices. Developed using PyLorcon2.
probesniffer - A tool for sniffing unencrypted wireless probe requests from devices
rifsniff - Remote Interface Sniffer
ScapyGELFtoGraylog2 - Sniff some 802.11 packages and send the date and MAC with GELF UDP to Graylog2
Scapy-wireless-scanner - Simple wireless scanner built using Scapy Library
SSIDentity - Passive sniffing of 802.11 probe requests, stored in a central database.
TCP-SeqNum - Means to sniff 802.11 traffic and obtain TCP session info using netfiter_queue. Use that data to construct a packet in scappy.
wallofshame - Multi protocol sniffer, created for ChaosConstruction conference HackSpace
Watcher - Canari framework based Maltego transform pack that allows you to perform wireless sniffing within Maltego
WiFi-802.11-Demo-Sniffer - This 802.11 sniffer written in Python provides a useful tool to raise awareness at the amount of data phones release for anyone to read.
Wifi-harvester - For collecting probed SSID name by wireless devices, Access point detail and connected clients.
wifijamMac - Allows you to select one or more nearby wireless networks, thereupon presenting a list of clients which are currently active on the network(s)
Wifimon - Wi-fi 802.11 Beacon Frame sniffer
Wifi-scan - Short python script scans for probe requests from whitelisted WiFi clients
wifispy - Sniff Wifi traffic, log device addresses
Wireless-info - Obtain information about wireless interfaces from MAC80211 stack
Wireless-radar - DF and other tools to explore a 2.4GHz environment
Wireless-Sniffer - A 802.11 wireless sniffer tool (c-based)

Wardriving

MappingWirelessNetworks - Code, data, and (possibly) schematics for recording wireless network data around a city
WAPMap - Parse Kismet .netxml output and then return a CSV file that can be uploaded to Google Maps Engine to map WEP or OPEN networks
warcarrier - An NCURSES-based, all-in-one instrument panel for professional Wardriving
WifiScanAndMap - A Linux Python application to create maps of 802.11 networks

Miscellaneous Attacking Tools

80211scrambler - Small collection of tools in Verilog for working
airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks
airodump_mar_attack - Maroviher attack
AirPirate - Android 802.11 pentesting tool
airspf - AirSpoof/Airpwn ??
airxploit - Wireless discovery and exploitation framework written in Python
AtEar - Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration
BoopSuite - A Suite of Tools written in Python for wireless auditing and security testing.
chap2aleap - Work with asleap+genk
CloudCrackInstaller - Script which installs Crunch, Pyrit and Cowpatty on a running Amazon EC2 Cluster GPU Instance to crack WPA and WPA2 keys.
Crippled - WPA/WPA2 Belkin.XXXX, Belkin_XXXXXX, belkin.xxx and belkin.xxxx router default key generator.
eapeak - Analysis Suite For EAP Enabled Wireless Networks
Easy-creds - Leverages tools for stealing credentials during a pen test
FruityWiFi - Wireless network auditing tool
Hijacker - Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
killosx - Use the Apple CoreText exploit (CVE-2012-3716) and launch an AP to affect all devices within wifi range
LANs.py - Inject code, jam wifi, and spy on wifi users
Null-packet-wifi-promt - Simple script to prompt responses from wireless devices with a known MAC address
PiWAT - Wireless Attack Toolkit
Python-wireless-attacks - Wireless Attacks in Python (Based on blog series)
Secpi - Python based script for wifi pentesting on the RasPi
Sly-fi - Wifi pwnage automation
smoothie - Web based wireless auditory tools
WHAT-PRO - 802.11 Exploitation Tool for use with Kali 2. More tools available than WHAT or WHAT Pi
Wi-door - Wi-Fi Backdoors
WIDSTT - Wireless Intrusion Detection Systems Testing Tool – test your WIDS by performing attacks
WifiAttack -
wifi-default-password - Bash script that tries all the default passwords for a particular wifi access point
wifimonster - Wifi sniffing and hijacking tool
wifuzz - Access Point 802.11 stack fuzzer
wifuzzit - A 802.11 wireless fuzzer
wtf - Wireless Test Framework. Collection of test suites for validating various wifi functionality on various wifi devices.
zarp - Network attack tool centered around the exploitation of local networks

Information Gathering

3WiFi Database - Collect data from Router Scan log reports, search for access points, obtain its geolocation coordinates, and display it on world map
access_points - Scan your WiFi and get access point information and signal quality
Accumulation-rssi - Linux utility for accumulation of WiFi RSSI to text file. Using nl80211, Managed mode. Useful for experiments with WiFi (example, localization)
airscan - Wi-Fi scanning utility for the Nintendo DS
basiciw - Retrieve information such as ESSID or signal quality from wireless cards (Python module)
Get-rssi - Linux utility for getting RSSI WiFi of APs to text file. Using Monitor mode, libpcap.
IndoorPositionr - Indoor positioning using Android to provide the surrounding Access Points signals and guess the position
Isniff-GPS - Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
rssi - Indoor localisation using RSSI. RSSI is received signal strength indicator in IEEE 802.11 beacon packet to announce the presence of WiFi
whoishere - WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
Wifi-Dumper - Dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine
Wifi-monitor - Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or …
WIG - Tools for 802.11 information gathering.

Defence/Detection

badkarma - BadKarma is a simple python script used to detect and disrupt rouge access points/honeypots using the karma attack such as the wifi pineapple
EvilAP_Defender - Protect your Wireless Network from Evil Access Points
huntpineapples - WiFi Pineapple hunter from DC23
KisMac2 - Free, open source wireless stumbling and security tool for Mac OS X
kismetclient - A Python client for the Kismet server protocol
kismet - Wireless network detector, sniffer, and intrusion detection system
kismon - A GUI client for kismet
Openwips-ng - Open source and modular Wireless IPS (Intrusion Prevention System)
Python-kismet - Python threaded listener to Kismet broadcasts
RogueDetection - Rogue Access Point Detection and WIDS
waidps - Wireless Auditing, Intrusion Detection & Prevention System
Wave - 802.11 IDS, visualizer, and analytics platform for the web
Wireless-forensics-framework - Automated Wireless Penetration Testing and Carrying out Wireless Forensics in Python
Wireless-ids - Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets
wmd - Simple solution for the detection and location of Rogue Access Points.
wraith - Wireless Reconnaissance And Intelligent Target Harvesting
wspy - Python tool to create a wireless ids it detects which clients are connected to a network to allow the creation of usage patterns of a netowrk by the clients

Libraries/General Purpose Tools

80211p_raw - Raw socket utilities for 802.11p transmission
80211_raw - Sender and receiver for WiFi (IEEE802.11) network with raw sockets
banjax - Library for low-level programming of IEEE 802.11 wireless network interfaces on the GNU/Linux operating system
dot11er - Some tools for playing with IEEE802.11
Frame-utils.js - A collection of utilities for processing streams of 80211 frames and radiotap headers.
Gopacket-80211 - Extra gopacket layers for Radiotap and 802.11 (has been integrated in Gopacket)
itamae - 802.11 radiotap and MPDU parser
Libairpcap-nl - Implementation of AirPcap library, targetting the NL80211 protocol.
libuwifi - C library for parsing, generating and analyzing Wifi (WLAN 802.11) frames in userspace and related functions
packetparser - IEEE 802.11 packetparser
pcap2xml - Convert 802.11 Packet Traces to XML and SQLITE Format
PCS - Set of Python modules and objects that make building network protocol code easier for the protocol developer
Probr-core - The core-component for generic WiFi tracking: remote device management, packet capturing, packet storage
py80211 - Suite of libraries for parsing 802.11 packets as well as managing wireless cards and working with 802.11 information
PyRIC - PyRIC (is a Linux only) library providing wireless developers and pentesters the ability to identify, enumerate and manipulate their system's wireless cards programmatically in Python.
python3-wifi - Python WiFi is a Python module that provides read and write access to a wireless network card's capabilities using the Linux Wireless Extensions.
Python-radiotap - Tiny lib for parsing radiotap/802.11 headers in python
python-wifi - Python WiFi is a Python module that provides read and write access to a wireless network card's capabilities using the Linux Wireless Extensions.
Qca-swiss-army-knife - Hosts a set of utilities that we use to debug / help with our driver development
Radioparse - A WiFi protocol parser that can be used with radiotap packets and node-pcap
Scapy - Python-based interactive packet manipulation program & library
Wifi-scan - A nl80211 C/C++ library for monitoring signal strength of WiFi networks
wifi-scripts - Misc scripts and tools for WiFi
wireless - Dead simple, cross-platform Python library to connect to wireless networks

Visualization

airview - A python web application compliment to py80211 which allows you to visualize the airwaves around you with your web browser.
speccy - Visualization tool for ath spectral scan
Wifi-contour - A contour mapping program of wireless 802.11 signal strength
Wifi-heatmap - Generate heatmaps of wifi coverage with Python
wifiscanvisualizer - Wi-Fi Scan Visualizer by Pentester Academy
Wifi-Signal-Plotter - A Python script for graphing and comparing the WiFi signal strengths between WiFi adaptors in Windows or Linux.
wifivis - Visualize some mit wifi access point data
wipi - Visualize the WiFi packages that are floating around us all the time.
Wlan-stats - Tool chain using tshark to pull data from pcaps, further process them in python, and graph the output in R.

Localisation

Find-lf - Track the location of every Wi-Fi device (📱) in your house using Raspberry Pis and FIND
geowifi - This is a Geographic WiFi Positioning program written under the Linux.(it is also a WiFi Positioning API written for C language
GrapplingHook - Open Source 802.11 Direction Finder
gtaiad - Indoor Wi-Fi navigation prototype using triangulation
Openwifimap-api - OpenWiFiMap database and its api
Python Wi-Fi Positioning System - Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
pyWPSLocation - Using Python for localisation using Google Geolocation API (GGAPI) and WiFi Positioning System (WPS)
whereami - Uses WiFi signals 📶 and machine learning to predict where you are
Wifi-geolocation - Get your latitude/longitude via wifi access points
Wifi-localization - Wifi Localization using a map and reference
Wifi-locator - Determines physical location of station judging from 802.11 beacons' BSSID/Signal/Noise/Quality information.
Wi-finder - Wi-Fi hotspot finder
Wlan-pos - Location fingerprinting and triangulation engine for WLAN (IEEE802.11,aka WiFi) environment.

Configuration/setup

802.11p-iw - Wireless configuration tool (UNIX)
agentapd - Agent of WiFi hardware
AirLibre - Python API For UBNT AirOS Devices
Atheros-AR9271 - Kernel Extension for AR9271 chipset (Wireless USB Card)
AtherosROMKit - Atheros ROM modding and recovery kit
cac - A Centralized Adaptive Control algorithm that optimises the performance of IEEE 802.11 WLANs
captiveportal - A captive portal that can be used on most linux distributions.
cloudap - AP Manager in Cloud,AP Hardware on your side
connme - Client for Hostapd
crda - Central Regulatory Domain Agent
create_ap - This script creates a NATed or Bridged WiFi Access Point.
disable-802.11b-snmp - A tool to set 802.11 protocols on thousands of Access Points with SNMP.
Do-wifi - Command line tool for scanning and connecting to wifi networks in Linux.
full_permissive_unlock_ath - This kernel patch enable all 2GHZ & 5GHZ channels (without restriction) for ath9k & ath5k forced to use buildin world regulatory
FWAP - Minimal, very lightweight access point implementation
hostapd - Python script to make using and configuring hostapd easier
hostapd - User space daemon for access point and authentication servers
Hostapd-mana - Hostapd-mana for the 6.th gen. Wifi Pineapple, and OpenWRT
hostapd-mana-openwrt - Hostapd-mana - build-files, and installation-files for OpenWRT
Hostapd-with-WebID - WebID integrated hostapd
Hostapd-wpe-openwrt - Hostapd-wpe (Wireless Pwnage Edition) packages for OpenWRT Barrier Breaker 14.07
hotspotd - Simple daemon to create a wifi hotspot on Linux
IEEE802.11-complete - IEEE802.11 protocol, including PHY, MAC, and rate adaptation approaches upon GNURadio/USRP software-defined radio platform
Linux-wifi-tools - A set of Linux command line tools for managing and troubleshooting wifi
monmob - Set of tools to provide monitor mode and raw frame injection for devices using broadcom chipsets bcm4325, bcm4329 and bcm4330
nexmon - The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
PyWiWi - Python Windows Wifi
reghack - Replaces the regulatory domain rules in the driver binaries with less restrictive ones
RegMon - RegMon is a Atheros WiFi card register monitoring tool for Linux OpenWrt
remoteapd - Remote NL80211-Extent driver for Hostapd 2.0
resfi - Framework supporting creation of RRM functionality in residential WiFi deployments
rollmac - Automated WiFi limit evasion
RT73-USB-Wireless- - Patched version of RT73USBWireless for Yosemite
RTL8188-hostapd - Hostapd for Realtek RTL8188
Wifi-ap - Library wrapper around hostapd and dnsmasq and their respective configuration files that allows for programmatically creating access points in Debian-based Linux environments
Wifi-frequency-hacker - A modified frequency regulatory domain configuration that doesn't limit you.
Wifi-pentesting - Wifi Penetration Testing of Home Network
WirelessConfig - A 802.1x Python wireless configuration tool with Cocoa wrappers

Monitoring

como - CoMo is a passive monitoring system that supports arbitrary real time traffic queries
horst - Lightweight IEEE802.11 wireless LAN analyzer with a text interface. Its basic function is similar to tcpdump, Wireshark or Kismet, but it's much smaller and shows different, aggregated information which is not easily available from other tools.
scapybase - 802.11 monitor AP based on scapy
Scapy-survey - 802.11 signal strength logger using Scapy
sigmon - Modular WiFi/RF Monitoring and Analysis Implementation
Uniband-installer - Wireless monitoring framework to help using kismet dumpcap and horst (installation files)
Wifi-linux - Simple python script to monitor access point signal strength.
Wifi-monitor -
Wifi-monitor - Python, py_libpcap, handover
WiPy - Sends the WiFi signal strength from multiple clients to a central server. Built for Arch Linux ARM running on Raspberry pi 2
WLAN-Monitoring - Monitor our vicinity to monitor wireless devices and traffic
wmon - A Wireless Network Monitor with advanced measurement capabilities.

Miscellaneous/not sorted :)

80211ping - Linux command-line tool to ping 802.11 stations (e.g. any WiFi device)
acs - Automatic Channel Selection utility
Airfree-wt - Wireless Security Toolkit
Ap-notify - An example of using the Linux kernel netlink protocol, specifically nl80211 via libnl/libnl-genl, to catch stations associating/disassociating with an 802.11 AP
ath9k-4w-patch - Resources for increasing power of ath9k devices, such as TP-link WN722N
Ath9k-nav - Linux kernel module to poll the NAV register on Atheros 9k series WLAN cards.
bunny - Bunny is a wireless. meshing, darknet that uses 802.11 to hide its communications
captiv8 - Captive Portal Evasion Tool
Connect-wifi - Dmenu based application for Linux that connects to the strongest open wireless network
Cover-channel - Userland code for creating a covert channel in wireless broadcast medium
disassociatedWiFi - DisassociatedWiFi creates a virtual network interface (using the Linux TUN/TAP device driver) which sends and receives ethernet frames over an 802.11 (WiFi) interface, that has been placed in monitor mode, and supports packet injection.
FFT_eval - Aid open source spectrum analyzer development for Qualcomm/Atheros AR92xx and AR93xx based chipsets
Frame-randomizer - Capture and randomize 802.11 Association Request frames
FreeWifi - How to get free wifi
Haiku-wifi - Turn your wireless router's extra radios into a public billboard!
kismet2earth - Set of utilities that convert from Kismet logs to Google Earth .kml format
kismeth2earth - Parsing Kismet logs to get collected data from wireless networks and generate a Google Earth map
Kismet-to-KML - Converts kismet gps log files into kml files
Mac-analyzer - Collects cross layer stats from ath9k
Madwifi-be - Modified version of the madwifi driver allowing update of WME parameters for the BE access category
Madwifi-hopping - Modified version of the Madwifi WLAN driver, that employs power-hopping for packet transmission
make-a-new-mac80211-to-wirelessAP -
netxml2kml - Converts netxml files from Kismet Newcore into KML or KMZ files for Google Earth
Osx-wificleaner - Cleans out open wireless connections from OSX machine
Osx-wifi-scan - Hacky wifi signal scanner for osx
parsecaps - Parse wpa.cap generated from besside-ng and create individual .caps for each network with a captured handshake.
pcap80211analyzer - Not-so-smart 802.11 frame pcapng analyzer
Probr-analysis - Analysis components for the probr WiFi tracking system
py_DD_WRT_Remote_Mac_Adder - Python Script to remotely update mac filterlists of DD-WRT routers with wl or atheros wifi drivers
pykismetkml - Python script designed to export .gps and .xml files (in < Kismet RC1) to .kml files and .netxml files to .kml files in => Kismet RC2
pykismetstats - Pykismetstats parses NetXML file generated by kismet and write statistics to CSV file.
PyScapy - This is a package of using scapy.
react80211 - Solution for mitigating the performance impairments of CSMA/CA protocols in multi-hop topologies based on the dynamic adaptation of the contention process experienced by nodes in a wireless network
Rollmac - Automated WiFi limit evasion
Scapy-rssi - Example of how to read RSSI values from wifi packaged using Scapy
setbssid - Modify the MAC80211 layer in Linux Kernel
skybluetero - 802.11b/g packet airtime consumption analyzer GUI for Linux
sniffmypackets - Canari package for pcap file analysis within Maltego
Snoopy-ng - Snoopy v2.0 - modular digital terrestrial tracking framework
spectrum.py -
VX - It might be fun to play tricks on somebody trying to crack your WEP protected router
Wbc-utils - Couple of hacked together utils for use with the wifibroadcast system by befinitiv
wi5-aggregation - Implementing and testing 802.11 frame aggregation (A-MPDU)
WiFi-Analyzer - Analyzer 802.11 networks - android app [to refactor]
wifi_based_population_estimator - This is a piece of glueware that sticks up different components from hardware detection to real-time web display.
Wifi-beeper - Linux command-line tool to make WLAN frames audible
wifidec - Repository for scriptz playing around with decoding elements of the Wifi stack (mainly Radiotap and 802.11 frames)
wifi_decode - Wireless Key Dumper for Windows
WifiDirectLinux - Use p2p with Wifi Direct on Linux
Wifidog-gateway - Repository for the wifidog-gateway captive portal designed for embedded systems
Wifi-dump-analysis - Processing wireless traces from binary files written and read in custom format.
wifi_dump_parser-v3 - Is the modified parser for the new data set collected using Wifi-dump
wifi_dump-tmpfs - Dumps wifi data
wifihisicipy - Temporarily runs a wifi hotspot and a 'captive portal' to let you choose a permanent wireless network to connect to.
wifi - [unmaintained] WiFi tools for linux http://pypi.python.org/pypi/wifi
wifirxpower - Linux-based WiFi RX Power Grapher
wifiScanMap - An other wifi mapping tool
WiFi-scheduling - This project evaluates the efficiency and overhead of wireless network scheduling
wifi_statistics - Linux kernel module to gather wifi statistics from peer and non-peer STAs
wifitracker - Raspberry Pi Wifi Tracking API
WifiTrafficAnalyzer -
wifresti - Find your wireless network password in Windows , Linux and Mac OS
wime - Wifi password recover tool for Windows, Linux, Mac.
win32wifi - Python Windows Wifi
wireless_half-mini - MacOS Airport Half Mini (WiFi and Bluetooth)
WIRELESSINFO - Extract Important Data From Cisco Wireless Controllers
wireless_RSSI -
Wireless-tools - Wireless tools for Node.js
wit - Command-line wifi manager for linux
wobs - Detects near-by devices such as cell phones, tablets, and laptops. Does this through 802.11, Bluetooth, cell phone protocols, etc..

0x90/wifi-arsenal

Join GitHub today

Clone with HTTPS

Downloading...

Launching GitHub Desktop...

Launching GitHub Desktop...

Launching Xcode...

Launching Visual Studio...

README.md

WiFi Arsenal

Table of Contents

General WiFi Information

Noteworthy Tools of Different Categories

Attack/PenTesting

Denial of Service

Encryption Attack

WEP/WPA/WPA2

WPS

Others

Injection

Rogue AP/Fake AP/ MITM

Sniffing

Wardriving

Miscellaneous Attacking Tools

Information Gathering

Defence/Detection

Libraries/General Purpose Tools

Visualization

Localisation

Configuration/setup

Monitoring

Miscellaneous/not sorted :)