Wiflux v1.0.5

[1.0.5] — 2026-07-10

Highlights

• Dependency check screen — post-splash panel verifies tools + rockyou; auto-unpacks rockyou.txt.gz when needed; Space continues, Ctrl+C quits cleanly
• Hashcat GPU/CPU control — auto-prefer GPU when available; --gpu, --cpu-only, --hashcat-devices, --hashcat-backend, --hashcat-workload
• Durable crack checkpoints — hashcat progress survives restart; resume prompt when re-entering crack
• Scan pause — Space freezes live scan for copy; resume with Space
• GHz column on the scan table (between BSSID and CH)
• Major reliability fixes — WPA3 password mode 22000, PMKID/EAPOL typing, multi-channel -c, 5+6 GHz hop, band exclusivity, and many more

Credits

Thanks to Murlocdouche for suggesting the scan-table GHz column and for identifying that hashcat could not be steered to the GPU for cracking.

Added

• Dependency check UI with rockyou detection/unpack
• Deauth tools on dependency list: mdk4, bettercap, mdk3
• Scan Space pause/resume for text selection
• Hashcat crack checkpoints under wiflux-data/crack_checkpoints/
• --gpu / --cpu-only / --hashcat-backend / --hashcat-devices / --hashcat-workload / --no-hashcat-force
• Scan table GHz column
• --random-mac implementation (ip link)
• Channel ch prefix support (ch1,ch6, ch36-ch40)

Changed

• --5ghz / --6ghz alone no longer force 2.4 GHz (add -2 to combine)
• -p / --pillage no longer implies --auto (use --auto for unattended)
• --min-power accepts dBm (--min-power=-70) or 0–100 scale
• Crack ladder no longer double-runs the main dictionary when ladder is enabled
• Transition APs parse as WPA2 + transition flag so --wpa still lists them
• Decloak only retunes radio on fixed-channel scans; band-aware when it does

Fixes

• Pure WPA3 no longer uses hashcat 22001 (PMK mode) for password wordlists
• Hash field 01/02 correctly treated as PMKID / EAPOL (not WPA2/WPA3)
• Keep multiple hash lines per BSSID; crack attributed to hash BSSID when different
• Airodump PWR -1 no longer ranks as 99
• Multi-channel lists and 5+6 GHz combined hops applied correctly
• /dev/tty opens with O_RDWR (prompts + Space listener)
• Restart after apt install no longer dies on namespace package shadow (python -m wiflux from wrong cwd)
• Space skip hint restored after handshake/PMKID prompts
• Hashcat ProcessPool unregister + wall-clock stage timeout
• process.run soft-handles timeouts; more wordlist search paths; WEP -b; case-normalized cracked BSSIDs

Install

curl -LO https://github.com/Leadrogue/Wiflux/releases/download/v1.0.5/wiflux-1.0.5-linux-installer.tar.gz
tar -xzf wiflux-1.0.5-linux-installer.tar.gz
cd wiflux-1.0.5-linux-installer
./install.sh

---

Full Changelog: v1.0.4...v1.0.5

v1.0.4

Full Changelog: v1.0.3...v1.0.4

v1.0.3

Highlights

• Attack enhancements — Algorithmic WPS PIN pre-pass, offline pixiewps from scan caps, extended PMKID capture with band rotation, client band-stalk listen, and multi-stage crack ladder (vendor defaults → hashcat rules → full dictionary)
• WPA2/WPA3 transition mode — Prefer WPA2 handshake/PMKID capture and hashcat mode 22000 on mixed networks (--no-transition-downgrade to disable)
• 6 GHz scanning — --6ghz for Wi-Fi 6E targets (with supported adapters)
• PMKID success screen — Cyan confirmation panel and banner before smart wordlist (matches handshake validation flow)
• Improved --help — Grouped sections, colored headings, scan/scan-filters split; 89 automated tests

Added

• Adaptive deauth engine — Tunes deauth burst, interval, and listen window from capture-health feedback. --no-adaptive-deauth to disable.
• Multi-backend deauth — Rotate mdk4, aireplay-ng, bettercap, mdk3 (--deauth-tools, --deauth-combo, --no-deauth-rotate)
• Algorithmic WPS PIN — MAC/vendor-derived PIN candidates before live reaver (--no-algorithmic-wps)
• Offline pixiewps — Parse WPS from scan caps before live attacks (--no-offline-pixie; needs pixiewps, tshark)
• PMKID extended capture — Passive-first timeout ratio and dual-band sibling rotation (--pmkid-passive-ratio, --no-pmkid-band-rotate)
• Client band-stalk — Post-deauth listen on sibling bands for roaming clients (--no-client-band-stalk)
• Crack ladder — Vendor default passwords and hashcat rules before rockyou (--no-crack-ladder)
• Handshake validation UI — Full hcxpcapngtool validation with on-screen confirm before cracking
• --new-hs — Force fresh handshake capture; requires deauth round before accepting passive candidate
• --no-ignore-cracked — Re-show and re-attack networks already in the crack database
• CLI help overhaul — Sectioned, colorized -h output

Fixes

• WPS offline path — capfile initialized correctly on offline pixie success
• Help output — Rich number highlighter disabled so channel/default values are not bolded
• Band flags — Help shows --2ghz / --5ghz long form (short -2/-5 still work)

Install

curl -LO https://github.com/Leadrogue/Wiflux/releases/download/v1.0.3/wiflux-1.0.3-linux-installer.tar.gz
tar -xzf wiflux-1.0.3-linux-installer.tar.gz
cd wiflux-1.0.3-linux-installer
./install.sh

See CHANGELOG.md for full details.

Full Changelog: v1.0.2...v1.0.3

v1.0.2

Fixes

• Installer banner — install.sh now detects the bundled wheel version instead of printing a hardcoded 1.0.0
• sudo PATH on Kali/Debian — installer post-install hints and docs explain that sudo wiflux may fail because /usr/local/bin is not in sudo's PATH

Install

curl -LO https://github.com/Leadrogue/Wiflux/releases/download/v1.0.2/wiflux-1.0.2-linux-installer.tar.gz
tar -xzf wiflux-1.0.2-linux-installer.tar.gz
cd wiflux-1.0.2-linux-installer
./install.sh

Run (Kali/Debian)

sudo env PATH="/usr/local/bin:$PATH" wiflux --kill --restore

Full changelog: CHANGELOG.md

Full Changelog: v1.0.1...v1.0.2

Full Changelog: v1.0.1...v1.0.2

Wiflux v1.0.1

Wiflux v1.0.1

Bug-fix and feature release — smart wordlists, capture health, better handshake capture, and probing client detection.

Downloads

File	Description
wiflux-1.0.1-linux-installer.tar.gz	Recommended — wheel + install.sh + docs
wiflux-1.0.1-py3-none-any.whl	Pip installable wheel
wiflux-1.0.1.tar.gz	Source distribution
wiflux-1.0.1-checksums.sha256	SHA256 checksums

Quick install

tar -xzf wiflux-1.0.1-linux-installer.tar.gz
cd wiflux-1.0.1-linux-installer
./install.sh
sudo wiflux --kill --restore

What's new

ESSID-smart wordlist

Targeted passwords from the network name and router vendor before rockyou:

1. After capture, Wiflux shows 8 example candidates
2. Press Y to use the smart list, N for rockyou only
3. Enter word count (default 1000, max 100000) or press Enter
4. Hashcat pass 1/2 — smart list; pass 2/2 — full rockyou if needed

Example for Workshop on a TP-Link AP:

Workshop
workshop
Workshop123
Workshop2024
Workshop!
myWorkshop
wifiWorkshop
tplink123

sudo wiflux --yes-smart-wordlist                      # auto-accept
sudo wiflux --yes-smart-wordlist --smart-wordlist-size 5000
sudo wiflux --no-smart-wordlist                       # rockyou only

Other improvements

• Live capture health panel (EAPOL / deauth / reconnect)
• Reactive deauth handshake capture (mdk4/aireplay per client)
• Probing clients appear in scan CL column
• Fixes for prompt hangs, Y/N registration, PMKID→handshake interface restore

Main bug fixes (vs 1.0.0)

• Smart wordlist Y/N prompt unreadable / wrong decline detection
• Capture health prompt hidden behind live UI (handshake stuck at "Preparing...")
• Space-skip listener stealing keypresses during prompts
• PMKID leaving interface in bad state for handshake
• Config file values cleared when CLI flags omitted
• Activity log missing "password not found" before rockyou fallback

Full changelog: CHANGELOG.md

For authorized security testing only.

Wiflux v1.0.0

Wiflux v1.0.0

Initial public release — modern wireless security auditor with live Rich UI.

Downloads

File	Description
wiflux-1.0.0-linux-installer.tar.gz	Recommended — wheel + install.sh + docs
wiflux-1.0.0-py3-none-any.whl	Pip installable wheel
wiflux-1.0.0.tar.gz	Source distribution
wiflux-1.0.0-checksums.sha256	SHA256 checksums

Quick install

tar -xzf wiflux-1.0.0-linux-installer.tar.gz
cd wiflux-1.0.0-linux-installer
./install.sh
sudo wiflux --kill --restore

Requirements

• Linux (Kali, Parrot, etc.)
• Python 3.10+
• Wi-Fi adapter with monitor mode
• aircrack-ng suite (optional tools: reaver, hcxdumptool, hashcat)

For authorized security testing only.