Modern wireless security auditor with a live terminal UI, smart attack orchestration, and built-in dependency management.

██╗    ██╗██╗███████╗██╗     ██╗   ██╗██╗  ██╗
██║    ██║██║██╔════╝██║     ██║   ██║╚██╗██╔╝
██║ █╗ ██║██║█████╗  ██║     ██║   ██║ ╚███╔╝
██║███╗██║██║██╔══╝  ██║     ██║   ██║ ██╔██╗
╚███╔███╔╝██║██║     ███████╗╚██████╔╝██╔╝ ██╗
 ╚══╝╚══╝ ╚═╝╚═╝     ╚══════╝ ╚═════╝ ╚═╝  ╚═╝

For authorized security testing only. Only use Wiflux on networks you own or have explicit permission to audit.

• Live Rich UI — Real-time scan table with ESSID, BSSID, GHz, channel, encryption, WPS, clients, and priority scoring
• Matrix welcome + dependency check — Splash, then tools/rockyou verification with optional apt install and auto-unpack of rockyou.txt.gz
• Scan pause — Space freezes the live table for copy; Space resumes
• ESSID-smart wordlist — Targeted candidates from network name + vendor before rockyou (preview, up to 100k)
• Crack ladder — ESSID-smart → vendor defaults → full dictionary → hashcat rules (fastest-to-longest); Space skips a pass (--no-crack-ladder)
• Hashcat GPU/CPU control — Auto-prefer GPU when available; --gpu, --cpu-only, --hashcat-devices
• Durable crack checkpoints — Resume hashcat after restart under wiflux-data/crack_checkpoints/
• Adaptive deauth — Handshake capture tunes burst/listen timing from live capture health (--no-adaptive-deauth)
• Multi-backend deauth — mdk4, aireplay-ng, bettercap, mdk3 (--deauth-tools, --deauth-combo)
• PMKID enhancements — Passive-first capture, dual-band rotation, success screen before cracking
• WPS enhancements — Algorithmic PIN pre-pass, offline pixiewps from scan caps
• WPA2/WPA3 transition — Prefer WPA2 capture/crack on mixed-mode APs (--no-transition-downgrade)
• 2.4 / 5 / 6 GHz scanning — Exclusive high-band with --5ghz / --6ghz; add -2 to combine
• Client band-stalk — Post-deauth listen on sibling bands for roaming stations
• Handshake validation — Full capture check with on-screen confirm before hashcat
• Hidden SSID decloak — Deauth probe to reveal cloaked ESSIDs during scan
• SQLite results store — Track cracked networks; skip by default (--no-ignore-cracked to re-attack)
• 116 automated tests — No live radio required for CI

Download v1.0.5:

curl -LO https://github.com/Leadrogue/Wiflux/releases/download/v1.0.5/wiflux-1.0.5-linux-installer.tar.gz
tar -xzf wiflux-1.0.5-linux-installer.tar.gz
cd wiflux-1.0.5-linux-installer
./install.sh

Or install directly with pip:

pip install https://github.com/Leadrogue/Wiflux/releases/download/v1.0.5/wiflux-1.0.5-py3-none-any.whl --break-system-packages

git clone https://github.com/Leadrogue/Wiflux.git
cd Wiflux
pip install -e . --break-system-packages

On Kali/Debian, sudo may not include /usr/local/bin in PATH:

sudo env PATH="/usr/local/bin:$PATH" wiflux --kill --restore   # Interactive audit
sudo env PATH="/usr/local/bin:$PATH" wiflux --auto -p 30       # Auto-attack after 30s scan

See INSTALL.md, docs/RELEASE.md, and docs/TUTORIAL.md.

wiflux --help                    # Grouped, colorized CLI reference

# 5 GHz + auto-attack
sudo wiflux --5ghz --auto -p 45

# 6 GHz scan (Wi-Fi 6E adapter required)
sudo wiflux --6ghz --auto -c 37,53

# Target one network; re-attack even if already cracked
sudo wiflux --no-ignore-cracked -b AA:BB:CC:DD:EE:FF

# Fresh handshake; ignore saved caps in hs/
sudo wiflux --new-hs -b AA:BB:CC:DD:EE:FF

# PMKID only
sudo wiflux --pmkid --auto -p 60

# Capture only
sudo wiflux --skip-crack --auto -p 30

# Utilities (no sudo)
wiflux --cracked
wiflux --check capture.cap
wiflux --export results.json

cd Wiflux
pip install -e ".[dev]" --break-system-packages
python -m pytest tests/test_wiflux.py -q

• Linux (Kali, Parrot, etc.)
• Python 3.10+
• Wi-Fi adapter with monitor mode + injection
• aircrack-ng (required)
• reaver, hcxdumptool, hashcat, pixiewps, tshark (optional, recommended)

Thanks to Murlocdouche for:

• Suggesting the scan-table GHz column (band at a glance between BSSID and CH)
• Identifying that hashcat could not be steered to the GPU for cracking (now fixed with auto GPU preference and --gpu / --cpu-only / --hashcat-devices)

This tool is provided for educational and authorized penetration testing purposes only. Unauthorized access to computer networks is illegal. The authors and contributors are not responsible for misuse of this software.

MIT License — Copyright (c) 2026 Wiflux Contributors