Skip to content
hostapd-mana for the gen. Wifi Pineapple, and OpenWRT
Branch: master
Clone or download
Latest commit c4c8ae5 Apr 17, 2019

hostapd mana

by Dominic White (singe) & Ian de Villiers @ sensepost (

AWS CodeBuild Status


A access point (evilAP) first presented at Defcon 22.

More specifically, it contains the improvements to KARMA attacks we implemented into hostapd, as well as the ability to rogue EAP access points.

This will track the hostapd releases, although at a somewhat lagged pace depending on time. At the time of publication this was up to date with the latest hostapd-2.3 branch.


It contains:

  • hostapd-mana - modified hostapd that implements our new karma attacks
  • crackapd - a tool for offloading the cracking of EAP creds to an external tool and re-adding them to the hostapd EAP config (auto crack 'n add)


The build instructions are exactly the same as hostapd's, and can be found in hostapd/README



You'll need a wifi card that supports master mode. You can check whether it does by running: iw list You want to see "AP" in the output. Something like:

Supported interface modes:
         * IBSS
         * managed
         * AP
         * AP/VLAN
         * monitor
         * mesh point

More information at

Three cards that have been confirmed to work well, in order of preference are:

Note, the silver Alfa does not support master mode and will not work.


You'll need to generate a valid configuration file. Some example of these are included in the MANA toolkit at


The patches included in hostapd-mana by SensePost are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License ( Permissions beyond the scope of this license may be available at us/. hostapd's code retains it's original license available in COPYING.

You can’t perform that action at this time.