Wi-Fi is available almost everywhere, but many people believe that their Wi-Fi passwords are secure. They think that having a strong password can protect them from hacker attacks and that brute force (dictionary attacks) is the only way to crack them. However, in reality, there is a simpler way to obtain Wi-Fi passwords. Taking Airgeddon as an example, we launched a deauthentication attack on the original Wi-Fi network, causing it to go offline. The client devices lost connection to the legitimate network and were unable to reconnect. We set up a rogue access point with the same name as the original network, taking advantage of the clients' trust in the familiar SSID and prompting them to enter the Wi-Fi password. Unbeknownst to them, the password was secretly captured by our malicious rogue access point, allowing us unauthorized access to their credentials.
Next, let's introduce some other Wi-Fi attack tools besides brute force cracking:
- Fluxion:
Fluxion is a powerful tool for social engineering attack frameworks, such as phishing, creating fake Wi-Fi access points, interfering with real Wi-Fi interfaces, and capturing handshakes. Fluxion is mainly used for Wi-Fi security audits and Wi-Fi cracking.
Address: https://github.com/FluxionNetwork/fluxion
- airgeddon
This is a multi-purpose bash script for auditing wireless networks on Linux systems. The most powerful Wi-Fi cracking tool to crack Wi-Fi!
Address: https://github.com/v1s1t0r1sh3r3/airgeddon
- WiFiphisher:
Wifiphisher is a tool where you can perform Wi-Fi phishing attacks. With Wifiphisher, penetration testers can easily achieve man-in-the-middle positions against wireless clients by executing targeted Wi-Fi association attacks.
Address: https://github.com/wifiphisher/wifiphisher
- Wifipumpkin3:
This tool has the most powerful Wi-Fi rogue access point attack framework, written in Python, allowing security researchers, red teamers, and reverse engineers to set up wireless networks for man-in-the-middle attacks.
Address: https://github.com/P0cL4bs/wifipumpkin3
- Aircrack-NG:
Aircrack-ng is a complete suite of tools to assess the security of Wi-Fi networks.
It focuses on different areas of Wi-Fi security:
Monitoring: Capturing packets and exporting them to text files for further processing by third-party tools.
Attacking: Replaying attacks, deauthentication, fake access points, etc. through packet injection.
Testing: Checking the functionality of Wi-Fi cards and drivers (capturing and injecting).
Cracking: WEP and WPA PSK (WPA 1 and 2).
Address: https://github.com/aircrack-ng/aircrack-ng
- Bettercap
Bettercap is the most powerful, multi-purpose network hacker, MITM wireless penetration testing, Swiss Army knife tool written in Go.
It aims to provide an easy-to-use integrated solution for security researchers, red teamers, and reverse engineers, with all the features needed to perform reconnaissance and attacks on Wi-Fi networks, low-energy Bluetooth devices, wireless HID devices, and IPv4/IPv6 networks that may be required.
Address: https://github.com/bettercap/bettercap
- Fern-Wifi-Cracker:
Fern-Wifi-Cracker is a wireless security auditing and attack software program written in Python programming language and Python Qt GUI library. The program is capable of cracking and recovering WEP/WPA/WPS keys and running other network-based attacks on wireless or Ethernet-based networks.
Address: https://github.com/savio-code/fern-wifi-cracker
- Wifite:
Wifite is an automated Wi-Fi security auditing tool that uses aircrack-ng, pyrit, reaver, and tshark tools to perform audits.
The tool is customizable and can be run without supervision with just a few parameters.
Address: https://github.com/derv82/wifite2
- Kismet:
Kismet is an open-source sniffer, WIDS, wardriver, and packet capture tool for Wi-Fi, Bluetooth, BTLE, wireless thermometers, drones, power meters, Zigbee, etc.
Address: https://github.com/kismetwireless/kismet
- Reaver:
Reaver implements a brute force attack against Wi-Fi Protected Setup (WPS) registrar PINs to recover WPA/WPA2 passwords.
Address: https://github.com/t6x/reaver-wps-fork-t6x
- Pixiewps:
Pixiewps is a tool written in C language to brute force WPS PINs using low entropy or no entropy implemented by certain software, also known as "pixie-dust attack" discovered by Dominique Bongard in the summer of 2014. For educational purposes only.
Address: https://github.com/wiire-a/pixiewps
- Cowpatty:
If you are auditing a WPA-PSK or WPA2-PSK network, you can use this tool to identify weak passwords used to generate the PMK. Provide a libpcap capture file that includes the 4-way handshake, a dictionary file of password phrases to guess, and the SSID of the network.
Address: https://github.com/joswr1ght/cowpatty
- Wireshark:
Wireshark is the world's most popular network packet analyzer used by security researchers, network penetration testers, and hackers.
Wireshark is a network traffic analyzer or "sniffer" available for Linux, macOS, BSD, and other Unix and Unix-like operating systems, as well as Windows. It uses a graphical user interface library, as well as libpcap and npcap as packet capture and filtering libraries.
Address: https://github.com/wireshark/wireshark
- Sparrow-wifi:
Sparrow-wifi is a next-generation 2.4 GHz and 5 GHz Wi-Fi spectrum awareness tool built from scratch. At its most basic, it provides a more comprehensive GUI-based alternative to tools like inSSIDer and linssid specifically for running on Linux. In its most complete use case, sparrow-wifi integrates Wi-Fi, software-defined radio (hackrf), advanced Bluetooth tools (traditional and Ubertooth), traditional GPS (via gpsd), and drone/mobile station GPS via mavlink into one solution.
Address: https://github.com/ghostop14/sparrow-wifi
- Real-time Wifislax Operating System:
Wifislax is a Slackware-based live CD that includes various security and forensic tools. The distribution is well-known for integrating various unofficial network drivers into the Linux kernel, providing out-of-the-box support for a wide range of wired and wireless network cards.
The operating system is in Spanish, but don't worry, you can change it to English.
Address: https://www.wifislax.com/