{"id":13398263,"url":"https://github.com/wifiphisher/wifiphisher","last_synced_at":"2025-05-12T05:21:45.288Z","repository":{"id":21190863,"uuid":"24499174","full_name":"wifiphisher/wifiphisher","owner":"wifiphisher","description":"The Rogue Access Point Framework","archived":false,"fork":false,"pushed_at":"2025-02-04T21:04:05.000Z","size":12890,"stargazers_count":13812,"open_issues_count":335,"forks_count":2647,"subscribers_count":695,"default_branch":"master","last_synced_at":"2025-05-12T02:39:59.268Z","etag":null,"topics":["access-point","attack","malware","phishing","python","redteaming","rogue","security","wifi","wifiphisher"],"latest_commit_sha":null,"homepage":"https://wifiphisher.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wifiphisher.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG","contributing":null,"funding":"FUNDING.yml","license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"wifiphisher"}},"created_at":"2014-09-26T12:47:28.000Z","updated_at":"2025-05-11T15:38:14.000Z","dependencies_parsed_at":"2023-02-13T23:30:54.729Z","dependency_job_id":"24c3962c-bb61-4f6a-8839-bd9c93294005","html_url":"https://github.com/wifiphisher/wifiphisher","commit_stats":{"total_commits":601,"total_committers":51,"mean_commits":"11.784313725490197","dds":"0.49750415973377704","last_synced_commit":"bc4a077e090d59b065cf2c65b0ec1890b9eb4698"},"previous_names":["sophron/wifiphisher"],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wifiphisher%2Fwifiphisher","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wifiphisher%2Fwifiphisher/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wifiphisher%2Fwifiphisher/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wifiphisher%2Fwifiphisher/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wifiphisher","download_url":"https://codeload.github.com/wifiphisher/wifiphisher/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253672698,"owners_count":21945480,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["access-point","attack","malware","phishing","python","redteaming","rogue","security","wifi","wifiphisher"],"created_at":"2024-07-30T19:00:21.334Z","updated_at":"2025-05-12T05:21:45.253Z","avatar_url":"https://github.com/wifiphisher.png","language":"Python","funding_links":["https://github.com/sponsors/wifiphisher"],"categories":["Python","Uncategorized","🐟 Phishing","Tools","Python (1887)","HarmonyOS","其他_安全与渗透","\u003ca id=\"546f4fe70faa2236c0fbc2d486a83391\"\u003e\u003c/a\u003e社工(SET)\u0026\u0026钓鱼\u0026\u0026鱼叉攻击","2. [↑](#-content) Pentesting","wifi","Red Team","\u003ca id=\"d4efda1853b2cb0909727188116a2a8c\"\u003e\u003c/a\u003e未分类-WiFi","📶 Wi-Fi Communications","🔒 Security \u0026 Privacy"],"sub_categories":["Uncategorized","Windows Manager","网络服务_其他","\u003ca id=\"290e9ae48108d21d6d8b9ea9e74d077d\"\u003e\u003c/a\u003e钓鱼\u0026\u0026Phish","Python","[↑](#-content) 2.8 WiFi","Wireless","\u003ca id=\"37ca6907aa42dfd32db5973ff9eec83d\"\u003e\u003c/a\u003e新添加的","Satellite","Wi-Fi Detection \u0026 Infiltration Tools"],"readme":"[![Build Status](https://travis-ci.org/wifiphisher/wifiphisher.svg?branch=master)](https://travis-ci.org/wifiphisher/wifiphisher)\n[![Documentation Status](https://readthedocs.org/projects/wifiphisher/badge/?version=latest)](http://wifiphisher.readthedocs.io/en/latest/?badge=latest)\n![Python Version](https://img.shields.io/badge/python-3.7-blue.svg)\n![License](https://img.shields.io/badge/license-GPL-blue.svg)\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/wifiphisher.png\" /\u003e\u003c/p\u003e\n\n## About\n\u003ca href=\"https://wifiphisher.org\"\u003eWifiphisher\u003c/a\u003e is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be further used to mount victim-customized web phishing attacks against the connected clients in order to capture credentials (e.g. from third party login pages or WPA/WPA2 Pre-Shared Keys) or infect the victim stations with malwares.\n\nWifiphisher is...\n\n* ...powerful. Wifiphisher can run for hours inside a Raspberry Pi device\nexecuting all modern Wi-Fi association techniques (including \"Evil Twin\", \"KARMA\" and \"Known Beacons\").  \n\n* ...flexible. Supports dozens of arguments and comes with a set of\ncommunity-driven phishing templates for different deployment scenarios.  \n\n* ...modular. Users can \u003ca href=\"http://wifiphisher.readthedocs.io/en/latest/extensions.html\"\u003ewrite simple or complicated modules\u003c/a\u003e in Python to expand the functionality of the tool or \u003ca href=\"http://wifiphisher.readthedocs.io/en/latest/custom_phishing_scenario.html\"\u003ecreate custom phishing scenarios\u003c/a\u003e in order to conduct specific target-oriented attacks. \n\n* ...easy to use. Advanced users can utilize the rich set of features that Wifiphisher offers but beginners may start out as simply as \"./bin/wifiphisher\". The interactive Textual User Interface guides the tester through the build process of the attack. \n\n* ...the result of an extensive research. Attacks like \"Known Beacons\" and \"Lure10\" as well as state-of-the-art phishing techniques, were disclosed by our developers, and Wifiphisher was the first tool to incorporate them. \n\n* ...supported by an awesome community of developers and users.\n\n* ...free. Wifiphisher is available for free download, and also comes with full\nsource code that you may study, change, or distribute under the terms of the \nGPLv3 license.\n\n## How it works\n\nWi-Fi phishing consists of two steps:\n\n1. The first step involves the process of associating with Wi-Fi clients\nunknowingly, or in other words, obtaining a man-in-the-middle (MITM) position. Wifiphisher uses a number of different techniques to achieve this including:\n    * Evil Twin, where Wifiphisher creates a fake wireless network that looks similar to a legitimate network.\n    * KARMA, where Wifiphisher masquerades as a public network searched for by nearby Wi-Fi clients.\n    * Known Beacons, where Wifiphisher broadcasts a dictionary of common ESSIDs, that the around wireless stations have likely connected to in the past.\n\n    At the same time, Wifiphisher keeps forging “Deauthenticate” or “Disassociate” packets to disrupt existing associations and eventually lure victims using the above techniques.\n\n\u003cp align=\"center\"\u003e\u003cimg width=\"70%\" src=\"https://wifiphisher.github.io/wifiphisher/diagram.jpg\" /\u003e\u003cbr /\u003e\u003ci\u003ePerforming MiTM attack\u003c/i\u003e\u003c/p\u003e\n\n2. (Optionally) There are a number of different attacks that can be carried out \nonce Wifiphisher grants the penetration tester with a man-in-the-middle\nposition. For example, the tester may perform data sniffing or scan the victim stations for vulnerabilities. \n\n    Using Wifiphisher, advanced web phishing techniques are possible by gathering\ninformation from the target environment and victim user. For example, in one of\nour scenarios, Wifiphisher will extract information from the broadcasted beacon\nframes and the HTTP User-Agent header to display a web-based imitation of\nWindows network manager in order to capture the Pre-Shared Key.\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/ss-webphishing.png\" /\u003e\u003cbr /\u003e\u003ci\u003eFake \u003ca href=\"https://wifiphisher.org/ps/wifi_connect/\"\u003eweb-based network manager\u003c/a\u003e\u003c/i\u003e\u003c/p\u003e\n\n## Requirements\nFollowing are the requirements for getting the most out of Wifiphisher:\n\n  - A working Linux system. People have made Wifiphisher work on many distros, but Kali Linux is the officially supported distribution, thus all new features are primarily tested on this platform.\n  - One wireless network adapter that supports AP \u0026 Monitor mode and is capable of injection. Drivers should support netlink.\n\n## Installation\n\nTo install the latest development version type the following commands:\n\n```bash\ngit clone https://github.com/wifiphisher/wifiphisher.git # Download the latest revision\ncd wifiphisher # Switch to tool's directory\nsudo python setup.py install # Install any dependencies\n```\n\nAlternatively, you can download the latest stable version from the \u003ca href=\"https://github.com/wifiphisher/wifiphisher/releases\"\u003eReleases page\u003c/a\u003e.\n\n## Usage\n\nRun the tool by typing `wifiphisher` or `python bin/wifiphisher` (from inside the tool's directory).\n\nBy running the tool without any options, it will find the right interfaces and interactively ask the user to pick the ESSID of the target network (out of a list with all the ESSIDs in the around area) as well as a phishing scenario to perform. By default, the tool will perform both Evil Twin and KARMA attacks.\n\n***\n\n```shell\nwifiphisher -aI wlan0 -jI wlan4 -p firmware-upgrade --handshake-capture handshake.pcap\n```\n\nUse wlan0 for spawning the rogue Access Point and wlan4 for DoS attacks. Select the target network manually from the list and perform the \"Firmware Upgrade\" scenario. Verify that the captured Pre-Shared Key is correct by checking it against the handshake in the handshake.pcap file.\n\nUseful for manually selecting the wireless adapters. The \u003ca href=\"https://wifiphisher.org/ps/firmware-upgrade/\"\u003e\"Firmware Upgrade\"\u003c/a\u003e scenario is an easy way for obtaining the PSK from a password-protected network.\n\n***\n\n```shell\nwifiphisher --essid CONFERENCE_WIFI -p plugin_update -pK s3cr3tp4ssw0rd\n```\n\nAutomatically pick the right interfaces. Target the Wi-Fi with ESSID \"CONFERENCE_WIFI\" and perform the \"Plugin Update\" scenario. The Evil Twin will be password-protected with PSK \"s3cr3tp4ssw0rd\".\n\nUseful against networks with disclosed PSKs (e.g. in conferences). The \u003ca href=\"https://wifiphisher.org/ps/plugin_update/\"\u003e\"Plugin Update\"\u003c/a\u003e scenario provides an easy way for getting the victims to download malicious executables (e.g. malwares containing a reverse shell payload).\n\n***\n\n```shell\nwifiphisher --essid \"FREE WI-FI\" -p oauth-login -kB\n```\n\nSimply spawn an open Wi-Fi network with ESSID \"FREE WI-FI\" and perform the \"OAuth Login\" scenario. Furthermore, mount the \"Known Beacons\" Wi-Fi automatic association technique.\n\nUseful against victims in public areas. The \u003ca href=\"https://wifiphisher.org/ps/oauth-login/\"\u003e\"OAuth Login\"\u003c/a\u003e scenario provides a simple way for capturing credentials from social networks, like Facebook. \n\n\nFollowing are all the options along with their descriptions (also available with `wifiphisher -h`):\n\n| Short form | Long form | Explanation |\n| :----------: | :---------: | :-----------: |\n|-h | --help| show this help message and exit |\n|-i INTERFACE| --interface INTERFACE| Manually choose an interface that supports both AP and monitor modes for spawning the rogue AP as well as mounting additional Wi-Fi attacks from Extensions (i.e. deauth). Example: -i wlan1 |\n|-eI EXTENSIONSINTERFACE| --extensionsinterface EXTENSIONSINTERFACE|\tManually choose an interface that supports monitor mode for running the extensions. Example: -eI wlan1|\n|-aI APINTERFACE| --apinterface APINTERFACE|\tManually choose an interface that supports AP mode for spawning an AP. Example: -aI wlan0|\n|-pI INTERFACE| --protectinterface INTERFACE| Specify one or more interfaces that will have their connection protected from being managed by NetworkManager.|\n|-kN| --keepnetworkmanager| Do not kill NetworkManager.|\n|-nE| --noextensions|\tDo not load any extensions.|\n|-e ESSID| --essid ESSID|\tEnter the ESSID of the rogue Access Point. This option will skip Access Point selection phase. Example: --essid 'Free WiFi'|\n|-pPD PHISHING_PAGES_DIRECTORY|--phishing-pages-directory PHISHING_PAGES_DIRECTORY| Search for phishing pages in this location|\n|-p PHISHINGSCENARIO| --phishingscenario PHISHINGSCENARIO\t|Choose the phishing scenario to run.This option will skip the scenario selection phase. Example: -p firmware_upgrade|\n|-pK PRESHAREDKEY| --presharedkey PRESHAREDKEY|\tAdd WPA/WPA2 protection on the rogue Access Point. Example: -pK s3cr3tp4ssw0rd|\n|-qS| --quitonsuccess|\tStop the script after successfully retrieving one pair of credentials.|\n|-lC| --lure10-capture| Capture the BSSIDs of the APs that are discovered during AP selection phase. This option is part of Lure10 attack.\n|-lE LURE10_EXPLOIT |--lure10-exploit LURE10_EXPLOIT| Fool the Windows Location Service of nearby Windows users to believe it is within an area that was previously captured with --lure10-capture. Part of the Lure10 attack.|\n|-iAM| --mac-ap-interface| Specify the MAC address of the AP interface. Example: -iAM 38:EC:11:00:00:00|\n|-iEM| --mac-extensions-interface| Specify the MAC address of the extensions interface. Example: -iEM E8:2A:EA:00:00:00|\n|-iNM| --no-mac-randomization| Do not change any MAC address.|\n|-hC|--handshake-capture|Capture of the WPA/WPA2 handshakes for verifying passphrase. Requires cowpatty. Example: -hC capture.pcap|\n|-dE ESSID|--deauth-essid ESSID|Deauth all the BSSIDs in the WLAN with that ESSID.|\n|-dC CHANNELS| --deauth-channels CHANNELS|Channels to deauth. Example: --deauth-channels 1,3,7|\n||--logging| Enable logging. Output will be saved to wifiphisher.log file.|\n|-lP LOGPATH| --logpath LOGPATH| Determine the full path of the logfile.|\n|-cP CREDENTIAL_LOG_PATH|--credential-log-path CREDENTIAL_LOG_PATH|Determine the full path of the file that will store any captured credentials|\n|-cM|--channel-monitor|Monitor if the target access point changes the channel.|\n||--payload-path| Enable the payload path. Intended for use with scenarios that serve payloads.|\n|-wP|--wps-pbc|Monitor if the button on a WPS-PBC Registrar side is pressed.|\n|-wAI|--wpspbc-assoc-interface|The WLAN interface used for associating to the WPS AccessPoint.|\n|-kB|--known-beacons|Perform the known beacons Wi-Fi automatic association technique.|\n|-fH|--force-hostapd|Force the usage of hostapd installed in the system.|\n||--dnsmasq-conf DNSMASQ_CONF|Determine the full path of dnmasq.conf file.|\n|-dK|--disable-karma|Disables KARMA attack.|\n|-pE|--phishing-essid|Determine the ESSID you want to use for the phishing page.|\n\n\n## Screenshots\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/ss5.png\" /\u003e\u003cbr /\u003e\u003ci\u003eTargeting an access point\u003c/i\u003e\u003c/p\u003e\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/ss2.png\" /\u003e\u003cbr /\u003e\u003ci\u003eA successful attack\u003c/i\u003e\u003c/p\u003e\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/ss7.png\" /\u003e\u003cbr /\u003e\u003ci\u003eFake \u003ca href=\"https://wifiphisher.org/ps/firmware-upgrade/\"\u003erouter configuration page\u003c/a\u003e\u003c/i\u003e\u003c/p\u003e\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/ss6.png\" /\u003e\u003cbr /\u003e\u003ci\u003eFake \u003ca href=\"https://wifiphisher.org/ps/oauth-login/\"\u003eOAuth Login Page\u003c/a\u003e\u003c/i\u003e\u003c/p\u003e\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://wifiphisher.github.io/wifiphisher/ss4.png\" /\u003e\u003cbr /\u003e\u003ci\u003eFake \u003ca href=\"https://wifiphisher.org/ps/wifi_connect/\"\u003eweb-based network manager\u003c/a\u003e\u003c/i\u003e\u003c/p\u003e\n\n\n## Help needed\nIf you are a Python developer or a web designer you can help us improve Wifiphisher. Feel free to take a look at the \u003ca href=\"https://github.com/wifiphisher/wifiphisher/issues\"\u003ebug tracker\u003c/a\u003e for some tasks to do.\n\nIf you don't know how to code, you can help us by \u003ca href=\"https://github.com/wifiphisher/wifiphisher/issues\"\u003eproposing improvements or reporting bugs\u003c/a\u003e. Please have a look at the Bug Reporting Guidelines and the \u003ca href=\"https://wifiphisher.readthedocs.io/en/latest/faq.html\"\u003eFAQ document\u003c/a\u003e beforehand.  Note that the tool does not aim to be script-kiddie friendly. Make sure you do understand how the tool works before opening an issue.\n\n## Credits\nThe script is based on an idea from \u003ca\nhref=\"https://github.com/DanMcInerney\"\u003eDan McInerney\u003c/a\u003e back in 2015.\n\nA full list of contributors lies \u003ca href=\"https://github.com/wifiphisher/wifiphisher/graphs/contributors\"\u003ehere\u003c/a\u003e.\n\n## License\nWifiphisher is licensed under the GPLv3 license. See [LICENSE](LICENSE) for more information.\n\n## Project Status\nWifiphisher's current version is **1.4**. You can download the latest release from \u003ca href=\"https://github.com/wifiphisher/wifiphisher/releases/tag/v1.4\"\u003ehere\u003c/a\u003e. Otherwise you can get the latest development version by cloning this repository.\n\n## Disclaimer\n* Usage of Wifiphisher for attacking infrastructures without prior mutual consistency can be considered as an illegal activity. It is the final user's responsibility to obey all applicable local, state and federal laws. Authors assume no liability and are not responsible for any misuse or damage caused by this program.\n\n\u003cb\u003eNote\u003c/b\u003e: Be aware of sites pretending to be related with the Wifiphisher Project. They may be delivering malware.\n\nFor Wifiphisher news, follow us on \u003ca href=\"https://www.twitter.com/wifiphisher\"\u003eTwitter\u003c/a\u003e or like us on \u003ca href=\"https://www.facebook.com/Wifiphisher-129914317622032/\"\u003eFacebook\u003c/a\u003e.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwifiphisher%2Fwifiphisher","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwifiphisher%2Fwifiphisher","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwifiphisher%2Fwifiphisher/lists"}