https://github.com/invpe/choker
A honeypot for all IoT traffic – your super handy ESP32 TCP/IP packet sniffer.
https://github.com/invpe/choker
bugbounty-tool esp32 esp32-arduino esp32-security packet-capture packet-sniffer security-tools wireshark
Last synced: 2 months ago
JSON representation
A honeypot for all IoT traffic – your super handy ESP32 TCP/IP packet sniffer.
- Host: GitHub
- URL: https://github.com/invpe/choker
- Owner: invpe
- License: mit
- Created: 2024-10-11T21:13:29.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2024-11-09T11:03:34.000Z (over 1 year ago)
- Last Synced: 2025-07-10T09:01:07.212Z (12 months ago)
- Topics: bugbounty-tool, esp32, esp32-arduino, esp32-security, packet-capture, packet-sniffer, security-tools, wireshark
- Language: C++
- Homepage:
- Size: 14.6 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Choker 🤙

Choker is a sophisticated tool for ESP32 ULPs that enables seamless packet (via lwip, not the boring 802.11 frames) capturing and analysis by allowing the device to function in AP+STA mode with NAPT enabled, forwarding packets over serial for real-time monitoring in Wireshark.
Still not getting the idea? Read on.
# Discover

Curious about what those inexpensive WiFi 'smart home' devices are doing when plugged in? Want to know what your new router is transmitting upon activation? Or maybe you’re concerned about the suspicious activities of your smart washing machine? Spin up the Choker.
# Detailed Description

Choker streamlines the network analysis process. How does it do that?
Instead of installing numerous tools and wrestling with command-line interfaces, simply power on your dedicated ESP32 and let it handle the heavy lifting.
Choker sets up an Access Point (AP) alongside Station (STA) mode (effectively extending your WiFi network yikes!) and, with NAPT enabled, forwards all packets to your Wireshark—this is where it gets particularly interesting. You can connect various devices like strange routers, IoT gadgets, and smart appliances to Choker's AP, allowing you to quickly observe what information they are transmitting and what data they might be siphoning off.
By leveraging Network Address Port Translation (NAPT), Choker captures both incoming and outgoing packets and sends them over a serial connection to your connected computer, providing a comprehensive view of network activity.
## Have PHun!