https://github.com/invpe/espwatchtower

ESP32 Wireless Intrusion Detection eXperiment
https://github.com/invpe/espwatchtower

arduino esp32 esp32-arduino hobby-project ids wids wifi-security

Last synced: about 1 month ago
JSON representation

ESP32 Wireless Intrusion Detection eXperiment

• Host: GitHub
• URL: https://github.com/invpe/espwatchtower
• Owner: invpe
• License: mit
• Created: 2023-08-30T10:14:24.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-10-01T08:56:41.000Z (over 1 year ago)
• Last Synced: 2023-10-01T10:06:26.423Z (over 1 year ago)
• Topics: arduino, esp32, esp32-arduino, hobby-project, ids, wids, wifi-security
• Language: C++
• Homepage:
• Size: 67.4 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: readme.md

Awesome Lists containing this project

README

        
![image](https://github.com/invpe/ESPWatchTower/assets/106522950/1ce50f55-5bde-4de7-a26e-021e15043a4b)

# 🗼 WATCHTOWER

WatchTower is a simple yet very effective WiFi intrusion detection system designed to safeguard your home network against unauthorized access. 

By monitoring incoming data packets and comparing them to a whitelist of known devices, WatchTower swiftly identifies potential intruders. 

When an unknown device is detected, WatchTower triggers a red LED indicator, providing a visual alert. When there is nothing unusual happening, it stays in the shadows

without any sign of life. 

As with any "red" scenario it is good to dive deeper and either mark the device as trusted or change your Access Point password immediately.

WatchTower enables telnet access for you to control its behaviour. 

# 🗞️ Use case

Real world scenario where a friend of mine suspected his AP was used by his neighbour.

Since APs are not user's friendly in terms of notifying you about breaches, i had an idea to simply shine a 🔴 

when an untrusted device is found using his AP.

We went with WatchTower and found it really happening after few hours.

![image](https://github.com/invpe/ESPWatchTower/assets/106522950/265d9c85-8e52-4a30-97bf-c01fe82795b2)

# 🅰️ How does it work

It is really simple, that's why i like it.

WatchTower will continosuly look for packets going through your AP over WIFI.

All devices that happen to send data with your AP will be added to a list.

Devices are marked **untrusted** by default, so you will need some minimal time to isolate the ones you trust.

Then when you're all set, anytime a device that is **untrusted** is seen talking with your AP, you will get a 🔴 

Under the hood, you will have access to a telnet server running on the WatchTower,

there you can set names, trust, untrust, add, delete devices.

# 🚶‍♂️ Next steps if you're still interested.

- [Install](https://github.com/invpe/ESPWatchTower/blob/main/install_manual.md)

- [Use](https://github.com/invpe/ESPWatchTower/blob/main/usage_manual.md)

- Have fun ! 🙂