https://github.com/z0m31en7/deauthalyzer

Deauthalyzer is a script designed to monitor WiFi networks and detect deauthentication attacks. It utilizes packet sniffing and analysis techniques to identify deauthentication attack packets and provide relevant information about the attack.
https://github.com/z0m31en7/deauthalyzer

airmon-ng blue-teaming deauthentication-attack defense detection forensics incident-response logging mdk3 mdk4 monitoring networking osint-python wifi-hacking wifi-security wireless wireshark

Last synced: about 1 month ago
JSON representation

Deauthalyzer is a script designed to monitor WiFi networks and detect deauthentication attacks. It utilizes packet sniffing and analysis techniques to identify deauthentication attack packets and provide relevant information about the attack.

• Host: GitHub
• URL: https://github.com/z0m31en7/deauthalyzer
• Owner: z0m31en7
• License: mit
• Created: 2023-05-29T10:22:41.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-07-27T17:55:57.000Z (over 1 year ago)
• Last Synced: 2024-11-06T13:00:12.842Z (about 2 months ago)
• Topics: airmon-ng, blue-teaming, deauthentication-attack, defense, detection, forensics, incident-response, logging, mdk3, mdk4, monitoring, networking, osint-python, wifi-hacking, wifi-security, wireless, wireshark
• Language: Python
• Homepage:
• Size: 31.3 KB
• Stars: 42
• Watchers: 2
• Forks: 5
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
Deauthalyzer






Deauthalyzer is a script designed to monitor WiFi networks and detect de-authentication attacks. It utilizes packet sniffing and analysis techniques to identify de-authentication attack packets and provide relevant information about the attack. 

This tool can be used by individuals or organizations that are interested in monitoring and protecting their WiFi networks from deauthentication attacks. This tool is particularly useful for:



* Network Administrators: Network administrators can use this tool to monitor their WiFi networks for any potential deauthentication attacks. It helps them identify and analyze the attacks, allowing them to take appropriate security measures to protect their network.

* Security Researchers: Security researchers can utilize this tool to study and analyze deauthentication attacks in order to understand their techniques, patterns, and potential vulnerabilities in WiFi networks. This can contribute to the development of stronger security protocols and countermeasures.

* Penetration Testers: Penetration testers can employ this tool as part of their assessment to evaluate the security posture of a WiFi network. By simulating deauthentication attacks, they can assess the network's resilience and identify any weaknesses that could be exploited.

* WiFi Network Owners: Individuals or organizations that operate WiFi networks, such as cafes, businesses, or public places, can utilize this tool to actively monitor their network for deauthentication attacks. It enables them to detect and respond to any malicious activities that could disrupt the network's availability.

* Security Enthusiasts: Security enthusiasts and hobbyists interested in WiFi security can explore and experiment with this tool to gain a better understanding of deauthentication attacks and the techniques used to detect and mitigate them.








💡 Features:


*   Monitors WiFi networks for de-authentication attack packets.

*   Displays information about the detected attack including the source MAC address.

*   Provides the option to enable stealth mode during monitoring.

*   Records details of detected attacks in a log file.




📺 Preview:






  

 

🛠️ Installation Steps:



```

git clone https://github.com/z0m31en7/deauthalyzer.git

```

```

cd deauthalyzer

chmod +x ./install.sh && ./install.sh

```

```

sudo python deauthalyzer.py

```


🎛 Usage:


1\. Run the script with root privileges. 

2. The script will display a list of available WiFi interfaces. Select the number corresponding to the interface you want to use for monitor mode. 

3. The script will start monitoring the selected WiFi interface for de-authentication attack packets. If an attack is detected it will display information about the attack including the source MAC address. 

4. The script will also record the details of detected attacks in a text file. Each attack will be stored in a separate file with the name deauthlog\_dateandtime.txt where dateandtime represents the timestamp when the attack was detected.


  

  


🪛 Troubleshooting:

*  If you encounter any issues with the script, ensure that you have the necessary dependencies and tools installed correctly.


*   Make sure you run the script with root privileges or use sudo.

*   If the script fails to detect any wireless interfaces, ensure that your system has WiFi capabilities and the interfaces are properly recognized.

*   If you experience any problems related to the packet capturing process, make sure airmon-ng and tshark are installed correctly and accessible from the command line.

* If the issue still persists you can report the issue you are facing.


🛡️ License:



This project is licensed under the MIT-LICENSE