sophron/wifiphisher
Wifiphisher
Wifiphisher is a Python wireless attack framework and rogue access point toolkit designed for wireless network interception and the deployment of phishing gateways. It functions as a wireless deauthentication tool and a phishing system that serves deceptive web pages to capture user credentials.
The framework is distinguished by a modular attack scenario system that allows the integration of custom Python modules to implement specialized phishing workflows. It employs adaptive phishing interfaces that use user-agent headers and environment data to render pages that mimic specific operating systems.
The toolkit covers wireless network penetration testing through rogue access point deployment and hardware address spoofing. It includes capabilities for forcing clients off legitimate networks via deauthentication attacks, intercepting captive portal traffic, and scanning connected target stations for vulnerabilities.
Features
- Wireless Security Frameworks - Provides a modular Python framework for developing and deploying wireless interception and phishing scenarios.
- Wireless Security Testing - Performs penetration testing by deploying rogue access points to intercept traffic and find vulnerabilities.
- Wireless Deauthentication Tools - Sends spoofed management frames to disconnect users from legitimate networks and force reconnection to the rogue gateway.
- Traffic Interception Tools - Redirects HTTP requests from connected clients to fraudulent captive portal pages for credential theft.
- Rogue Access Points - Implements rogue access point deployment by broadcasting deceptive wireless signals to lure clients.
- Phishing Capturers - Provides deceptive web interfaces designed to capture sensitive user credentials and network keys from connected clients.
- Scenario Orchestrators - Implements a modular system to execute specific phishing workflows, including fake update screens and credential harvesting sequences.
- MAC Address Spoofers - Manipulates network interface hardware addresses to hide the attacker's identity or impersonate trusted devices.
- Attack Scenario Modules - Provides a modular system for executing specialized phishing workflows through independent Python modules.
- Phishing Logic Extensions - Uses user-agent headers and environment data to dynamically render phishing interfaces that mimic specific OSes.
- Social Engineering Simulations - Simulates social engineering attacks via fake system updates and deceptive wireless prompts.
- Hardware Identity Spoofers - Hides the attacking machine or mimics target devices by changing wireless MAC addresses.
- Environmental Interface Emulators - Generates phishing interfaces that mimic the target's operating system by analyzing user-agent strings.
- 安全与隐私 - Wi-Fi phishing and credential harvesting tool.
- Social Engineering Tools - Automated tool for performing phishing attacks against wireless networks.
