Wifite2 - Rewrite of the popular wireless network auditor, "wifite"

A complete re-write of wifite, a Python script for auditing wireless networks.

What's new?

• Lots of files instead of "one big script".
• Cleaner process management -- No longer leaves processes running in the background.
• UX: Target access points are refreshed every second instead of every 5 seconds.
• UX: Displays realtime Power level (in db) of currently-attacked target

What's not new?

• Backwards compatibility with the original wifite's arguments.
• Same text-based interface everyone knows and loves.

Full Feature List

• Reaver Pixie-Dust attack (--pixie)
• Reaver WPS PIN attack (--reaver)
• WPA handshake capture (--no-reaver)
• Validates handshakes against pyrit, tshark, cowpatty, and aircrack-ng
• Various WEP attacks (replay, chopchop, fragment, etc)
• 5Ghz support for wireless cards that support 5ghz (use -5 option)
• Stores cracked passwords and handshakes to the current directory, with metadata about the access point (via --cracked command).
• Decloaks hidden access points when channel is fixed (use -c option)
• Provides commands to crack captured WPA handshakes (via --crack command)

Support

Wifite2 is designed entirely for the latest version of Kali Rolling release (tested on Kali 2016.2, updated May 2017).

This means only the latest versions of these programs are supported: Aircrack-ng suite, wash, reaver, tshark, cowpatty.

Other pen-testing distributions (such as BackBox) have outdated versions of these suites; these distributions are not supported.

Installing & Running

git clone https://github.com/derv82/wifite2.git

cd wifite2

./Wifite.py -c 1

Usage:

• Download

Read More

Parameth - brute discover GET and POST

Often when you are busting a directory for common files, you can identify scripts (for example test.php) that look like they need to be passed an unknown parameter. This hopefully can help find them.

The -off flag allows you to specify an offset (helps with dynamic pages) so for example, if you were getting alternating response sizes of 4444 and 4448, set the offset to 5 and it will only show the stuff outside the norm

Adding new params from source

The following regexes might be useful to parse $_GET or $_POST parameters from source:

$> grep -rioP '$_POST[\s*["']\s*\w+\s*["']\s*]' PHPSOURCE | grep -oP '$_POST[\s*["']\s*\w+\s*["']\s*]' | sed -e "s/$_POST[\s*["']//g" -e "s/\s*['"]\s*]//g" | sort -u > /tmp/outfile.txt
$> grep -rioP '$_GET[\s*["']\s*\w+\s*["']\s*]' PHPSOURCE | grep -oP '$_GET[\s*["']\s*\w+\s*["']\s*]' | sed -e "s/$_GET[\s*["']//g" -e "s/\s*['"]\s*]//g" | sort -u > /tmp/outfile.txt

• Download

Read More