Wi-PWN: Deauther with advanced features and material interface

by do son · December 28, 2017

What is Wi-PWN

Wi-PWN is a firmware that performs deauth attacks on cheap Arduino boards. The ESP8266 is a cheap microcontroller with built-in Wi-Fi. It contains a powerful 160 MHz processor and it can be programmed using Arduino.

A deauthentication attack is often confused with Wi-Fi jamming, as they both block users from accessing Wi-Fi networks.

How it works

The 802.11 Wi-Fi protocol contains a so-called deauthentication frame. It is used to disconnect clients safely from a wireless network.

Because these management packets are unencrypted, you just need the MAC address of the Wi-Fi router and of the client device which you want to disconnect from the network. You don’t need to be on the network or know the password, it’s enough to be in its range.

How to protect against it

With the 802.11w-2009 updated standards, management frames are encrypted by default.

802.11w is rarely used in the real world as both the router and the client device need to support this standard, otherwise, they won’t be able to connect to the routers.

Updating to the 802.11w standard is often expensive and difficult due to the vast devices of legacy devices not supporting the new standard. Because of the maintenance nightmare, over 95% of devices use the vulnerable 802.11 standard — even though newer devices support newer standards.

Download

How to use

Connect your ESP8266 to a USB power source (you can power it with your phone using an OTG cable)
Scan for Wi-Fi networks on your device and connect to Wi-PWN (no password by default).
Once connected, open up your browser and go to http://192.168.4.1
Click on ACCEPT to accept the Terms & Conditions
Specify an SSID and password for Wi-PWN to use and click on CONTINUE
Reconnect to the new network using the SSID & Password you specified in the previous step.
Go back to your browser and the page should reload (open http://192.168.4.1 again if the page doesn’t reload)
Click on the Scan button to scan for Wi-Fi networks
Note: You may have to reconnect to the Wi-Fi network.
Select the WiFi network(s) you want to perform the attack on. Once finished, click on the Attack button
Select the attack you wish to perform