WiFi Miner Detector: Detecting malicious WiFi with mining cryptocurrency

by do son · October 14, 2018

WiFi Miner Detector

A tool for detecting malicious WiFi with mining cryptocurrency.

Some weeks ago I read a news “Starbucks Wi-Fi Hijacked People’s Laptops to Mine Cryptocurrency“. The attackers inject the CoinHive javascript miner to HTTP Response, so I write this tool to detect malicious WiFi with miner scripts. Now it can detect:

It is based on analyzing the unencrypted 802.11 Data Frame to find keywords in HTTP data Because this attack is major occurred in public open WiFi.

sudo apt install python-pip
pip install scapy
pip install scapy_http

And you’ll need a WiFi card that supports monitor mode. You can check by running: iw list. Something like:

	Supported interface modes:
		 * IBSS
		 * managed
		 * AP
		 * AP/VLAN
		 * monitor
		 * mesh point

Download

git clone https://github.com/360PegasusTeam/WiFi-Miner-Detector.git

sudo python wifi_miner_detector.py wlan0

Author: qingxp9 @ 360PegasusTeam

Source: https://github.com/360PegasusTeam/