WiFiSuite: Enterprise WPA Wireless Tool Suite

by do son ·

WiFiSuite

WiFiSuite

WiFiSuite is designed to help Pentesters streamline the process of auditing wireless networks, this is done by consolidating the most common tools and techniques in a unified platform backed with an SQLite database.

WiFiSuite

What can WiFiSuite test for?

  • Misconfigured wireless clients that fail to validate server-side certificates.
  • Misconfigured wireless clients that utilize clear text user identities.
  • Weak WPA Enterprise Credentials.
  • Weak WPA Keys.
  • Shared WPA Keys between Access Points. (In development)
  • Lack of User Awareness training.

Features:

  • A one-liner EvilTwin deployment including a custom self-signed SSL/TLS certificate.
  • EvilTwin deployment with a publicly signed TLS/SSL cert on the fly.
  • Easily import existing publicly signed TLS/SSL certs for EvilTwin Attacks.
  • EvilTwin saves password hashes in both HashCat and John the Ripper formats.
  • Passively Harvest cleartext User Identities.
  • Actively Harvest cleartext User Identities. (DeAuthentication Attack then Monitor WiFi)
  • Simplified WiFi connections, through WiFiSuite’s ‘WPA Supplicant’ wrapper.
  • Simplified MAC address changes, through WiFiSuite’s ‘Linux macchanger’ wrapper.
  • SQLite Database which stores all Access Points, WPAKeys, EAP Credentials and Password Hashes.

Installation

apt-get install scapy
git clone https://github.com/NickSanzotta/WiFiSuite.git
cd WiFiSuite
python setup.py install --record install.log

Use

python wifisuite.py

   Output of Successful Installation:

      [i] Directory found: data/

      [!] Database not found: data/WiFiSuite.db

      [i] Created Datebase: data/WiFiSuite.db

      [i] Database instantiated

 

Tutorial

Copyright (c) 2017 Nick Sanzotta

Source: https://github.com/NickSanzotta/

Tags: WiFiSuite