WiFiSuite: Enterprise WPA Wireless Tool Suite
WiFiSuite
WiFiSuite is designed to help Pentesters streamline the process of auditing wireless networks, this is done by consolidating the most common tools and techniques in a unified platform backed with an SQLite database.
What can WiFiSuite test for?
- Misconfigured wireless clients that fail to validate server-side certificates.
- Misconfigured wireless clients that utilize clear text user identities.
- Weak WPA Enterprise Credentials.
- Weak WPA Keys.
- Shared WPA Keys between Access Points. (In development)
- Lack of User Awareness training.
Features:
- A one-liner EvilTwin deployment including a custom self-signed SSL/TLS certificate.
- EvilTwin deployment with a publicly signed TLS/SSL cert on the fly.
- Easily import existing publicly signed TLS/SSL certs for EvilTwin Attacks.
- EvilTwin saves password hashes in both HashCat and John the Ripper formats.
- Passively Harvest cleartext User Identities.
- Actively Harvest cleartext User Identities. (DeAuthentication Attack then Monitor WiFi)
- Simplified WiFi connections, through WiFiSuite’s ‘WPA Supplicant’ wrapper.
- Simplified MAC address changes, through WiFiSuite’s ‘Linux macchanger’ wrapper.
- SQLite Database which stores all Access Points, WPAKeys, EAP Credentials and Password Hashes.
Installation
apt-get install scapy git clone https://github.com/NickSanzotta/WiFiSuite.git cd WiFiSuite python setup.py install --record install.log
Use
Tutorial
Copyright (c) 2017 Nick Sanzotta
Source: https://github.com/NickSanzotta/