"Big Red Button" Script

[derv82]

I was learning python and ended up writing this script, 'WiFite'. It's designed to crack every nearby network -- both WEP-and-WPA-encrypted networks.

Before you start: I know, I know; it's been done. I apologize in advance for the lack of originality.

I wrote this for personal uses and, through boredom, added user-friendliness. Maybe someone on this forum can find it useful as well.

Here's a link to the googlecode page: wifite - Project Hosting on Google Code

Here's a screenshot:

Here's a list of options (from the --help option): http://wifite.googlecode.com/svn/trunk/HELP

And here's a README for more info: http://wifite.googlecode.com/svn/trunk/README


The script is mostly untested, so it might be full of bugs. That's what the Issues section is for: Issues - wifite - Project Hosting on Google Code


Notable features:

./wifite.py -all

^ attempts to crack every nearby access point

./wifite.py -p 50

^ attempts to crack all nearby APs with more than 50dB signal strength

./wifite.py -all -nowpa

^ attempts to crack all nearby APs that are not WPA-encrypted (just WEP)

./wifite.py -e "2WIRE72"

^ attempts to crack just the AP named '2WIRE72'

./wifite.py -console

^ interactive mode, gives you the option to select which APs to attack

Thanks for bearing with me!

Edit: Forgot to add download link
You can just copy/paste the code below into a console and it should work...
Be sure to run as root!

wget -O wifite.py http://wifite.googlecode.com/svn/trunk/wifite.py
chmod +x wifite.py
./wifite.py

^ download, make executable, and launch wifite in GUI mode.

Update:

I just learned that it's possible to make GUI's in python...

It's ****ing atrocious, but it works (I think). Hopefully I can take an art/design course next semester so I stop churning out button/label vomit. At least it's still one script :]

WiFite defaults to the GUI if no arguments are given.
Same functionality, just a li'l something for those people that hate typing and remembering arguments. Oh, and the GUI remembers your settings each time you run it.

[ondrovic]

Nice tool. I have tested it on my dummy network at the house and I get the following:

[0:10:00] started -p0841 attack on "Chrelli"
[0:08:10] started cracking WEP key (+5000 ivs)
[0:00:01] -p0841 attack on "Chrelli" captured 25714 ivs (37/sec) cracking...
[+] the attack is complete; exiting

So does this mean I have successfully cracked my wep? Does it show the WEP key or does it store it somewhere else?

[derv82]

@ondrovic: No, it didn't crack the WEP; it would have printed the WEP key and saved it to log.txt in the same folder. Looks like it ran out of time during the attack [0:00:01]. Try changing the WEP maximum wait time to more than 10min, maybe 20 minutes (-wepw 20).

I guess it should state when an attack is unsuccessful... I'll get on it!

[pinchegringo]

Derv,
Thanks again for another quality project. Works great on my ALFA adapter.

Best Regards,
PG

[hucker]

I was actually in the process of writing something like this myself, but this just saved me a lot of time! Great tool! I haven't looked at the source yet, but the functionality so far is very good. Kudos!

[ondrovic]

Seems as though you are making some good progress on your script :-). It seems to be working much better now. I am not a fan of gui interfaces and loved it the way it was before you added the gui, but that is just me and I like the fact you can use -console and not get a gui at all. Keep up the good work and if you need any help let me know.

[thorin]

Well the thread title got my attention. But the text on the "Big Red Button" needs to say "H4x0r It N0wz!" hehehehehehe

Nice work, thanks for contributing and sharing!

[Barry]

Well the thread title got my attention. But the text on the "Big Red Button" needs to say "H4x0r It N0wz!" hehehehehehe

Nice work, thanks for contributing and sharing!

I think Streaker69 might have something to say about that.....

[derv82]

I just wanted to post some new features in Wifite. I apologize for bumping my own thread.

"smart" wpa handshake deauth

• listens for and adds new clients during the attack
• rotates deauthentications (between each client and the 'broadcast' deauth)

hidden SSID discovery

• while scanning for targets, deauths clients of access points with hidden SSIDs
• this leads to the 'decloaking' of hidden SSIDs (SSID is required to crack)
• note: this option is only available when scanning a fixed channel (-c)

strips WPA handshakes

• greatly reduces the size of the handshake capture file
• uses pyrit to strip (best), but if pyrit isnt' found, uses tshark
• handshakes are stored in directory "hs/". less clutter

many, many bug fixes.

• fixed: no longer crashes when WPA key is cracked
• fixed: selecting 'wpa and wep' in GUI would only attack WPA
• fixed: "no x-server" -- wifite can now be executed before 'startx' or after 'log out'
• ..and many other small tweaks

so if you thought wifite was buggy before, it's much more stable now.

[FettMaster]

Hi,

I test the program with mi wireless connection and I have a problem.

The script never do the handshake and the victim system block the internet connection during the handshake process.

Can you help me please?

Thanks