derv82 / wifite2

Rewrite of the popular wireless network auditor, "wifite"
GNU General Public License v2.0
6.31k stars 1.29k forks source link

Better heuristic to attack targets more efficiently #26

Open derv82 opened 7 years ago

derv82 commented 7 years ago

Currently wifite tries all selected targets in-order, trying WPS pixie-dust, then the PIN attack, then WPA handshake capture.

Ideally the script would:

  1. Target closest APs first
  2. Target WEP networks first
  3. Target WPS networks with Pixie Dust
  4. WPA: Capture handshake, try small/medium sized word lists
  5. Try WPS PIN attack

This way the most-vulnerablr targets are attacked first.

Ideally we would run multiple attacks against targets on the same channel/frequency, but this might screw up some things (eg deauthing multiple clients at the same time, reaver getting confused, etc).

benbuschmannBSP commented 6 years ago

a simple first step might be to only show targets with clients, I would appreciate a flag like that

derv82 commented 6 years ago

a simple first step might be to only show targets with clients, I would appreciate a flag like that

Thanks for creating #79 to track this.