leadrogue/wiflux

Wiflux is a command line tool for auditing the security of wireless networks, meant for people who own a network or have explicit permission to test it. It presents a live, colorful terminal display that scans nearby wireless networks and shows details like each network's name, signal band, channel, encryption type, WPS status, connected clients, and a priority score suggesting which networks are worth attacking first. The tool automates several known wireless attack techniques rather than requiring the user to run each step by hand. It can capture WPA handshakes using several different deauthentication tools, work with WPS PIN and Pixie Dust style attacks, capture PMKID data without needing a client connected, and attempt older WEP attacks too. Once it has captured something crackable, it moves through a tiered cracking process, starting with password guesses built from the network's own name and hardware vendor, then trying common vendor default passwords, then a large dictionary file, and finally hashcat rule based cracking, preferring a fast GPU when one is available. Cracking progress is saved so it can resume after an interruption instead of starting over. Installation is done either by downloading a prebuilt release and running an install script, installing directly with pip, or cloning the source code and installing it in editable mode. Running it requires a wireless adapter capable of monitor mode and packet injection, plus several external tools like aircrack-ng, reaver, hcxdumptool, and hashcat, some of which are optional depending on which attacks you want to use. The tool supports scanning across the 2.4, 5, and 6 gigahertz bands and includes many command line flags to control its behavior, from choosing specific channels to disabling individual attack stages. It also stores results in a local database so previously cracked networks can be skipped on future runs unless the user asks to re-attack them, and it ships with over one hundred automated tests that do not require live radio hardware. The README states this software is for educational and authorized penetration testing only, and that unauthorized access to computer networks is illegal, with the authors not responsible for misuse. It is written in Python and released under the MIT license.