Evil-M5Project

Evil-M5Project is an innovative tool developed for ethical testing and exploration of WiFi networks. It harnesses the power of the M5Core2 device to scan, monitor, and interact with WiFi networks in a controlled environment. This project is designed for educational purposes, aiding in understanding network security and vulnerabilities.

Disclaimer: The creator of Evil-M5Core2 is not responsible for any misuse of this tool. It is intended solely for ethical and educational purposes. Users are reminded to comply with all applicable laws and regulations in their jurisdiction. All files provided with Evil-M5Core2 are designed to be used in a controlled environment and must be used in compliance with all applicable laws and regulations. Misuse or illegal use of this tool is strictly prohibited and not supported by the creator.

Evil-M5Family

☕️ Support This Project

If you find this project useful, consider supporting its development!
⭐ leave a star, it can really help ⭐ !

Buy M5Stack product
using my affiliate link to help me keep building new tools 🛠️

Buy anything on AliExpress
Just by using this link before searching, you're directly supporting the project 🙌

Every small click and donation keeps this open-source project alive ✨ just clicking can make a difference 😊

Join the Evil-M5 discord for help and updates 😉:

For More Information Check The Wiki !

https://github.com/7h30th3r0n3/Evil-M5Project/wiki

Compatible Hardware

🧱 M5Stack Devices

🧪 In Beta

📦 Required Extras

SD Card (FAT32, SDHC, max 16Go – 8Go is already enough)
GPS Module: M5Stack / DIY

Features may vary depending on the firmware/device you are using:

Installation

M5burner

Connect your device to your computer.
Download M5burner in UIFLOW FIRMWARE BURNING TOOL section : M5Stack Download Center
Place the necessary SD file content at the root of SD card. (This is needed to access all the files of the project).⚠️ the SD-Card-Folder files now need to be in a folder named evil at root of the sd card ⚠️
Type "evil-" in search bar and check for the device you have.
Click download and flash.

Compile Yourself

Connect your device to your computer.
Open the Arduino IDE and load the provided code.
Ensure the Board tutorial from M5 and Adafruit_NeoPixel, ArduinoJson, ESPping, IniFile, M5GFX, M5Unified, TinyGPSPlus, and esp8266audio libraries are installed. Follow these tutorials for guidance on M5 Board tutorial:
- Arduino Board Setup
- Arduino Library Installation
Ensure the ESP32 and M5Stack board definitions are installed. Note: Errors occur with ESP32 version 3.0.0-alpha3 for no M5stack devices. Please use M5stack board with ESP32 version 2.1.4 and below.
Place the necessary SD file content at the root of SD card. (This is needed to access the IMG startup and folder). ⚠️ the SD-Card-Folder files now need to be in a folder named evil at root of the sd card ⚠️

Warning : for Cardputer you need to change the Flash size to 8MB and the Partition Scheme to 8M with spiffs (3MB APP/1.5MB SPIFFS) or space error may occur. It's your first time with arduino IDE or something not working correctly? You should check out video section or ask help on the discord !

ESP32 Rig Slave

You can use any ESP32 as slave to collect SSID for wigle and sniff EAPOL

By using 14 ESP32 devices, you can monitor all 14 Wi-Fi channels on the 2.4GHz band simultaneously without channel hopping. The Cardputer uses GPS to link each received SSID to a CSV file compatible with Wigle.

This slave code is designed to run on any ESP32 and use it as a slave for wardriving in combination with the wardriving master mode on Cardputer. Each ESP32 collects SSIDs of nearby access points (APs) on a specific channel or can hop between configured channels. You can add multiple ESP32 devices to improve the accuracy and strength of the scan. Devices with external antennas can enhance performance for wardriving.

Tested on:

AtomS3: Buy here
AtomS3 Lite: Buy here
ESP32-C3 (with external antenna): Buy here (Be carefull to select sets WITH antenna)
WEMOS D1 Mini: Buy here
ESP32 C5: Buy here

Features:

Multi-Device Support: Add any number of ESP32 devices to increase AP detection and improve coverage.
Channel Hopping: Configure the ESP32 to scan on a specific channel or hop between selected channels.
Better Signal Strength: ESP32 devices with external antennas provide improved signal capture for long-range wardriving.
Master-Slave Communication: Use in combination with the Cardputer in wardriving master mode to aggregate and monitor data from multiple ESP32 slaves.
GPS Integration: The Cardputer witg GPS link SSID data with geographic coordinates and generate Wigle-compatible CSV files.

How it Works:

Deploy one or more ESP32 devices in slave mode.
Each device scans and captures SSID information on designated channels.
The data is sent to the Evil, which aggregates it and reduces missed APs while improving overall scan accuracy and signal strength.

Hardware Requirements:

Evil with v1.3.0
ESP32 devices (e.g., AtomS3, AtomS3 Lite, ESP32-C3, WEMOS D1 Mini)
External antenna (optional, for enhanced performance)

Here an assembly with 8 esp32-c3 connected in parallel and which scans 1,3,6,9,11,13 in static mode and in hopping for 2 others on 2,4,5,7 and 8,10,12,14 :

Acknowledgements

@SpacehuhnTech for the deauther bypass and for the fantastic work that is really inspiring.
@evilsocket for the concept of pwnagotchi and pwngrid.
@G4lile0 for the wifi-hash-monster.
@K3YOMI for the Wall Of Flipper.
@pr3y for help and Bruce code.
@bmorcelli for the help and Bruce code too.
@justcallmekoko for the Marauder.
@Talking Sasquach for creating video content about the project.
@Sam X Plogs for creating video content about the project.
@dagnazty for the fantastic work on M5dial.
@LaikaSpaceDawg for the work on the code.
@geo-tp for the work on the sd-card to usb.
@Furrtek for the incredible work of reverse ingeneriing of ESL tag. (You should definitely check the blog if you like hardware).
@i12bp8 for porting ESLtagtinker on the flipper.
@PierreAdams for the documentation on the rig build.

and to all Beta-testers on the discord :

[@KamiLocura]
[@Skedone]
[@toxiccpappii]
[@OarisKiller]
[@hosseios]
[@BrownNoise]
[@DAKKA]
[@KNAX]
[@jader242]
[@anubisdarkwatch]

License

MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Device	Links to buy
Better one : M5Cardputer	M5Stack / AliExpress
M5Stack Core2	M5Stack / AliExpress
M5Stack Fire	M5Stack
M5Stack Core1	M5Stack
M5Stack AWS	M5Stack
M5Stack CoreS3	M5Stack / AliExpress
M5Stack CoreS3 SE	M5Stack
M5AtomS3 (GPS needed)	M5Stack
↳ GPS Module	M5Stack
LLM Module	M5Stack / AliExpress

Device	Links
CYD2USB	AliExpress
CYD1USB	(No link yet)
M5Stick v1.1	AliExpress
M5Stick v2	AliExpress

WiFi Network Scanning	✅	✅	✅	✅	❌
Network Cloning	✅	✅	✅	✅	❌
Captive Portal Management	✅	✅	✅	✅	❌
Credential Handling	✅	✅	✅	✅	❌
Remote Web Server	✅	✅	✅	✅	❌
Probes Attack	✅	✅	✅	✅	❌
Sniffing probes	✅	✅	✅	✅	❌
Karma Attack	✅	✅	✅	✅	❌
Automated Karma Attack	✅	✅	✅	✅	✅
Karma Spear	✅	✅	✅	❌	❌
Bluetooth Keyboard	✅	✅	❌	❌	❌
Wardriving	✅	✅	✅	✅	❌
Wardriving Master	✅	❌	❌	❌	❌
Beacon Spam	✅	✅	✅	✅	❌
Deauther	✅	✅	❌	❌	❌
Auto Deauther	✅	❌	❌	❌	❌
Evil-Twin	✅	❌	❌	❌	❌
Handshake Master	✅	✅	❌	❌	❌
Check Handshakes	✅	❌	❌	❌	❌
Client Sniff	✅	✅	❌	❌	❌
Raw Sniffing	✅	✅	❌	❌	❌
Wi-Fi Channel Visualizer	✅	✅	❌	❌	❌
Client Sniff And Deauth	✅	✅	❌	❌	❌
EAPOL/Deauth detection	✅	✅	✅ (No EAPOL)	❌	❌
Wall Of Flipper	✅	✅	✅	❌	❌
Send tesla code with RFunit	✅	❌	❌	❌	❌
Scan Network and port	✅	✅	❌	❌	❌
Full Network and port Scan	✅	✅	❌	❌	❌
SSH Shell	✅	❌	❌	❌	❌
Web Crawler	✅	❌	❌	❌	❌
PwnGrid	✅	✅	❌	❌	❌
Skimmer Detector	✅	✅	❌	❌	❌
Mouse Jiggler	✅	❌	❌	❌	❌
BadUSB	✅	❌	❌	❌	❌
WebUi BadUSB	✅	❌	❌	❌	❌
Customing Theming	✅	✅	❌	❌	❌
Full Network Scan	✅	✅	❌	❌	❌
Reverse TCP Tunnel	✅	✅	❌	❌	❌
DHCP Starvation	✅	✅	❌	❌	❌
Rogue DHCP	✅	✅	❌	❌	❌
Switch DNS	✅	✅	❌	❌	❌
Network Hijacking	✅	✅	❌	❌	❌
Detect Printer	✅	✅	❌	❌	❌
File Print	✅	✅	❌	❌	❌
Check printer status	✅	✅	❌	❌	❌
HoneyPot	✅ (with Webhook)	✅	❌	❌	❌
LLM Chat Stream	✅	❌	❌	❌	❌
EvilChatMesh	✅	❌	❌	❌	❌
SD on USB	✅	❌	❌	❌	❌
Responder	✅	❌	❌	❌	❌
WPAD Abuse	✅	❌	❌	❌	❌
Crack NTLMv2	✅	❌	❌	❌	❌
File Manager	✅	❌	❌	❌	❌
UART Shell	✅	❌	❌	❌	❌
SIP ToolKit	✅	❌	❌	❌	❌
CCTV ToolKit	✅	❌	❌	❌	❌
SSDP Poisoner	✅	❌	❌	❌	❌
SkyJack	✅	❌	❌	❌	❌
WiFi Dead Drop	✅	❌	❌	❌	❌
BLENameFlood	✅	❌	❌	❌	❌
Wall Of Airtag	✅	❌	❌	❌	❌
FindMyEvil	✅	❌	❌	❌	❌
UPnP Mapping Viewer	✅	❌	❌	❌	❌
UPnP NAT	✅	❌	❌	❌	❌
LDAPDump	✅	❌	❌	❌	❌
IMSI Catcher	✅	❌	❌	❌	❌
Open Wifi Checker	✅	❌	❌	❌	❌
ESP32-C5 Serial Toolkit	✅	❌	❌	❌	❌
Aircrack (WPA2 Cracking)	✅	❌	❌	❌	❌
Autodiscover Abuse	✅	❌	❌	❌	❌
Evil Navigator WebUI	✅	❌	❌	❌	❌
Settings	✅	✅	✅	✅	❌

Most Popular

Evil-M5Project

Evil-M5Project

Evil-M5Family

☕️ Support This Project

For More Information Check The Wiki !

Compatible Hardware

🧱 M5Stack Devices

🧪 In Beta

📦 Required Extras

Installation

M5burner

Compile Yourself

ESP32 Rig Slave

You can use any ESP32 as slave to collect SSID for wigle and sniff EAPOL

Tested on:

Features:

How it Works:

Hardware Requirements:

Acknowledgements

License