Wifite

This repo is a complete re-write of wifite, a Python script for auditing wireless networks.

Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches!

Wifite is designed to use all known methods for retrieving the password of a wireless access point (router). These methods include:

1. WPS: The Offline Pixie-Dust attack
2. WPS: The Online Brute-Force PIN attack
   WPS: The Offline NULL PIN attack
3. WPA: The WPA Handshake Capture + offline crack.
4. WPA: The PMKID Hash Capture + offline crack.
5. WPA3: The SAE Handshake Capture + offline crack.
6. WPA3: Transition mode downgrade attacks (force WPA2 on mixed networks).
7. WEP: Various known attacks against WEP, including fragmentation, chop-chop, aireplay, etc.
8. Evil Twin: Rogue AP attack with captive portal for credential capture.

Run wifite, select your targets, and Wifite will automatically start trying to capture or crack the password.

Quick Start with Dual Interfaces

If you have two wireless adapters, wifite can use them simultaneously for significantly improved performance:

# Automatic dual interface mode (wifite detects and assigns interfaces)
sudo wifite --dual-interface

# Evil Twin attack with dual interfaces (30-50% faster)
sudo wifite --dual-interface --eviltwin

# WPA attack with dual interfaces (continuous capture, no packet loss)
sudo wifite --dual-interface --wpa

# Manual interface selection
sudo wifite --interface-primary wlan0 --interface-secondary wlan1

Benefits: Eliminates mode switching, enables parallel operations, improves reliability. See the Dual Interface Guide for complete details.

Supported Operating Systems

Fully Supported ✅

• Kali Linux - Primary development platform (latest version recommended)
• ParrotSec - Well-tested and supported
• BlackArch - Compatible with latest tool versions

Mobile Support 📱

• Kali NetHunter (Android) - Requires custom kernel with monitor mode support
  • Tested on Android 10 and newer
  • Requires compatible wireless adapter and proper drivers
  • See NetHunter Documentation for setup

Partially Supported ⚠️

• Ubuntu/Debian - May work with manual tool installation and updated drivers
• Arch Linux - Compatible with AUR packages and proper wireless drivers
• Other Linux distributions - Requires latest versions of all dependencies

Requirements for All Platforms

• Python 3.9+ (Python 3.11+ recommended)
• Wireless adapter with monitor mode support
• Root/sudo access for network interface manipulation
• Latest versions of required tools (see Required Tools section)

Note: Other penetration testing distributions may have outdated tool versions. Ensure you have the latest versions of aircrack-ng, hashcat, and related tools for best compatibility.

Required Tools

First and foremost, you will need a wireless card capable of "Monitor Mode" and packet injection (see this tutorial for checking if your wireless card is compatible and also this guide). There are many cheap wireless cards that plug into USB available from online stores.

Second, only the latest versions of these programs are supported and must be installed for Wifite to work properly:

Required:

• python3 (Python 3.9+, tested up to Python 3.14)
• Iw: For identifying wireless devices already in Monitor Mode.
• Ip: For starting/stopping wireless devices.
• Aircrack-ng suite, includes:
  • airmon-ng: For enumerating and enabling Monitor Mode on wireless devices.
  • aircrack-ng: For cracking WEP .cap files and WPA handshake captures.
  • aireplay-ng: For deauthing access points, replaying capture files, various WEP attacks.
  • airodump-ng: For target scanning & capture file generation.
  • packetforge-ng: For forging capture files.

Optional, but Recommended:

• tshark: For detecting WPS networks and inspecting handshake capture files.
• reaver: For WPS Pixie-Dust & brute-force attacks.
  • Note: Reaver's wash tool can be used to detect WPS networks if tshark is not found.
• bully: For WPS Pixie-Dust & brute-force attacks.
  • Alternative to Reaver. Specify --bully to use Bully instead of Reaver.
  • Bully is also used to fetch PSK if reaver cannot after cracking WPS PIN.
• john: For CPU (OpenCL)/GPU cracking passwords fast.
• coWPAtty: For detecting handshake captures.
• hashcat: For cracking PMKID hashes and WPA3-SAE hashes.
  • hcxdumptool: For capturing PMKID hashes and WPA3-SAE handshakes.
  • hcxpcapngtool: For converting PMKID and SAE packet captures into hashcat's format.
  • Note: For WPA3 support, you need hcxdumptool v6.0.0+ and hashcat v6.0.0+ with mode 22000 support.
• macchanger: For randomizing MAC addresses to avoid detection and improve anonymity.
• pixiewps: For WPS Pixie-Dust attacks (alternative implementation).

For Evil Twin Attacks:

• hostapd: For creating rogue access points (v2.9+ required).
• dnsmasq: For DHCP and DNS services (v2.80+ required).
• wpa_supplicant: For validating captured credentials (v2.9+ required).

Installation

Quick Install (Recommended)

For most users on Kali Linux or similar distributions: