108 lines
3.3 KiB
Markdown
108 lines
3.3 KiB
Markdown
|
# wifi-deauth-test
|
||
|
|
|
||
|
|
A small Tkinter GUI that walks you through deauthenticating **one** client from a
|
||
|
|
Wi-Fi network **you own or are explicitly authorized to test**. It is a guided
|
||
|
|
front-end for the `aircrack-ng` suite (`airmon-ng`, `airodump-ng`, `aireplay-ng`).
|
||
|
|
|
||
|
|
If you just want the result and not the click-flow, `wifite2` and `airgeddon`
|
||
|
|
already do all of this.
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## ⚠️ Responsible use
|
||
|
|
|
||
|
|
Sending 802.11 deauthentication frames to a network or client you do not own, or
|
||
|
|
do not have **written** permission to test, is illegal in most jurisdictions
|
||
|
|
(e.g. the US Computer Fraud and Abuse Act, the UK Computer Misuse Act).
|
||
|
|
|
||
|
|
This tool exists to test the resilience of **your own** network, for lab
|
||
|
|
exercises, and for learning how the attack works. It targets a single client at a
|
||
|
|
time. You are responsible for how you use it.
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## What it does
|
||
|
|
|
||
|
|
A step-by-step wizard:
|
||
|
|
|
||
|
|
| Step | Screen | Under the hood |
|
||
|
|
|------|--------|----------------|
|
||
|
|
| 1 | **Select Wi-Fi card** — lists wireless interfaces, flags which support monitor mode | `iw dev`, `iw <phy> info` |
|
||
|
|
| 2 | **Monitor mode** (on confirm) — saves current card state first | `airmon-ng check kill`, then `airmon-ng start <iface>` |
|
||
|
|
| 3 | **Scan networks** — 10 s scan, then a table of ESSID / BSSID / channel / signal / encryption | `airodump-ng` → CSV |
|
||
|
|
| 4 | **Scan clients** — 15 s scan locked to the chosen BSSID + channel, lists associated client MACs | `airodump-ng --bssid <b> -c <ch>` → CSV |
|
||
|
|
| 5 | **Deauth** — **30 s with a live countdown** (auto-stops) or **infinite** (until you click *Stop deauth*) | `aireplay-ng --deauth 0 -a <bssid> -c <client> <mon>` |
|
||
|
|
| 6 | **Stop & Reset card** — always visible, any screen | see below |
|
||
|
|
|
||
|
|
### Reset behaviour
|
||
|
|
|
||
|
|
Before it touches the card, the tool records:
|
||
|
|
|
||
|
|
- the interface name and MAC address
|
||
|
|
- whether `NetworkManager` was running
|
||
|
|
|
||
|
|
**Stop & Reset card** (and closing the window) then:
|
||
|
|
|
||
|
|
1. kills any running `airodump-ng` / `aireplay-ng`
|
||
|
|
2. `airmon-ng stop <mon>`
|
||
|
|
3. renames / sets the interface back to `managed` if needed
|
||
|
|
4. restores the original MAC if it changed
|
||
|
|
5. `systemctl start NetworkManager`
|
||
|
|
|
||
|
|
The card ends up exactly as it was before step 2.
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Requirements
|
||
|
|
|
||
|
|
- Linux
|
||
|
|
- root (`sudo`)
|
||
|
|
- `aircrack-ng`, `iw`, `iproute2`, `python3-tk`
|
||
|
|
|
||
|
|
```bash
|
||
|
|
sudo apt install aircrack-ng iw iproute2 python3-tk
|
||
|
|
```
|
||
|
|
|
||
|
|
- A Wi-Fi adapter whose driver supports **monitor mode + packet injection**.
|
||
|
|
Many built-in Intel cards inject poorly; `ath9k_htc` (Atheros) and RTL8812AU
|
||
|
|
adapters are the common choices.
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
|
||
|
|
```bash
|
||
|
|
sudo python3 wifi_deauth.py
|
||
|
|
```
|
||
|
|
|
||
|
|
Then follow the wizard. The card is only modified after you confirm the prompt on
|
||
|
|
step 1 → 2, and is fully restored by **Stop & Reset card**.
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Selftest
|
||
|
|
|
||
|
|
The `airodump-ng` CSV parser has a self-check that needs no hardware and no root:
|
||
|
|
|
||
|
|
```bash
|
||
|
|
python3 wifi_deauth.py --selftest
|
||
|
|
```
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Limitations
|
||
|
|
|
||
|
|
- Scan durations are fixed (10 s / 15 s). Bump `SCAN_NET_SECS` / `SCAN_CLIENT_SECS`
|
||
|
|
at the top of `wifi_deauth.py` if devices are slow to appear.
|
||
|
|
- The CSV is parsed by naive comma-splitting; an ESSID that contains a comma can
|
||
|
|
shift columns.
|
||
|
|
- WPA3 / 802.11w (protected management frames) makes deauth ineffective — that is
|
||
|
|
expected, not a bug.
|
||
|
|
- One client at a time, by design.
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Files
|
||
|
|
|
||
|
|
- `wifi_deauth.py` — the whole thing: GUI, logic, and selftest.
|