p3tr0s / phisifi

WiFi Hacking with an ESP8266 - Deauth combined with Evil Twin attack

PhiSiFi

A franken baby of M1z23R/ESP8266-EvilTwin and adamff1/ESP8266-Captive-Portal.

It uses an ESP8266 to attack a WiFi network using Deauther && || Evil-Twin AP method.

FEATURES :

• Deauthentication of a target WiFi access point
• Evil-Twin AP to capture passwords with password verification against the og access point
• It can do both attacks at the same time, no toggling of the deauther is required.

DISCLAIMER

The source code given in this public repo is for educational use only and should only be used against your own networks and devices!
Please check the legal regulations in your country before using it.

Install using Arduino IDE

1. Install Arduino IDE
2. In Arduino go to File -> Preferences add this URL to Additional Boards Manager URLs -> https://raw.githubusercontent.com/SpacehuhnTech/arduino/main/package_spacehuhn_index.json
3. In Arduino go to Tools -> Board -> Boards Manager search for and install the deauther package
4. Download and open PhiSiFi with Arduino IDE
5. Select an ESP8266 Deauther board in Arduino under tools -> board
6. Connect your device and select the serial port in Arduino under tools -> port
7. Click Upload button

How to use:

• Connect to the AP named WiPhi_34732 with password d347h320 from your phone/PC.
• Select the target AP you want to attack (list of available APs refreshes every 30secs - page reload is required).
• Click the Start Deauthing button to start kicking devices off the selected network.
• Click the Start Evil-Twin button and optionally reconnect to the newly created AP named same as your target (will be open).
• You can stop any of the attacks by visiting 192.168.4.1/admin while conected to Evil-Twin AP or by resetting the ESP8266.
• Once a correct password is found, AP will be restarted with default ssid WiPhi_34732 / d347h320 and at the bottom of a table you should be able to see something like "Successfully got password for - TARGET_SSID - PASSWORD
  • If you power down / hard reset the gathered info will be lost

It doesn't work for me:

• For starters, I don't really care - it's something I did for fun and a POC that worked on my test surface and I do not provide any support for.
• Follow SpaceHuhn and read his blog https://blog.spacehuhn.com/deauth-attack-not-working to learn about the attack.
• If you can offer some input on what you think is wrong feel free to let me know and I will try, at some point, to fix it.

Credits:

• https://github.com/SpacehuhnTech/esp8266_deauther
• https://github.com/M1z23R/ESP8266-EvilTwin
• https://github.com/adamff1/ESP8266-Captive-Portal

License

This software is licensed under the MIT License.

Donation / Support / Appreciation