Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug/ New Idea #15

Open
Dulikopter opened this issue Dec 26, 2023 · 3 comments
Open

Bug/ New Idea #15

Dulikopter opened this issue Dec 26, 2023 · 3 comments

Comments

@Dulikopter
Copy link

Hello i noticed some bugs i think:

  • On captive Portal, the wifi name of google is "Google Free Wifi Test" i think the "test" should not be there
  • On captive Portal of Facebook, you can just sign in with email, it should be email or phone number or not?
    -deauth is not working on my home wifi
    -eviltwin same
    New ideas:
    -Ddos tool
    (-PMKID capture
    -WPA/WPA2 handshake capture and parsing
    -Formatting captured traffic into PCAP format
    -Parsing captured handshakes into HCCAPX file ready to be cracked by Hashcat
    -Passive handshake sniffing
    -Easily extensible framework for new attacks implementations
    -Management AP for easy configuration on the go using smartphone for example)These are the feature of ESP32-Wi-Fi-Penetration-Tool
    -Spamming bluetooth device like airpods to smartphones, that someone cant use his phone because of pop ups of connecting with airpods
@Dulikopter
Copy link
Author

Maybe more bugs:

  • Feature from beacon 2) - SSID random MAC, (3) - SSID same MAC are not working I think
    Thanks in advance, and happy xmas!

@Kl0ibi
Copy link
Owner

Kl0ibi commented Dec 28, 2023

Hi, thank you for your valuable feedback!

Regarding the captive portal for Google's Wi-Fi, you've pointed out that its SSID is "Google Free Wifi Test." I agree, the word "test" seems unnecessary here. I'll look into adjusting that.

For the Facebook captive portal, you mentioned that it only allows sign-in via email. You're right, it would be more user-friendly to offer the option of signing in with either an email or a phone number. I'll make this change.

Regarding the issue with deauth not working on your home Wi-Fi for the eviltwin, it's intriguing as this is the first report of such an issue. Could it be that your router is blocking deauth messages? This might be worth investigating.

I appreciate your suggestion about adding DDoS tools. Indeed, I've already planned to incorporate some of these tools.

As for the PMKID capture technique, I understand your concern. This method requires a password list for reference, and its effectiveness can be questionable. Hence, I'm not particularly inclined towards this approach.

You mentioned the feature of spamming Bluetooth devices, like AirPods, to smartphones, causing persistent pop-up connection requests. This feature is available and can be accessed within the BLE spoof menu.

Finally, about the features from beacon 2) - SSID random MAC, and 3) - SSID same MAC. These features primarily impact devices that support mesh switching and determine mesh connections based on SSID/MAC. However, many devices tend to filter out duplicate SSIDs from their scan results.

@M6ct0night
Copy link

We want to extract the files from the compilation, change its language, and add some new features. How can we open this compilation file, and which programs can we use to edit this file?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants