README
Wifite is a python script which automates the WEP and WPA cracking process with aircrack-ng tools.
Please Note: Wifite can and will delete certain existing .CAP and .XOR files inside of the directory it is run; specifically any *.XOR files and replay-*.cap files. Please move wifite.py into its own directory to avoid the deleting of these kinds of files.
Wifite requires:
- A Linux operating system
- I highly recommend using the Backtrack4 R1 flavor of Ubuntu. It already contains many tools required by wifite, and wifite was developed on this platform.
- Other recommended distributions of linux include ArchLinux, Auditor, and Bauer-Puntu.
- Wireless drivers patched for injection and monitor mode,
- Sometimes the easiest thing to do is buy a new wireless card that already has drivers available.
- The aircrack-ng suite of tools
- v1.1 is PREFERRED
- you need at LEAST v1.0-rc4, but please upgrade to the latest v1.1
- Python 2.4.5 or 2.5.2
- other versions may work, but these are the only confirmed working versions
Before using Wifite
Before you run wifite, please learn and use the command-line tools available with aircrack-ng. Here is an easy guide to WEP cracking and here is an easy guide to WPA cracking. Only after you have tested and successfully cracked WEP and WPA without the use of an automated tool should you use Wifite. This is for two reasons:
- If it doesn't work, you blame Wifite.
- Sometimes you have the wrong wireless drivers, an outdated version of aircrack-ng, or are missing important tools
- When it does work, you actually know what it is doing.
- Don't be a script kiddie. Understand the process being WEP and WPA cracking. I wrote this script for myself because remembering the aircrack-ng commands can be frustrating. Don't let this script enable you to be a script kiddie!
What should I do after attack is complete ? I can't do anything. Closing "WiFite?" window gives infinite errors in console :( Ctrl+C doesn't work :(
@fjcapdevila, that sounds like a bug.
Sometimes, when wifite is waiting for input, Ctrl+C and then ENTER will give it the kick it needs.
If the ctrl+c, ENTER fix doesn't work, would you mind posting this bug in the "Issues" section? Just click "ISSUES" and then "NEW ISSUE".
It would be infinitely helpful if you included in the bug report:
What operating system you're using (Ubuntu 8.10?), what version of the program (r54?), what version of aircrack-ng (1.0?), how many attacks were attempted (how many access points were targeted), what kind of attacks (WEP, WPA, chopchop, frag, WPA cracking), how many were successful or not, did you use the GUI or command-line? (did you click 'h4x0r 1t n0w' ? what is the output of the program? -- to elaborate: what does the console say? is it waiting for input or something else?
etc...
The reason why I ask that you use the ISSUES section is so we don't fill up the "README" with troubleshooting.
When I run sudo apt-get install aircrack-ng the repository tells me I have the latest version, 1.0. How do I upgrade to aircrack-ng 1.1? (I am on Ubuntu 9.10)
@joelm: http://tinyurl.com/2umd2gk
Upgrading off the Aircrack-ng website is too difficult, it takes a working brain. Why don't you add an install script for Aircrack-ng 1.1 to the update function for wifite?
To upgrade to Aircrack-ng 1.1 copy and past the following in consol:
Hope it helps you as I ran into the same problem.
Dear ml....at Yahoo dot com- I tried your algorithm for upgading aircrack. It did not work. I got error messages. Then I tried upgrading by analogy to this install protocol for kismet: http://azend.org/ It gave me error messages, but it worked! I now have aircrack 1.1 on my laptop in Ubuntu 9.10.
It's me back I found the solution : iw tools was not installed so for airmon-ng was not possible to create mon0... Compiled ant installed iw tools solved the problem! Thanks, even the GUI of the program is working on Maemo :) , it not fit well in the landscape mode (default one), but in portrait I can see all options!
Very good job! Thanks!
DONDE ESTA wifite? I have searched the menus on Bauer-Puntu 10.10 and Backtrack4, R1 and R2. I cannot locate wifite! Where is it hiding?
@joelm:
on BT4, it may be in /pentest/wireless/wifite/. I'm not sure where it would be on Bauer-Puntu...
If not, you can download the latest version using wget (assuming you have an internet connection):
then make the file executable:
and then run the script:
you guys are the man.
Just one man. Thanks.
Hi! I have a problem doing some testing trying to figure out everything. I think I'm doing this right, yet no handshake is captured. I'm trying to capture my own network (which has two laptops and two mobiles connected, it's a WPA2-PSK). Well, with grimwepa 1.10a6 I managed to get the handshake only by provoking it manually, just to test if it worked (manually meaning actually disconnecting the wifi on my phone, then reenabling it, to force the handshake, since apparently the deauth didn't work). Anyway: While with grimwepa I can actually see the handshake being captured when I provoke it (not when it's just sending deauths), with wifite it just can't see them even when I have the phone doing the handshake next to the laptop in question. BTW: The laptop has an intel 4965 AGN. Any clue? Thank you!
What version of Wifite are you using? r64?
You can run
to check if you're at the newest version.
The latest version of Wifite (r64) uses Pyrit to verify handshakes. The old method of verifying 4-way handshakes used aircrack-ng, which would only alert when a handshake was captured (which meant the possibility of "false positives"). Wifite now analyzes the handshake in Pyrit to ensure that a valid handshake was captured and that it is for the correct access point.
When you use your phone to "provoke" the handshake, is your phone connecting to the access point that you are attacking or to some other access point? Are you connecting to the targeted access point with a correct password?
You mentioned you're using Intel4965... Does Wifite do the "intel 4965 workaround" before starting the handshake capture/attack?
Thanks.
Wifite is really great! Could you please post a basic walkthrough to make a single click short-cut for wifite on desktop. Thanks!
@fallbrook,
What operating system are you using? If you're using Ubuntu, there's countless tutorials on the web; just google Ubuntu <your version> desktop launcher.
If you are using Backtrack 4 R2 (which you should be), here's how to make a desktop 'shortcut':
hi, i curios about wifite...what it do underground/ back there... since i,m no gud in reading script...is there any other way to know... ex. debugging, verbose mode etc...
anyway your script really gud in helping me.Thanks alot
@matali,
Wifite is automating the WEP-cracking process by sending commands to the aircrack-ng suite (aircrack-ng, aireplay-ng, airodump-ng, packetforge-ng).
For cracking WEP, Wifite follows roughly what is outlined in this guide here: http://www.aircrack-ng.org/doku.php?id=simple_wep_crack
For cracking WPA, the process is outlined here: http://www.aircrack-ng.org/doku.php?id=cracking_wpa&s[]=wpa&s[]=crack
Hope that helps.
Hey Mister WiFite?! Right now I'm using the password dictionary you recommend- "combined-big.txt" It is way too small. Can you recommend a bigger dictionary? (One that is easy to install on Ubuntu 10.04.)
@joelm,
Some guy's UBER wordlist (13GB unzipped): http://thepiratebay.org/torrent/5945498/WPA-PSK_WORDLIST_3_Final_(13_GB).rar
Xploitz's wordlist is a combination of a lot of other wordlists (670MB zipped): http://thepiratebay.org/torrent/5079163/-_Xploitz_Pirates___-_Masters_Password_Collection__1__--_Optim
And PureH@te made a huge wordlist as well (564 MB zipped) http://www.h33t.com/download.php?id=178f55c67ca0f522831dbc67042a34983e6652f5&f=Purehates%20Wordlist%20%5Bpurehate%5D%5Bh33t%5D.torrent
Dear Der ..... At G Mail dot Com. Thanks for the links. However, I have no idea what to do with a torrent. Can you please enlighten me?
Dear Der- I consolidated the passwords you recommended (above) into a gonzo 5.7 gigabyte file. No luck! Your little treasure, wifite, could not find the password. So now my question is,.. How do I get John The Ripper to 'brute force' crack the cap files handed to me by wifite?
Hey Boss- I read that the people at Hak5 put together a 120 gigabyte password file. Do you know where it is? Also, can you recommend a good tutorial for John The Ripper? I can't figure our how to set the password length (min ? chars, max ? chars). Also I read that John can 'mangle' a word list and add more options. How do you do that?
""Dear Der ..... At G Mail dot Com. Thanks for the links. However, I have no idea what to do with a torrent. Can you please enlighten me?""
what about on mac with macport ?
Wifite an excellent program. I use ubuntu 11.10 Oneiric OCELOT, and TP-LINK wireless usb WN722N. less than 10 minutes was able to get the WEP password 2 acces point. I have not tried for WPA Encryption. :D
I'm getting hacked by my girlfriend, how do stop this from going on?
I'm getting hacked by my girlfriend, how do stop this from going on?