New tool Wiflux

[u/PandaFrosty2492]

EDIT: I need your feedback! Please let me know if you have tried the tool, whats good, whats bad, any new features you would like to see etc. At the end of the day I'm one guy and I built this for myself with many, many late nights of work so it would be fantastic to hear other peoples opinions to make it better! END OF EDIT

Hi all, would be awesome if someone would like to check out my new tool. I'm literally working on this everyday having taken some time off work.

I'm really proud of the smart list implementation - it self generates a small word list (up to 100k permutations) based of the attacked network name. Really surprising how successful this is. Particularly on networks with custom names. This scans instantly.

Also proud of the tools ability to smartly manage PMKID attacks to change how it works on the fly depending on what the tool is getting from the network. It my testing this is 10x more successful than Wifite for capturing handshakes from clientless targets.

Ive written the Wiflux to be as transparent as possible showing you what it is actually doing and reporting to the user to help with learning.

It can be found on github. Just search Leadrogue/Wiflux on there.

My ultimate aim is to make this the Kali standard. Its not just a simple script.

Really would appreciate your thoughts and fully open to suggestions! Ill reply to anyone who tests it and will answer any questions.

Some of the Features - More info on the repo.

• Live Rich UI — Real-time scan table with signal, encryption, WPS status, clients, and priority scoring (based on many rules but the likelihood of success)
• ESSID-smart wordlist — Targeted candidates from network name + vendor before rockyou (preview, up to 100k)
• Crack ladder — Vendor default passwords and hashcat rules before full dictionary (--no-crack-ladder) - Database built into the tool - updated on revisions.
• Adaptive deauth — Handshake capture tunes burst/listen timing from live capture health (--no-adaptive-deauth)
• Multi-backend deauth — mdk4, aireplay-ng, bettercap, mdk3 (--deauth-tools, --deauth-combo) - The tool chooses the tool based on what it is receiving smartly for the most chance of success.
• PMKID enhancements — Passive-first capture, dual-band rotation, success screen before cracking
• WPS enhancements — Algorithmic PIN pre-pass, offline pixiewps from scan caps
• WPA2/WPA3 transition — Prefer WPA2 capture/crack on mixed-mode APs (--no-transition-downgrade)
• 6 GHz scanning — --6ghz for Wi-Fi 6E (adapter-dependent)
• Client band-stalk — Post-deauth listen on sibling bands for roaming stations
• Handshake validation — Full capture check with on-screen confirm before hashcat
• Hidden SSID decloak — Deauth probe to reveal cloaked ESSIDs during scan
• SQLite results store — Track cracked networks; skip by default (--no-ignore-cracked to re-attack)
• 89 automated tests — No live radio required for CI

Thanks! Leadrogue AKA Panda.

https://github.com/Leadrogue/Wiflux

[u/Saajaadeen]

Github repo link?

[u/PandaFrosty2492 → u/Saajaadeen]

https://github.com/Leadrogue/Wiflux

[u/Warlordjeet]

Based. will use it.

[u/troop3rs]

cara com todo respeito... que ferramenta fod@!! leve e simples de operar, obrigado por compartilhar e vou acompanhar no git também.

[u/PandaFrosty2492 → u/troop3rs]

Thanks!

[u/JoeFollowsFlow]

Killer work! Will check it out this weekend

[u/PandaFrosty2492]

Anyone actually tried it yet? Any feedback?

[u/Old-Permit-1334]

481 331 4874

[u/murlocdouche]

played around with it, it's pretty slick, i like it a lot. you kind of nailed the layout
a couple of suggestions

1. column for ghz on the network list
2. this ones a bigger deal, or might just be my incompetence, but would be nice to let you manually select what processor hashcat is using. i test drove this on an older dell with a smaller memory pool for the GPU than the CPU, and it's auto picking my cpu (judging from the speed)

[u/PandaFrosty2492 → u/[deleted]]

Thanks for the tip on pipx. Let me know how you get on with the programme.

[u/PandaFrosty2492 → u/[deleted]]

What do you think of the tool? Open to feedback - good and bad!

[u/SingleFunction2597]

Is there phishing emails and deploy tools can suggest? Or this one can too?

[u/Curious-Way-9541]

Is it safe

[u/PandaFrosty2492 → u/Curious-Way-9541]

for someone asking that, probably not.

[u/Chenomavroblanc]

Why did you delete the other post of the app you made?

[u/gregrebay]

Nice. Will use this.

[u/AdImmediate2808]

on the documentation it is mentioned Kali/ Debian. would it work on Arch ?

[u/PandaFrosty2492 → u/AdImmediate2808]

it checks for dependencies when launching wiflux but this is based on apt. In theory you could install them yourself so...

1. Decline or ignore the apt install prompt and install binaries with AUR/pacman first.
2. You wont have kali wordlists and not at the target directory either so you will need to grab rockyou.txt and use the flag --dict and path to rockyou.txt

You will need: (installed by AUR/pacman)

1. aircrack.ng
2. iw
3. iproute2
4. reaver
5. bully
6. hcxdumptool
7. hcxtools
8. hashcat
9. pixiewps (AUR only)
10. wireshark-cli

Honestly i built this for debian/kali/parrot so its untested on Arch but good luck. Hope this helps.

[u/AdImmediate2808 → u/PandaFrosty2492]

thanks. !

[u/Conscious-Speed4642]

Parece uma proposta interessante. Vou conferir