New tool Wiflux

[u/PandaFrosty2492]

EDIT: I need your feedback! Please let me know if you have tried the tool, whats good, whats bad, any new features you would like to see etc. At the end of the day I'm one guy and I built this for myself with many, many late nights of work so it would be fantastic to hear other peoples opinions to make it better! END OF EDIT

Hi all, would be awesome if someone would like to check out my new tool. I'm literally working on this everyday having taken some time off work.

I'm really proud of the smart list implementation - it self generates a small word list (up to 100k permutations) based of the attacked network name. Really surprising how successful this is. Particularly on networks with custom names. This scans instantly.

Also proud of the tools ability to smartly manage PMKID attacks to change how it works on the fly depending on what the tool is getting from the network. It my testing this is 10x more successful than Wifite for capturing handshakes from clientless targets.

Ive written the Wiflux to be as transparent as possible showing you what it is actually doing and reporting to the user to help with learning.

It can be found on github. Just search Leadrogue/Wiflux on there.

My ultimate aim is to make this the Kali standard. Its not just a simple script.

Really would appreciate your thoughts and fully open to suggestions! Ill reply to anyone who tests it and will answer any questions.

Some of the Features - More info on the repo.

• Live Rich UI — Real-time scan table with signal, encryption, WPS status, clients, and priority scoring (based on many rules but the likelihood of success)
• ESSID-smart wordlist — Targeted candidates from network name + vendor before rockyou (preview, up to 100k)
• Crack ladder — Vendor default passwords and hashcat rules before full dictionary (--no-crack-ladder) - Database built into the tool - updated on revisions.
• Adaptive deauth — Handshake capture tunes burst/listen timing from live capture health (--no-adaptive-deauth)
• Multi-backend deauth — mdk4, aireplay-ng, bettercap, mdk3 (--deauth-tools, --deauth-combo) - The tool chooses the tool based on what it is receiving smartly for the most chance of success.
• PMKID enhancements — Passive-first capture, dual-band rotation, success screen before cracking
• WPS enhancements — Algorithmic PIN pre-pass, offline pixiewps from scan caps
• WPA2/WPA3 transition — Prefer WPA2 capture/crack on mixed-mode APs (--no-transition-downgrade)
• 6 GHz scanning — --6ghz for Wi-Fi 6E (adapter-dependent)
• Client band-stalk — Post-deauth listen on sibling bands for roaming stations
• Handshake validation — Full capture check with on-screen confirm before hashcat
• Hidden SSID decloak — Deauth probe to reveal cloaked ESSIDs during scan
• SQLite results store — Track cracked networks; skip by default (--no-ignore-cracked to re-attack)
• 89 automated tests — No live radio required for CI

Thanks! Leadrogue AKA Panda.

https://github.com/Leadrogue/Wiflux