Wifiphisher

What Wifiphisher is

Wifiphisher is a free, Linux-based rogue access point framework for penetration testers conducting red team engagements or Wi-Fi security testing. It supports customized web phishing scenarios for security exercises, including scenarios that capture credentials or deliver payloads. Its association techniques include Evil Twin, KARMA, and Known Beacons. The tool provides community-driven phishing templates, and users can create custom scenarios. Python modules can extend its capabilities, but extension code runs without a sandbox. Wifiphisher identifies Kali Linux as its officially supported distribution and is also available as source code and through packages for Linux security distributions, including Kali Linux and Arch Linux. Running it requires a wireless adapter that supports AP and monitor modes, packet injection, and netlink-capable drivers. The project distributes Wifiphisher under the GNU General Public License version 3 and recommends verifying release integrity using the detached GPG signatures and checksums it provides. Its default captive portal uses a self-signed certificate; the FAQ recommends other security tools to bypass HSTS or HTTPS. The project directs users to GitHub to report bugs or suggest improvements and advises reading its FAQ first.

Who it suits

Wifiphisher is intended for penetration testers conducting red team engagements or Wi-Fi security testing on Linux. It suits users who can provide the required wireless adapter and want to build or extend testing scenarios with templates or Python modules.

Getting started

1. Visit the Wifiphisher website and review the FAQ.
2. Obtain the source code or a package for a supported Linux security distribution.
3. Use Kali Linux for the officially supported distribution.
4. Prepare a wireless adapter supporting AP and monitor modes, packet injection, and netlink-capable drivers.
5. Verify release integrity with the provided detached GPG signature and checksum.
6. Use community templates or create a custom scenario.

Verdict

Choose Wifiphisher if you are a penetration tester conducting red team or Wi-Fi security work on Linux and have compatible wireless hardware. Its intended use is specialized, and the unsandboxed extensions and self-signed default portal are important considerations for security testing.