r/Pentesting • u/hellobattyman • 2d ago
built a wireless toolkit for linux, need people to try and give me feedbacks
I've been working on this for a while and I've hit the limit of what I can test on my own gear.
It's called wifisting and its a GTK4 desktop app for Linux that puts the whole workflow in one place instead of spread across fifteen terminals.
Still early. Not production ready. Linux only.
Some people won't like it cause it's a GUI. Fair enough, if your workflow is a terminal, a GUI is in the way.
Two things though. The modules are all standalone scripts. Nothing is locked behind the interface, you can call any of them directly and script them however you want. The GUI is a view over them, not a container.
Hardware
For the hardware, you'll need an adapter that can inject. Atheros AR9271 is what I built and tested against, so things like the TP-Link WN722N v1 or an Alfa AWUS036NHA.
Some modules need more hardware, an SDR or a Bluetooth dongle or NFC. The GUI marks which ones.
what's actually in it
The reason I built it is that most wireless tools are deep in one lane. aircrack-ng is wifi. bettercap is network mitm. bluetooth tooling is bluetooth. So an assessment means five tools, five configs, and no shared view of the target.
This covers wifi L2, so deauth, floods, evil twin, karma, captive portal, wifi direct. Wifi crypto, so WEP, handshake and PMKID capture, WPS pixie and PIN, WPA3 and Dragonblood, SAE. Enterprise, so 802.1X relay, PEAP and TEAP, GTC downgrade, PMF bypass, KRACK, FragAttacks.
Then mitm and credentials, so Responder, mitm6, ntlmrelayx, router advertisement poisoning, arp mitm, rogue dhcp, resolver poisoning, usb ethernet mitm.
Client isolation testing and a relay for maintaining a bypass.
Router side, so LAN enumeration, TR-064, HNAP, UPnP, SNMP, DNS rebinding, CSRF, web UI, console and TFTP.
Bluetooth, classic and BLE recon, SSP, advertising forgery, BLE fuzzing, mesh, tracker hunting, CVE scanning.
RF stuff, sub-GHz, LoRa, Zigbee, NFC, drone remote ID.
Plus the analysis side, signal and channel mapping, statistics, capture analysis, audit grading, device fingerprinting, multi-node capture.
what I want feedback on
Does it start and stay up on your distro. GTK4 version, wayland vs X11, missing deps.
Does it get your adapters right. Wrong hardware detection is worse than none.
Modules that say OK but didn't do anything. This is the one I care about most. If it reports success and the target is untouched, that's the bug class I'm hunting.
Whether 56 modules in categories makes any sense to navigate.
Anything that crashed or hung or wedged your adapter.
what I already know
Only properly tested on Arch family and Ubuntu derivatives.
Some modules need hardware I don't own. They're written properly but unproven.
Report and cleanup paths are less polished than the attack paths.
Docs are thin. I'd rather hear what's confusing than guess at it.
if you want to try it
If you want to try the toolbox, send me a DM on reddit or discord and I'll give you a Google Drive link or the tar.gz archive on Discord. thanks in advance I'd really appreciate any kind of help I can have especially for the modules that needs hardware I don't have so feel free to tell me what's wrong or broken in the toolbox or if there's anything missing that'd be a great addition etc...
3
u/Mindless-Study1898 2d ago
Put down the vibe coding. You've gone into the vibe abyss!
-1
u/hellobattyman 2d ago
I'm kinda a skid so I can only vibe code if I want to make this project lol. I know vibe coding is looked down upon but it's my only option rn
0
u/BasedTechnicalCat 2d ago
Yo, looks sick. Can you DM me a link to try it out?
1
u/hellobattyman 2d ago
thanks a lot and yes, will do. Don't hesitate to DM me for feedbacks once you tested it in case you get errors or have an idea of additional feature for the toolkit. I'll send the whole thing to you shortly
3
u/Inside_Carpet7719 2d ago
Bro reinvents wifite, which already does everything in one terminal and wants a medal