EN
ENNA

WiFi-Pumpkin3

Apache-2.0

๐Ÿ“ก Wireless ยท Python

WiFi-Pumpkin3 is a powerful framework for rogue access point attacks, providing an all-in-one solution for wireless security assessments. It creates a fake access point with built-in DHCP, DNS, and captive portal services, capturing credentials from clients who connect and attempt to authenticate. The framework includes proxy plugins for injecting JavaScript, capturing images, modifying HTML responses, and sniffing unencrypted traffic. WiFi-Pumpkin3 features both a command-line and graphical interface, making it accessible for different skill levels. Its plugin architecture supports custom captive portal templates (mimicking hotel WiFi, corporate portals, social media login pages), transparent proxying with SSL stripping, and integration with external tools like Bettercap and Responder for more sophisticated attacks.

2.4kstars
341forks
2issues
Updated 2y ago

Installation

pip

$ pip install wifipumpkin3

from source

$ git clone https://github.com/P0cL4bs/wifipumpkin3 && cd wifipumpkin3 && pip install .

Use Cases

  • Creating convincing captive portal pages for wireless credential phishing
  • Deploying rogue access points with transparent proxy and traffic inspection
  • Testing user awareness against fake WiFi login pages in security assessments
  • Capturing credentials through SSL stripping and DNS spoofing on rogue networks
  • Running multi-plugin wireless attack campaigns with a graphical interface

Tags

rogue-apcaptive-portalcredential-harvestingevil-twinproxyguiaccesspointdeauthentication-attackmitmproxy-serverpython3rogueapsecuritysniffingspoofingwifipumpkin3wireless

More in Wireless