-
Aircrack:
Capture client handshake and check the user input password (WPA/WPA2/WPA3). -
Evil Twin Attack:
Creates a rogue access point (AP) mimicking the target network, thus tricking clients into connecting to it. -
Karma Attack:
Automatically detects devices probing for known networks and sends spoofed responses to trick them into connecting to the rogue AP. -
Deauther & Advanced Attacks:
Disconnects targets using standard deauthentication frames or advanced techniques for Wi-Fi 6 (e.g., negative TX power, EAPOL manipulation, and invalid PMKID injection).
Use the Online Flasher to flash your device.
WifiPhisher for ESP32 is a custom implementation of a phishing tool designed for the ESP32 microcontroller. It performs Evil Twin attacks, allowing users to test the security of Wi-Fi networks and execute social engineering phishing scenarios. The project is built using PlatformIO and the ESP-IDF framework.
-
PlatformIO:
Integrated into your IDE (e.g., Visual Studio Code). Install PlatformIO. -
ESP-IDF Framework:
Required for building and flashing the firmware. PlatformIO automatically configures this as part of the development environment.
git clone https://github.com/Alexxdal/WifiPhisher.git
cd WifiPhisherOpen the project with Visual Studio Code and ensure that PlatformIO is correctly set up.
- Select your target device (e.g. esp32s3 )
- Connect your ESP32 board to your computer via USB.
- Click "Upload"
To debug or monitor the ESP32's output logs:
- Use PlatformIO serial monitor:
pio device monitor- To stop the monitor, press
Ctrl+C.
- Connect to the ESP32 rogue AP (default: "MagicWifi" password: "MagicWifi1234" ).
- Open a browser and go to
http://192.168.4.1/admin.html.
- Select the target Wi-Fi network to impersonate.
- Choose a phishing scenario (e.g., fake login page).
Once configured, the ESP32 will execute the Evil Twin attack and serve the phishing page.
Here are some visual examples of the tool in action:
Contributions are welcome! You can improve phishing scenarios, optimize performance, or add new features.
This tool is intended strictly for educational purposes and ethical hacking in controlled environments. Unauthorized use of WifiPhisher for malicious purposes is illegal and punishable by law. Always ensure you have explicit permission before conducting any testing.






