Deauth+Clone+Verify not working properly.

[Ell00730]

Describe the bug:
The Deauth+Clone+Verify features don't work properly, it always says false pwd even though the password entered is correct, how do you know it's correct, the one on the screen always says false pwd.

Steps To Reproduce:
Wifi/ Wifi Atks/ Target Atks (Scanning And Selecting target SSID)
When you're done with that, I'll choose Deauth+Clone+Verify.

• Device used: Cyd Esp32 (2 usb)

Expected behavior:
When you're done deauthing and cloning, There's a captive portal where you'll enter the wifi password? If you enter it incorrectly, it'll be false, right?

Actual behavior:
But even though the wifi password I entered is correct, it's still false. How do I know if it's correct? It's always a false password on my screen.

Additional context / logs:
I hope it can be fixed because those features are a waste if they can't be used properly.

[Huzzla101]

In normal scenarios you would check the passw regardless of the given circumstances ... Correct? And how is it possible to know the validity of a passw before you have obtained enough info surrounding it.. Am i right ?

…

On Thu, Jan 1, 2026 at 9:22 AM Ell00730 ***@***.***> wrote: *Ell00730* created an issue (BruceDevices/firmware#1977) <#1977> *Describe the bug:* The Deauth+Clone+Verify features don't work properly, it always says false pwd even though the password entered is correct, how do you know it's correct, the one on the screen always says false pwd. *Steps To Reproduce:* Wifi/ Wifi Atks/ Target Atks (Scanning And Selecting target SSID) When you're done with that, I'll choose Deauth+Clone+Verify. - Device used: Cyd Esp32 (2 usb) *Expected behavior:* When you're done deauthing and cloning, There's a captive portal where you'll enter the wifi password? If you enter it incorrectly, it'll be false, right? *Actual behavior:* But even though the wifi password I entered is correct, it's still false. How do I know if it's correct? It's always a false password on my screen. *Additional context / logs:* I hope it can be fixed because those features are a waste if they can't be used properly. — Reply to this email directly, view it on GitHub <#1977>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BLDL6BQWESTC7N25QQMU7IL4ETKM5AVCNFSM6AAAAACQOEJC5SVHI2DSMVQWIX3LMV43ASLTON2WKOZTG43TIMRZGY4DOMI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Kind Regards C.R May Prosperity allways be with us!!

[Ell00730]

@Huzzla101

I checked everything. This is what I did, I created another ssid on my wifi. And I tried the features Deauth+Clone+Verify on my cyd. And the wifi password I created is very simple.so I can see what's wrong. I just put Qwerty123 but even though that's what I typed into the evil portal, even though I put in the correct password for my wifi, the one on the screen is still false.
always "valid: false" on the screen on my cyd even though I just newly created that wifi ssid and the password is very simple so it's easy to type, I just wanted to test it, but even if it's correct, it's still false.

[Huzzla101]

Ah ok i see.. The verify part actually checks the validity of passw before you get it... Thats magic.. Lets see if anyone can help you.. I havent used that feature yet and Happy New Year! =)

…

On Thu, Jan 1, 2026 at 9:51 AM Ell00730 ***@***.***> wrote: *Ell00730* left a comment (BruceDevices/firmware#1977) <#1977 (comment)> @Huzzla101 <https://github.com/Huzzla101> I checked everything. This is what I did, I created another ssid on my wifi. And I tried the features Deauth+Clone+Verify on my cyd. And the wifi password I created is very simple.so I can see what's wrong. I just put Qwerty123 but even though that's what I typed into the evil portal, even though I put in the correct password for my wifi, the one on the screen is still false. always "valid: false" on the screen on my cyd even though I just newly created that wifi ssid and the password is very simple so it's easy to type, I just wanted to test it, but even if it's correct, it's still false. — Reply to this email directly, view it on GitHub <#1977 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BLDL6BUF6PBGEA5Y233DNTL4ETN2BAVCNFSM6AAAAACQOEJC5SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTOMBTGQZDSOJVGU> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- Kind Regards C.R May Prosperity allways be with us!!

[Ell00730]

@Huzzla101

yeah, and i hope someone can help me because i can't configure how to fix it on my own.

[bmorcelli]

I updated beta just yesterday.. we were having some RAM issues that might have been fixed now regarding WebUI and EvilPortal

Can you test it, please?

[Ell00730]

@bmorcelli

okay, I'll update to the latest update first so I can test it, hopefully it will work fine, thanks

[Ell00730]

@bmorcelli

I have good news, it works properly now. I installed the beta. Bruce 23857bc and works great now I can enjoy it now. btw when will it be released in the release version. Sorry it took me a while to test, I only use an Android phone, I just flashed the firmware via otg but now it's all good

[bmorcelli]

Soon, I hope..

We are looking at some BLE problems atm..

[Ell00730]

@bmorcelli

I hope it gets fixed and you find the problem as soon as possible, goodluck guys and thank for fixing my problem.

[Ell00730]

@bmorcelli

Just now I discovered another problem about the evil portal, I was just testing it and I saw that when you connect to the clone ssid it doesn't automatically open. You still have to manually type its gateway into your browser, it would be better if it automatically opened a captive portal so it would look like it wasn't just a cloned SSID.

[Ninja-jr]

@bmorcelli

Just now I discovered another problem about the evil portal, I was just testing it and I saw that when you connect to the clone ssid it doesn't automatically open. You still have to manually type its gateway into your browser, it would be better if it automatically opened a captive portal so it would look like it wasn't just a cloned SSID.

The problem with it is the newer devices security policies which will require quite a few changes to the evil portal mechanism. I've myself a few ideas to make it work as it should or at least as close to it as i can. I'm trying to figure out how to get the ble spam to work (that for similar reasons stubbornly doesn't want to) and then ill be trying my ideas for the evil portal refactoring. It might still take a bit of time but is sure in my plans...but then ble came into the way of me starting it.

[Ell00730]

@Ninja-jr

Now that I've figured it out, all I did was create a captive portal on 192.168.4.1 and then I just put my own html so it works properly.

[Ninja-jr]

Yeah but still some devices might not load it properly i think they check quite a few things before allowing a captive portal notification to show most of the time specially with android and ios we would be better spoofing the known working domains used for legitimate portals aswell as certificate spoofing when we can as most only allow https connections