derv82 / wifit3
git clone https://github.com/derv82/wifit3.git
v0.5.2 · 3d ago
Wifite but USB-only & cross-platform.
+11
stars, 24h · #1,302
+~77
stars, 7 days · #1,628
+~330
stars, 30 days · #1,583
2.6k
★ total · +3% this week
260
forks · 16 open issues
Star history (as recorded here)
LanguagePython
LicenseGPL-2.0
Created2026-06-20 (4mo ago)
Last push1d ago
Watchers16
OwnerUser
GitHub topics
Links
- GitHub: github.com/derv82/wifit3
- Releases · Issues · Hacker News mentions
README excerpt
# wifit3 > A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. > *At least* one of the supported USB adapters is **required**. ## Why? * **Cross-Platform:** Runs identically on Linux, macOS, and Windows. * **Wireless Driver Heaven:** Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS. * **Zero Runtime Dependencies:** No `aircrack-ng` or `reaver`, just pure Python with PyUSB & Textual libraries. --- ## Features ### Reconnaissance & Analysis - **Multi-Card Aggregation:** Capture packets across multiple adapters simultaneously; pick a dedicated card to inject. - **Real-time Scanner:** 2.4GHz & 5GHz channel-hopping (split for multi-cards); tracks signal strength, encryption suites, WPA3/SAE transition modes. - **AP & Client Identification:** Fingerprints device vendors and categories; extracts router make and model from WPS beacons. - **VAP Decloaking:** Identifies hidden networks by correlating their BSSIDs with known visible siblings. - **Packet Dashboard:** Visualizes real-time beacon, data, injection, and deauthentication packet rates. ### Attacks & Captures - **WPA/WPA2 Handshakes:** Passive sniffing and targeted deauthentication; validates crackable pairs; exports `.pcap` and `.hc22000` files. - **PMKID Harvesting:** Active association harvest and passive sniffing for WPA/WPA2 PMKID key material (`.hc22000`). - **EvilTwin WPA3 Downgrade:** Clones the AP and evicts clients (via CSA, BTM, and de-auths) to capture handshakes. Works on single and multiple cards. - **WPS Recovery Suite:** - **PixieDust (2 Modes):** Instant offline PIN recovery exploiting *Null Secret* and *Static Secret* PRNG weaknesses. - **PushButton (PBC):** Detects physical WPS button presses and immediately extracts the plaintext WPA PSK. - **PIN Brute-Force:** Resumable WPS PIN cracking with known-PIN database and AP lock monitoring. - **WEP Suite:** Pure Python ARP replay, ChopChop, Fake Authentication, and PTW key recovery. ## Screenshots | Scanner | Focus (single target) | |---|---| | | | ## Supported Hardware > **Important:** *At least one supported USB wireless adapter is required.* | Chipset | Bands | Cards (Make + Model) | |---|---|---| | Atheros AR9271 | 2.4 GHz | ALFA AWUS036**NHA**, TP-Link TL-WN722N V1 | | MediaTek MT7601U | 2.4 GHz | Generic unbranded "nano" dongles | | MediaTek MT7610U | 2.4 / 5 GHz | ALFA AWUS036**ACHM**, Panda PAU0B | | MediaTek MT7612U | 2.4 / 5 GHz | ALFA AWUS036**ACM** | | MediaTek MT7921AU | 2.4 / 5 GHz | ALFA AWUS036**AXM[L]**, Panda PAU0F | | MediaTek MT7925U | 2.4 / 5 GHz | Netgear A9000 | | Realtek RTL8812AU | 2.4 / 5 GHz | ALFA AWUS036**ACH** | | Realtek RTL8814AU | 2.4 / 5 GHz | ALFA AWUS1900, ASUS USB-AC68 | | Realtek RTL8821AU | 2.4 / 5 GHz | ALFA AWUS036**ACS**, TP-Link Archer T2U Plus/Nano | | Realtek RTL8821CU | 2.4 / 5 GHz | Auscoumer 600 Mbps, Mercusys MU6H | | Realtek RTL8922AU | 2.4 / 5 GHz | ASUS USB-BE93 | | Realtek RTL8822BU | 2.4 / 5 GHz | TP-Link T3U Plus, Archer T4U v3 / T4U+ | |