WifiZoo v1.2 – Gather Wifi Information Passively


WifiZoo is a tool to gather wifi information passively. Similar to dsniff but for wireless work, the author wanted to do something wifi-related somewhat helpful in wifi pentesting. Something of an extension of Ferret from Errata.

It’s essentially a tool to get information from open wifi networks without joining any network, and covering all wifi channels. Most of the packet parsing is done by Scapy.

WifiZoo does the following:

  • Gathers bssid->ssid information from beacons and probe responses
  • Gathers list of unique SSIDS found on probe requests
  • Gathers the list and graphs which SSIDS are being probed from what sources
  • Gathers bssid->clients information and outputs it in a file
  • Gathers ‘useful’ information from unencrypted wifi traffic (like passwords/credentials etc)

Requirements

  • Python
  • Scapy
  • Kismet (if you want to do channel hopping)
  • Logs are stored in ./logs/ (so make the directory)

You can download WifiZoo here:

wifizoo_v1.2.tgz

Or you can read more here.

Posted in: Hacking Tools, Networking Hacking Tools, Wireless Hacking

, , , , ,


Latest Posts:


Axiom - Pen-Testing Server For Collecting Bug Bounties Axiom – Pen-Testing Server For Collecting Bug Bounties
Project Axiom is a set of utilities for managing a small dynamic infrastructure setup for bug bounty, basically a pen-testing server out of the box with 1-line.
Quasar RAT - Windows Remote Administration Tool Quasar RAT – Windows Remote Administration Tool
Quasar is a fast and light-weight Windows remote administration tool coded in C#. Used for user support through day-to-day administrative work to monitoring.
Pingcastle - Active Directory Security Assessment Tool Pingcastle – Active Directory Security Assessment Tool
PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level based on a risk and maturity framework.
Second Order - Subdomain Takeover Scanner Tool Second Order – Subdomain Takeover Scanner Tool
Second Order Subdomain Takeover Scanner Tool scans web apps for second-order subdomain takeover by crawling the application and collecting URLs (and other data)
Binwalk - Firmware Security Analysis & Extraction Tool Binwalk – Firmware Security Analysis & Extraction Tool
Binwalk is a fast and easy to use Python-based firmware security analysis tool that allows for firmware analysis, reverse engineering & extracting of firmware.
zBang - Privileged Account Threat Detection Tool zBang – Privileged Account Threat Detection Tool
zBang is a risk assessment tool for Privileged Account Threat Detection on a scanned network, organizations & red teams can use it to identify attack vectors


6 Responses to WifiZoo v1.2 – Gather Wifi Information Passively

  1. Pantagruel November 12, 2007 at 12:16 pm #

    A very nice addition to the wireless tool set indeed.
    Works quite well in our secured environment, at home I honestly do not need to bother. A multitude of open access points simply because users where never told about the options to secure their wireless gear.

  2. Reticent November 12, 2007 at 10:12 pm #

    I was about to ask what this tool had over the aircrack-ng suite of applications until I saw the passwords/credential gathering feature. You really have to feel for people still running unencrypted wireless points!

  3. normalsecrecy November 13, 2007 at 7:24 am #

    this will be a nice complement to other tools. it’ll be interesting just to see how many passwords can be snooped.

  4. Goodpeople November 13, 2007 at 9:52 pm #

    It would be even nicer if it could automatically crack WEP and WPA, but I understand that that’s in the works.

    I particulary like the ability to make a graph of the network. That could prove to be a very usefull feature.

    Keep up te good work!

  5. dirty November 16, 2007 at 10:58 pm #

    The web interface is a nice feature.

    Darknet BTW – the download link provide is wrong you have v1.1
    http://community.corest.com/~hochoa/wifizoo/wifizoo_v1.2.tgz

  6. Sir Henry December 15, 2007 at 3:38 am #

    I have been looking at scapy for a little while now to assist me in developing a hacktool in Python. Scapy is brilliant in its construction and function. This tool, however, looks like it would be pretty useful while mapping APs.