Techzone/Airgeddon

Airgeddon

3 min readArticle

Airgeddon is a comprehensive, menu-driven bash script that automates virtually all wireless attack scenarios. It wraps the aircrack-ng suite, reaver, bully, hostapd, dnsmasq, and many other tools into a single interface. One of the most complete WiFi auditing tools available.

Note: The file is named airrgedon-ng — this is the same Airgeddon tool, just a slightly misspelled filename.

Installation

bash 
# Clone
git clone https://github.com/v1s1t0r1sh3r3/airgeddon

cd airgeddon

# Run (will check/install dependencies)
sudo bash airgeddon.sh

Dependencies

Airgeddon checks for required tools and tells you what's missing:

bash 
sudo apt install aircrack-ng reaver bully hostapd dnsmasq mdk3 mdk4 \
  hcxdumptool hcxtools hashcat john-the-ripper tshark iw wireless-tools

Main Menu Structure

shell 
1. Select interface
2. Put interface in monitor/managed mode
3. DoS attacks menu
4. Handshake/PMKID tools menu
5. Offline password decrypt menu
6. Evil Twin attacks menu
7. WPS attacks menu
8. WEP attacks menu
9. Enterprise attacks menu
0. Exit

Common Workflows

WPA/WPA2 Handshake Capture

shell 
1. Main Menu → Select interface (wlan0)
2. Put interface in monitor mode
3. Handshake/PMKID tools menu
4. Capture handshake → select target from scan
5. DoS to force handshake (sends deauth automatically)
6. Wait for "Handshake Captured!"
7. Offline decrypt menu → aircrack/hashcat → select wordlist

Evil Twin Attack

shell 
1. Interface → Monitor mode
2. Evil Twin attacks menu
3. Select: "Evil Twin AP with captive portal"
4. Scan and select target AP
5. Airgeddon creates:
   - AP with same SSID as target
   - DHCP server
   - DNS server (redirects all to captive portal)
   - Web server with credential capture page
6. Deauths real AP so clients connect to evil twin
7. Credentials captured when user enters WiFi password

WPS Attacks

shell 
1. WPS attacks menu
2. Options:
   - Pixie Dust attack (fast offline attack)
   - PIN bruteforce (slow but thorough)
   - Null PIN attack (instant if vulnerable)
3. Select target from scan
4. Attack runs automatically

PMKID Attack

shell 
1. Handshake/PMKID tools menu
2. PMKID capture (no client needed)
3. Select target
4. hcxdumptool captures PMKID automatically
5. Offline decrypt → Hashcat mode 22000

DoS Attacks Menu

shell 
Options:
- mdk3/mdk4 beacon flood
- mdk3/mdk4 authentication DoS
- aireplay-ng deauthentication
- WIDS confusion attack

Enterprise Attacks (WPA-Enterprise)

shell 
Enterprise attacks menu:
- Fake WPA Enterprise AP (captures MSCHAPV2 hashes)
- Configure certificate for EAP capture
- Crack MSCHAPV2 with asleap or hashcat

Key Flags / Options

When running from command line (skip menus):

bash 
# Specify interface directly
sudo bash airgeddon.sh --iface wlan0

# Check for updates
sudo bash airgeddon.sh --update

Airgeddon vs Wifite vs Lazy-Script

Tool Completeness Ease of Use Best For
Airgeddon High Medium Comprehensive attacks, evil twin
Wifite Medium Very Easy Automated batch attacking
Lazy-Script Low Easy Learning, basic attacks

Airgeddon is the most complete. Wifite is the most automated for batch scanning.

See Also

  • wifite-automated-wifi-hacking - More automated alternative
  • lazy-script-wifi-automation - Simpler alternative
  • future-of-tech-emerging-trends-2023 - Automated WiFi hacking overview
techzonesite.comUnlock Your IT Potential