Techzone/Wifite

Wifite

2 min readArticle

Wifite is an automated WiFi auditing tool written in Python. It scans for nearby wireless networks, selects targets, and automatically runs the appropriate attacks — WPA handshake capture, WPS Pixie Dust, PMKID attack, and others. Great for quickly testing multiple networks without running each aircrack-ng command manually.

Installation

bash 
# Pre-installed on Kali, update it
sudo git clone https://github.com/derv82/wifite2 /opt/wifite2
cd /opt/wifite2
sudo python setup.py install

# Or install directly
pip install wifite

# On Kali
wifite --help

Dependencies

Wifite calls these tools — make sure they're installed:

bash 
apt install aircrack-ng hashcat tshark hcxdumptool hcxtools reaver bully pyrit cowpatty

Basic Usage

bash 
# Run interactively — shows list of networks, you select targets
sudo wifite

# Auto-attack all found networks (use carefully)
sudo wifite --all

# Target specific BSSID
sudo wifite --bssid AA:BB:CC:DD:EE:FF

# Target specific SSID
sudo wifite --essid "TargetNetwork"

# Specify interface
sudo wifite -i wlan0

Attack-Specific Flags

bash 
# WPA handshake only
sudo wifite --wpa

# WPS attacks only (Pixie Dust + PIN brute)
sudo wifite --wps

# PMKID attack (doesn't need client connected)
sudo wifite --pmkid

# Skip WEP (it's dead)
sudo wifite --no-wep

# Combine: WPA + WPS
sudo wifite --wpa --wps --bssid AA:BB:CC:DD:EE:FF

After Capture — Cracking

Wifite automatically captures handshakes and saves them. Then crack:

bash 
# Wifite saves to /root/hs/ or current dir
ls hs/

# Crack the .cap file
aircrack-ng -w /usr/share/wordlists/rockyou.txt hs/handshake_TargetNetwork_AA-BB-CC-DD-EE-FF.cap

# Or with hashcat (convert first)
hcxpcapngtool -o hash.hc22000 hs/handshake.cap
hashcat -m 22000 hash.hc22000 rockyou.txt

PMKID Attack (Wifite's Best Feature for WPA)

PMKID attack doesn't require a connected client — faster setup:

bash 
sudo wifite --pmkid --bssid AA:BB:CC:DD:EE:FF
# Wifite will capture the PMKID and save it
# Then crack with hashcat mode 22000
hashcat -m 22000 pmkid.hc22000 rockyou.txt -r /usr/share/hashcat/rules/best64.rule

Config/Wordlist

bash 
# Specify wordlist for auto-cracking after capture
sudo wifite --dict /usr/share/wordlists/rockyou.txt

# Set cracking timeout
sudo wifite --crack-timeout 60

Useful Flags

Flag Description
--kill Kill interfering processes (NetworkManager)
--random-mac Randomize MAC address
--channel 6 Scan specific channel
-p 100 Minimum power level to target
--no-deauth Don't send deauth frames
--timeout 60 Attack timeout per target

Tips

  • Wifite auto-kills NetworkManager — this will drop your internet connection
  • Always run with sudo
  • -p 100 filters weak signals so you don't waste time on distant APs
  • If WPS Pixie Dust fails immediately, try extended PIN brute (add --wps-timeout 3600)
  • PMKID attack is usually faster than waiting for a handshake

See Also

  • lazy-script-wifi-automation - Another automation wrapper
  • airgeddon-automated-wifi-attacks - Airgeddon (similar all-in-one)
  • future-of-tech-emerging-trends-2023 - Automated WiFi hacking overview
techzonesite.comUnlock Your IT Potential