legendarynacar/PiDense

📡Monitor illegal wireless network activities. (Fake Access Points)

        ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄   ▄▄▄▄▄▄▄▄▄▄▄  ▄▄        ▄  ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄ 
       ▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░▌ ▐░░░░░░░░░░░▌▐░░▌      ▐░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌
       ▐░█▀▀▀▀▀▀▀█░▌ ▀▀▀▀█░█▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░▌░▌     ▐░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀▀▀ 
       ▐░▌       ▐░▌     ▐░▌     ▐░▌       ▐░▌▐░▌          ▐░▌▐░▌    ▐░▌▐░▌          ▐░▌          
       ▐░█▄▄▄▄▄▄▄█░▌     ▐░▌     ▐░▌       ▐░▌▐░█▄▄▄▄▄▄▄▄▄ ▐░▌ ▐░▌   ▐░▌▐░█▄▄▄▄▄▄▄▄▄ ▐░█▄▄▄▄▄▄▄▄▄ 
       ▐░░░░░░░░░░░▌     ▐░▌     ▐░▌       ▐░▌▐░░░░░░░░░░░▌▐░▌  ▐░▌  ▐░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌
       ▐░█▀▀▀▀▀▀▀▀▀      ▐░▌     ▐░▌       ▐░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░▌   ▐░▌ ▐░▌ ▀▀▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀▀▀ 
       ▐░▌               ▐░▌     ▐░▌       ▐░▌▐░▌          ▐░▌    ▐░▌▐░▌          ▐░▌▐░▌          
       ▐░▌           ▄▄▄▄█░█▄▄▄▄ ▐░█▄▄▄▄▄▄▄█░▌▐░█▄▄▄▄▄▄▄▄▄ ▐░▌     ▐░▐░▌ ▄▄▄▄▄▄▄▄▄█░▌▐░█▄▄▄▄▄▄▄▄▄ 
       ▐░▌          ▐░░░░░░░░░░░▌▐░░░░░░░░░░▌ ▐░░░░░░░░░░░▌▐░▌      ▐░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌
        ▀            ▀▀▀▀▀▀▀▀▀▀▀  ▀▀▀▀▀▀▀▀▀▀   ▀▀▀▀▀▀▀▀▀▀▀  ▀        ▀▀  ▀▀▀▀▀▀▀▀▀▀▀  ▀▀▀▀▀▀▀▀▀▀▀ 

                             Monitor illegal wireless network activities.
              ------------------------------------------------------------------------------

Purpose

Monitor illegal wireless network activities.

• Similar SSID broadcasts
• Detects SSID brute
• Detects beacon flood
• Monitor deauthentication attack
• Same SSID broadcasts
• Calculates unencrypted wireless networks density
• Watches SSID broadcasts at the blacklist.
• KARMA Attacks
• WiFi Pineapple Activities

Capabilities (Now)

• Calculates Unencrypted wireless network density
• Finds same ssid, different encryption
• Watches SSID broadcasts at the blacklist.
• KARMA Attacks
• WiFi Pineapple Activities

Working Principle for PiDense

• Collects all the packets from Wireless Networks.
• Analyzes all the beacon packets.
• If PiDens detects more than defined threshold of OPN number, or different encryption with same SSID info ;
• Logs the activity with some extra information within defined template.

Soon to be added features

• Blacklist SSID analysis (Added for BHASIA)
• Company name setting for illegal wireless attack activities (Monitoring)
• Probe request analysis for SSID brute
• Beacon analysis for SSID flood

Example

• Video: https://www.youtube.com/watch?v=hsMz6zM-yks

--------------------------------------------------------------------------------

Usage

Requirements

• Hardware: TP LINK TL-WN722N
• Modules: scapy, time, termcolor, argparse

Kali Linux:

Download PiDense:

git clone https://github.com/WiPi-Hunter/PiDense.git

It's done!

Run the program with following command:

Monitor mode:

airmon-ng start interface(wlan0,wlan1) (Monitor mode)

or 

ifconfig wlan0 down
iwconfig wlan0 mode Monitor
ifconfig wlan0 up

Run:

cd PiDense
python pidense.py -h