GO KALI FREE

Wifite

Wireless Attacks

Beginnermedium risk

Wifite is an automated wireless security auditing tool written in Python that simplifies WiFi network assessment. It automates network discovery, monitor mode activation, deauthentication, handshake capture, and password cracking for WEP, WPA, WPA2, and WPS encrypted networks. Pre-installed on Kali Linux, Wifite wraps Aircrack-ng, Reaver, Pixie Dust, and Hashcat into a single streamlined workflow for authorized wireless security testing.

Installation

sudo apt install wifite

Basic Syntax

sudo wifite [options]

Quick Facts

Full Name
Wifite2 (Rewritten Version)
License
GNU GPL v3
Written In
Python 3
Platforms
Linux (Kali, Ubuntu, Parrot, Arch)
Category
Automated Wireless Security Auditing
Attack Types
WEP, WPA, WPA2, WPS, PMKID
First Release
2010 (wifite2 rewrite: 2017)
Author
derv82 (Original), community maintained
GitHub
github.com/derv82/wifite2
Pre-installed
Yes, on Kali Linux

Tool Overview

Wifite is an automated wireless security auditing tool written in Python that streamlines the entire WiFi cracking process. It combines multiple wireless security tools including Aircrack-ng, Reaver, Pixie Dust, and Hashcat into a single automated workflow, making wireless penetration testing accessible to users of all skill levels.

Originally created by derv82 in 2010, Wifite has been revived as wifite2 with support for modern wireless cards, improved attack methodologies, and additional features like PMKID capture, session management, and hashcat integration. It handles the entire workflow from interface setup to password recovery with minimal user interaction.

Unlike manual wireless testing that requires deep knowledge of individual tools, Wifite automates network discovery, monitor mode activation, deauthentication, handshake capture, and password cracking in one seamless process. Security professionals use it for quick wireless assessments where speed is prioritized over manual control.

Wifite is pre-installed on Kali Linux and is the most popular automated WiFi auditing tool in the penetration testing community. Its simple command-line interface makes wireless security testing accessible while still providing advanced options for experienced penetration testers who need customizable attack parameters.

Common Commands

sudo wifiteAuto scan - Launch the interactive scanner to automatically detect and attack nearby wireless networks with full automation
sudo wifite --killKill processes - Stop NetworkManager, wpa_supplicant, and other background processes that conflict with monitor mode
sudo wifite -wpaWPA targets only - Restrict automated attack vectors exclusively to WPA and WPA2 encrypted networks
sudo wifite -wpsWPS targets only - Isolate operations to target only access points running active WPS PIN configurations
sudo wifite --dict wordlist.txtCustom wordlist - Define a specific external dictionary file to use during the automated handshake cracking phase
sudo wifite -i wlan0Specific interface - Use a particular wireless adapter instead of relying on automatic interface detection
sudo wifite --wepWEP only - Focus automated attacks exclusively on WEP-encrypted networks for initialization vector capture
sudo wifite -b AA:BB:CC:DD:EE:FFBSSID filter - Target a specific access point by its unique MAC address for focused auditing
sudo wifite -c 6Channel filter - Scan only a specific wireless channel instead of hopping across all available channels
sudo wifite --num-deauths 5Deauth count - Control the number of deauthentication packets sent per target during handshake capture
sudo wifite --wpa-deauth-timeout 30Deauth timeout - Set the waiting period in seconds between deauthentication attempts
sudo wifite --wpa-attack-timeout 600Attack timeout - Set the maximum time to wait for WPA handshake capture before moving to the next target
sudo wifite --clients-onlyClients only - Only target networks that have active connected clients (required for deauthentication attacks)
sudo wifite -p 60Packet count - Set the number of initialization vector packets to capture per target for WEP attacks
sudo wifite -vVerbose output - Display detailed attack information and debugging data for troubleshooting

Step-by-Step Guide

  1. 1Install Wifite using your package manager: sudo apt install wifite
  2. 2Ensure you have a wireless adapter that supports monitor mode and packet injection
  3. 3Start the tool with administrative privileges: sudo wifite
  4. 4Use --kill flag if NetworkManager or wpa_supplicant interfere with monitor mode
  5. 5Observe the scanning phase as it populates a list of nearby wireless networks
  6. 6Press Ctrl+C when you want to stop scanning and select a target
  7. 7Enter the number corresponding to your target network from the displayed list
  8. 8Wifite will automatically attempt the best attack method for the target encryption type
  9. 9For WPA networks, wait for a 4-way handshake capture before the tool attempts cracking
  10. 10Provide a custom dictionary with --dict for dictionary-based WPA password attacks
  11. 11Review the output for cracked passwords displayed in green text
  12. 12Use -wpa flag to skip WEP and WPS networks and focus only on WPA targets

Warnings

Use Cases

WPA/WPA2 Handshake Capture

Automatically capture 4-way handshakes from WPA/WPA2 networks for offline dictionary cracking using aircrack-ng or hashcat.

WPS PIN Recovery

Test WPS-enabled access points for PIN vulnerabilities using Reaver and Pixie Dust attacks to recover WPA passwords.

WEP Key Recovery

Recover WEP encryption keys by capturing sufficient initialization vectors (IVs) and using aircrack-ng for cracking.

Wireless Network Auditing

Audit wireless network security by testing encryption strength, password complexity, and configuration vulnerabilities.

Penetration Testing

Assess wireless infrastructure security as part of comprehensive penetration testing engagements and red team operations.

Security Compliance Testing

Validate that wireless networks meet organizational security standards, encryption requirements, and password policies.

Security Awareness Training

Demonstrate wireless security weaknesses in controlled training environments to educate users about WiFi risks.

Personal Network Security

Test the security of your own home or office WiFi networks to identify weak passwords and misconfigured encryption.

Best Practices

Common Errors

Error: No wireless interfaces found
Check if your wireless adapter is connected. Run iwconfig to list wireless interfaces. Install correct drivers for your chipset.
Error: Monitor mode could not be enabled
Use --kill flag to stop interfering processes. Verify your adapter chipset supports monitor mode. Try a different USB port.
Error: Permission denied
Always run Wifite with sudo: sudo wifite. The tool requires root for wireless adapter manipulation.
Error: aircrack-ng not found
Install aircrack-ng: sudo apt install aircrack-ng. Wifite depends on aircrack-ng for packet capture and cracking.
Error: No targets found
Move closer to target networks. Verify monitor mode is active. Check if antenna is connected for USB adapters.
Error: Handshake capture failed
Wait for clients to connect. Try --num-deauths to increase deauth packets. Use --clients-only to ensure clients are present.
Error: Python dependency missing
Install Python dependencies: pip3 install -r requirements.txt or reinstall wifite from GitHub.
Error: Adapter driver compatibility issue
Install correct drivers for your chipset. Try alternative drivers like ath9k_htc for Atheros or rtl8812au for Realtek.

People Also Ask

What is Wifite used for?

Wifite is used for automated WiFi security auditing — capturing WPA/WPA2 handshakes, testing WPS PINs, and cracking WEP keys for authorized security assessments.

Is Wifite pre-installed in Kali Linux?

Yes, Wifite comes pre-installed on Kali Linux. Run sudo wifite to start immediately without installation.

How to use Wifite for WPA2?

Run sudo wifite -wpa to target WPA2 networks. Wifite automatically captures the handshake and attempts dictionary cracking.

What wordlist does Wifite use?

Wifite can use custom wordlists with --dict. Kali Linux includes rockyou.txt at /usr/share/wordlists/rockyou.txt for dictionary attacks.

Does Wifite work on Windows?

No, Wifite is Linux-only. Use a Kali Linux live USB or virtual machine on Windows for wireless testing.

Is Wifite legal to use?

Wifite is legitimate security testing software. Using it against networks without authorization is illegal in most jurisdictions.

How long does Wifite take to crack WiFi?

Depends on password complexity and wordlist quality. Simple passwords crack in seconds; complex ones may take hours or longer.

Related Tools

Aircrack-ng

Wireless Attacks

Comprehensive wireless security auditing suite with individual tools for packet capture, injection, and WEP/WPA cracking.

Reaver

Wireless Attacks

WPS brute force attack tool for recovering WPS PINs and WPA passwords through WPS vulnerabilities.

Hashcat

Password Attacks

GPU-accelerated password recovery utility supporting WPA/WPA2 handshake cracking at millions of attempts per second.

Kismet

Wireless Attacks

Wireless network detector, sniffer, and IDS for passive wireless monitoring and network discovery.

Fern WiFi Cracker

Wireless Attacks

GUI-based wireless security auditing tool for WEP/WPA/WPS cracking with visual network mapping.

Wireshark

Sniffing & Spoofing

Network protocol analyzer for deep packet inspection, traffic analysis, and protocol debugging.

Bettercap

Sniffing & Spoofing

Swiss army knife for network attacks and monitoring including WiFi, BLE, and LAN manipulation.

Wash

Wireless Attacks

WPS scanning tool to identify WPS-enabled access points before launching PIN attacks.

Bully

Wireless Attacks

WPS brute force attack tool with pixie dust support for WPS PIN recovery.

Cowpatty

Password Attacks

WPA-PSK auditing tool for offline dictionary attacks on captured WPA handshakes.

Frequently Asked Questions

What is Wifite?

Wifite is an automated wireless security auditing tool written in Python that streamlines WiFi network assessment. It automates network discovery, monitor mode activation, deauthentication, handshake capture, and password cracking for WEP, WPA, WPA2, and WPS encrypted networks. Pre-installed on Kali Linux, Wifite wraps Aircrack-ng, Reaver, and Hashcat into a single streamlined workflow for authorized wireless security testing.

Is Wifite free to use?

Yes, Wifite is completely free and open-source software released under the GNU GPL v3 license. You can download, modify, and distribute it freely. It is pre-installed on Kali Linux at no cost.

Who created Wifite?

Wifite was originally created by a developer known as derv82. The tool was later rewritten as wifite2 with improved support for modern wireless cards, better WPA attack handling, and additional features like Pixie Dust support and hashcat integration.

What programming language is Wifite written in?

Wifite is written in Python. The current version, wifite2, uses Python 3 and leverages Python's subprocess module to interface with underlying wireless tools like aircrack-ng, reaver, and hashcat.

Is Wifite pre-installed in Kali Linux?

Yes, Wifite comes pre-installed on Kali Linux. Open a terminal and run sudo wifite to start. To update: sudo apt update && sudo apt install --reinstall wifite. For the latest features, install directly from GitHub.

How do I install Wifite on Kali Linux?

Wifite is pre-installed on Kali Linux. If you need to reinstall, run: sudo apt install wifite. For wifite2 (the latest version), clone from GitHub: git clone https://github.com/derv82/wifite2.git && cd wifite2 && sudo python3 Wifite.

How do I update Wifite?

Update via apt on Kali: sudo apt update && sudo apt install --reinstall wifite. For the latest wifite2 features from GitHub: cd wifite2 && git pull. The GitHub version always has the newest attack methods and compatibility fixes.

Can beginners learn Wifite?

Absolutely. Wifite is designed for beginners and is one of the most beginner-friendly wireless security tools. Its automated workflow means you can start auditing WiFi networks with a single command: sudo wifite. The tool handles the complex steps automatically.

Does Wifite support WPA3?

Wifite has limited support for WPA3 networks. WPA3 uses SAE (Simultaneous Authentication of Equals) which is resistant to offline dictionary attacks, making it significantly harder to crack than WPA2. Current Wifite versions cannot effectively attack WPA3-protected networks.

Can Wifite run on Windows?

No, Wifite is Linux-only and requires Linux kernel support for monitor mode and packet injection. To use Wifite on Windows, run Kali Linux in a virtual machine (VirtualBox or VMware) or boot from a Kali Linux live USB.

Can Wifite run on Linux distributions other than Kali?

Yes. Install on Ubuntu or Debian with: sudo apt install wifite. On Arch Linux: sudo pacman -S wifite2. On Fedora: sudo dnf install wifite. Or install from GitHub on any Linux distribution with Python 3.

What wireless adapters work with Wifite?

Your wireless adapter must support monitor mode and packet injection. Popular compatible chipsets include Atheros AR9271, Ralink RT3070, Realtek RTL8812AU, and Ralink RT5370. USB adapters with these chipsets are widely available and affordable.

How do I use Wifite step by step?

1) Install: sudo apt install wifite. 2) Run: sudo wifite --kill. 3) Wait for network scan. 4) Press Ctrl+C to stop scanning. 5) Enter target number. 6) Wait for attack completion. 7) Review cracked passwords in green text.

What WiFi encryption types does Wifite support?

Wifite supports WEP, WPA, WPA2, and WPS encrypted networks. Use --wep for WEP only, -wpa for WPA/WPA2 only, or -wps for WPS only. WPA3 support is limited due to SAE protocol resistance to offline attacks.

How do I capture a WPA handshake with Wifite?

Run sudo wifite -wpa to target WPA networks. Wifite sends deauthentication packets to force clients to reconnect, capturing the 4-way handshake automatically during reconnection. Wait for the green handshake confirmation message.

How do I use a custom wordlist with Wifite?

Use the --dict flag followed by your wordlist path: sudo wifite --dict /usr/share/wordlists/rockyou.txt. This dictionary is used for WPA handshake cracking. Larger, more targeted wordlists produce better results.

What does the --kill flag do in Wifite?

The --kill flag stops NetworkManager, wpa_supplicant, and other background processes that may interfere with putting your wireless adapter into monitor mode. This is often necessary for successful scanning and attacks.

Wifite vs Aircrack-ng - which should I use?

Wifite automates the entire WiFi attack workflow with a single command. Aircrack-ng is a suite of manual tools offering more control. Use Wifite for quick automated assessments; use Aircrack-ng for detailed manual testing and complex scenarios.

How long does Wifite take to crack WiFi?

Depends on password complexity and wordlist quality. Simple passwords crack in seconds. Complex passwords may take hours or be uncrackable with dictionary attacks alone. WEP attacks typically take 5-30 minutes. WPS PIN attacks take 2-10 hours.

Does Wifite capture PMKID hashes?

Yes, wifite2 supports PMKID capture attacks which don't require deauthenticating clients. This is less disruptive and works against networks where traditional handshake capture fails. PMKID attacks target the access point directly.

Can Wifite attack multiple networks simultaneously?

Yes, Wifite can target all detected networks automatically or you can select specific targets. It processes targets sequentially, moving to the next after completing or timing out on each individual target.

How do I target a specific network with Wifite?

Use -b with the target MAC address: sudo wifite -b AA:BB:CC:DD:EE:FF. Use -e to target by SSID name: sudo wifite -e NETWORK_NAME. Combine with encryption filters like --wpa for focused targeting.

What is a WPS PIN attack in Wifite?

WPS PIN attack tests if the target's WPS feature is vulnerable to brute force. Wifite uses Reaver and Pixie Dust to recover the WPS PIN, which can reveal the WPA password. WPS attacks typically take 2-10 hours.

Is it legal to use Wifite?

Wifite is legitimate security testing software. However, using it against networks without explicit written authorization is illegal in most jurisdictions. Only use Wifite on networks you own or have documented permission to test.

Can Wifite work in a virtual machine?

Yes, but you need a USB wireless adapter that supports monitor mode. Connect the USB adapter to your VM using USB passthrough in VirtualBox or VMware. The VM needs direct access to the wireless hardware.

Tags

#wireless-attacks#wep#wpa#wpa2#wps#automated#handshake-capture#wifi-cracking#python#kali-linux#wireless-security#wifi-auditing#network-discovery#penetration-testing#security-assessment

Output Explanation

Wifite displays a color-coded table of detected networks showing ESSID, BSSID, channel, encryption type, power (dBm), and number of clients. During attacks, it shows real-time status messages indicating the current attack method. Successfully cracked passwords appear in green text. WPS PIN results and WEP keys are also displayed upon successful recovery. The tool provides visual progress indicators and timestamp information throughout the attack lifecycle.

Ethical Usage Notice

This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.