# wireless security Published articles for wireless security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Introducing Bettercap 2.4.0: CAN-Bus Hacking, WiFi Bruteforcing and Builtin Web UI DevFeed: [Introducing Bettercap 2.4.0: CAN-Bus Hacking, WiFi Bruteforcing and Builtin Web UI]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2024-09-13T10:46:25Z Content type: release Language: en Sources: [evilsocket]() Topics: [Hacking](), [Security](), [Fuzzing/Fuzz testing](), [Protocol (disambiguation)](), [Hardware](), [ui]() Tags: [automotive-security](), [bettercap](), [can-bus](), [canbus](), [car](), [car-hacking](), [cybersecurity](), [features](), [fuzzing](), [hacking](), [hardware](), [ics](), [industrial](), [industrial-control](), [offensive-tools](), [protocol](), [release](), [socketcan](), [webui](), [wifi](), [wifi-bruteforcing](), [wireless-security]() ### AI overview The article announces bettercap 2.4.0, a major release that adds functionality for car and industrial control system security research. It describes a new CAN-bus module for reading, replaying, injecting, and fuzzing frames, parsing frames with DBC files, and detecting ECUs, alongside other new features and fixes. ### Source excerpt I'm happy to announce, after quite some time, the new bettercap 2.4.0 major release. Other than including a plethora of long due fixes (additionally to what the recent 2.33.0 already fixed), it also packs a few new functionalities that extend its reach to car and industrial control system hacking. It'll possibly take me some time to update the documentation on the official website so I'm here today to write a bit about the new features. Also remember that you can use the help, help ui, help can and help wifi commands to check all the new options and added functionalities. ## Pwnagotchi 1.0.0: An AI-assisted Raspberry Pi tool for WiFi security testing DevFeed: [Pwnagotchi 1.0.0: An AI-assisted Raspberry Pi tool for WiFi security testing]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2019-10-19T08:45:28Z Content type: article Language: en Sources: [evilsocket]() Topics: [Artificial Intelligence](), [Hacking](), [Raspberry Pi](), [REST API]() Tags: [ai](), [artificial-intelligence](), [bettercap](), [cuda](), [cybersecurity](), [deep-learning](), [deep-neural-networks](), [deep-reinforcement-learning](), [dnn](), [e-paper](), [hacking](), [handshake-capture](), [handshakes](), [low-power](), [machine-learning](), [monitor-mode](), [neural-networks](), [nvidia](), [pi](), [poc](), [portable-hacking](), [pwnagotchi](), [raspberry-pi](), [reinforcement-learning](), [release](), [wifi](), [wifi-hacking](), [wireless-security]() ### AI overview The article recounts the development and release of Pwnagotchi 1.0.0, a Raspberry Pi-based project that uses bettercap's REST API and adaptive algorithms to improve WiFi handshake collection and related security-testing capabilities. It describes the project's evolution from an initial Python proof of concept and discusses the use of a Waveshare e-Paper display for portable, low-power operation. ### Source excerpt This is the story of a summer project that started out of boredom and that evolved into something incredibly fun and unique. It is also the story of how that project went from being discussed on a porch by just two people, to having a community made of almost 700 awesome people (and counting!) that gathered, polished it and made today's release possible. TL;DR: You can download the 1.0.0 .img file from here, then just follow the instructions. If you want the long version instead, sit back, relax and enjoy the ride. Let me tell you: it's going to be quite a long journey compared to my usual blog posts, but it'll be worth it (i hope) and fun (i hope even harder). Let's begin ... ## Pwning WPA/WPA2 Networks With Bettercap and the PMKID Client-Less Attack DevFeed: [Pwning WPA/WPA2 Networks With Bettercap and the PMKID Client-Less Attack]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2019-02-13T15:53:31Z Content type: tutorial Language: en Sources: [evilsocket]() Topics: [Networks](), [passwords](), [client](), [GPU]() Tags: [attacks](), [bettercap](), [cybersecurity](), [deauth](), [handshake](), [hashcat](), [how-to](), [monitor-mode](), [networks](), [packet-injection](), [password-cracking](), [passwords](), [pmkid](), [rsn](), [rsn-pmkid](), [wifi-hacking](), [wireless-security](), [wpa](), [wpa2]() ### AI overview This tutorial explains new WiFi features in bettercap, including automated EAPOL handshake capture and a PMKID client-less attack against WPA/WPA2 access points. It also covers deauthentication-based capture workflows and preparing captured files for hashcat password cracking. ### Source excerpt In this post, I'll talk about the new WiFi related features that have been recently implemented into bettercap, starting from how the EAPOL 4-way handshake capturing has been automated, to a whole new type of attack that will allow us to recover WPA PSK passwords of an AP without clients. We'll start with the assumption that your WiFi card supports monitor mode and packet injection (I use an AWUS1900 with this driver), that you have a working hashcat (v4.2.0 or higher is required) installation (ideally with GPU support enabled) for cracking and that you know how to use it properly either for dictionary or brute-force attacks, as no tips on how to tune the masks and/or generate proper dictionaries will be given :) On newer macOS laptops, the builtin WiFi interface `en0` already supports monitor mode, meaning you won't need a Linux VM in order to run this :) ## Project PITA: Build a Mini Mass Deauther Using Bettercap and a Raspberry Pi Zero W DevFeed: [Project PITA: Build a Mini Mass Deauther Using Bettercap and a Raspberry Pi Zero W]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2018-07-28T17:01:56Z Content type: tutorial Language: en Sources: [evilsocket]() Topics: [Raspberry Pi](), [Linux](), [Network](), [configuration](), [ssh](), [Bluetooth](), [clients](), [file]() Tags: [bettercap](), [ble](), [bluetooth](), [btnap](), [cybersecurity](), [deauth](), [handshake-capture](), [kali](), [linux](), [monitor-mode](), [packet-injection](), [pi](), [portable-hacking](), [project](), [raspberry](), [raspberry-pi](), [rpi](), [rpi-zero-w](), [rpi0w](), [wifi](), [wireless-security](), [wpa2](), [writeup](), [zero]() ### AI overview A writeup showing how to build a pocket-sized WiFi deauthenticator with a Raspberry Pi Zero W, Kali Linux, Nexmon drivers, and bettercap. It covers WiFi scanning, deauthentication packets, WPA2 handshake capture, initial SSH and WiFi configuration, and Bluetooth access. ### Source excerpt A few days ago I started playing with some idea I had from a few weeks already, using a Raspberry Pi Zero W to make a mini WiFi deauthenticator: something in my pocket that periodically jumps on all the channels in the WiFi spectrum, collects information about the nearby access points and their connected clients and then sends a deauthentication packet to each one of them, resulting in some sort of WiFi jammer on the 802.11 level. As an interesting "side effect" of this jammer (the initial intent was purely for the lulz) is that the more it deauths, the higher the changes to also sniff WPA2 handshakes. Thanks to the awesome work of the Kali and Nexmon communities in packaging the nexmon drivers and utilities and to the recent changes we released in bettercap, this was very easy to setup and to script and given the interest the tweet had I thought to share this writeup :) This awesome case has been designed by @elkentaro and can be found on [his Thingverse page](https://www.thingiverse.com/thing:3018480). ## This Is Not a Post About BLE, Introducing BLEAH DevFeed: [This Is Not a Post About BLE, Introducing BLEAH]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2017-09-23T15:06:56Z Content type: tutorial Language: en Sources: [evilsocket]() Topics: [Bluetooth](), [Security](), [Fuzzing/Fuzz testing](), [Internet of things](), [Tool](), [Open Source]() Tags: [ble](), [bleah](), [bluetooth](), [bluetooth-low-energy](), [btle](), [cybersecurity](), [fuzzing](), [hack](), [iot](), [iot-security](), [offensive-tools](), [open-source](), [security](), [tools](), [wireless-security]() ### AI overview An introduction to hacking Bluetooth Low Energy devices that also presents BLEAH, an open-source tool. The article discusses BLE's discoverability, connection behavior, data access, and lack of built-in protocol security, while noting that automatic fuzzing features were kept in a private fork. ### Source excerpt This is not a post about BLE, but rather on how to hack it ... well, to be honest, BLE devices are usually very easy to hack, so it's just a quick intro to it, I'll also take the chance to open source one of the last tools I've made and that I kept private so far. I moved the features I thought to be dangerous ( aka: auto fuzzing all the BLE things and bring chaos ) in a private fork which will stay private, however it's not that complicated to chain bleah with other tools ( cough ... radamsa ... cough ) and have lots of fun. Oh and this is also because someone asked me some intro on BLE, so yeah, his fault.