# risinek/esp32-wifi-penetration-tool

Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks.

Repository: https://github.com/risinek/esp32-wifi-penetration-tool
Canonical: https://ross.abutalabs.com/products/esp32-wifi-penetration-tool
Homepage: https://risinek.github.io/esp32-wifi-penetration-tool/
Language: C
License: MIT
License Family: permissive
Topics: esp32, wpa2-handshake, pmkid, wifi-security, 802-11
Last push: 2024-02-18T18:40:05+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 1976, "days_push": 927, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3050, forks 470 (observed 2026-08-28T04:07:39.571757+00:00)

## What it is
An extensible Wi-Fi penetration testing framework for the ESP32 microcontroller, implementing attacks such as PMKID capture, WPA/WPA2 handshake capture, deauthentication, and denial of service. It exports captured traffic as PCAP and handshakes as HCCAPX for cracking with tools like Hashcat, and is configured via a management access point with a web UI.

## Use cases
- capture PMKIDs from nearby Wi-Fi networks with an ESP32
- capture WPA/WPA2 handshakes for offline cracking with Hashcat
- run deauthentication attacks against wireless access points
- sniff Wi-Fi traffic passively and save it as PCAP
- build a cheap portable Wi-Fi security testing device
- implement custom Wi-Fi attacks on ESP32 hardware

## When to choose
- you need a low-cost, low-power hardware device for Wi-Fi security assessments
- you want to capture PMKIDs or WPA handshakes for authorized penetration testing
- you want an extensible ESP32 framework to prototype your own Wi-Fi attacks
- you need on-the-go configuration via a smartphone-friendly management AP

## When to avoid
- you need to crack captured hashes - the ESP32 lacks the compute power, use Hashcat on a proper machine
- you need support for the latest ESP-IDF versions, as the project targets ESP-IDF 4.1 and may break elsewhere
- you need a general-purpose network scanner or router firmware rather than an attack tool
- you lack authorization to test the target networks - unauthorized use is illegal

## Facets
- artifact type: framework
- maturity: maintenance
- function: security, penetration-testing, networking, web-framework
- domain: security, penetration-testing, networking, embedded-systems, hardware
- platform: embedded, iot
- tags: esp32, wifi-security, pmkid, wpa2-handshake, deauthentication, pcap, hccapx, hashcat, 802-11, esp-idf, web-server

## Member repositories
- risinek/esp32-wifi-penetration-tool (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:39.571757+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:46:50.198602+00:00, confidence not recorded.
  - readme: https://github.com/risinek/esp32-wifi-penetration-tool (fetched 2026-08-28T04:07:39.571757+00:00, sha bfb2f4112318)
  - homepage: https://risinek.github.io/esp32-wifi-penetration-tool/ (fetched 2026-08-29T09:44:01.965814+00:00, sha bf582abc7f23)
- Data as of 2026-08-30T08:39:29.467469+00:00.