sensepost/mana

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1110 stars · 279 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

MANA is a toolkit for rogue access point (evilAP) attacks, implementing improved KARMA attacks via a modified hostapd plus MitM configurations like sslstrip with HSTS bypass. It is deprecated in favor of bettercap and berate_ap, with its core hostapd-mana component still maintained separately.

Use cases

• set up a rogue wifi access point to capture credentials
• run KARMA attacks against wifi clients
• perform man-in-the-middle attacks on connected victims
• capture and crack EAP credentials automatically
• strip SSL from victim traffic with HSTS bypass

When to choose

• you need the original Defcon 22 KARMA improvements on Kali or Ubuntu 14.04
• you want a self-contained rogue AP attack toolkit with auto EAP cracking

When to avoid

• you want actively maintained tooling - use bettercap, berate_ap, or eaphammer instead
• you need support on modern Ubuntu versions beyond 14.04
• your wifi card does not support AP/master mode

Facets

framework · maturity abandoned

security penetration-testing networking proxy security penetration-testing networking cli wifi-hacking rogue-access-point evil-twin mitm karma-attack hostapd deprecated kali-linux linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sensepost/mana")