Skip to content

Automating Live WPA/WPA2 Attacks with WPA Supplicant & Python

Vivek Ramachandran

Vivek Ramachandran demonstrates scripting wpa_supplicant via its UNIX domain socket control interface to automate live attacks on WPA/WPA2 networks.

Summary

The Untapped Power of the WPA Supplicant Control Interface

While wpa_supplicant is primarily used as a client daemon to connect to wireless networks, its rich control interface allows programmatic automation of complex 802.11 states.

Interacting with wpa_cli and UNIX Control Sockets

Vivek Ramachandran explains connecting to wpa_supplicant using Python sockets to dynamically configure network blocks, scan frequencies, and manipulate authentication timers.

Automating Live Attack Scenarios

Ramachandran demonstrates script-driven roaming attacks, rogue certificate acceptance testing, and fuzzing EAP state machines.

Building Automated Wireless Security Testing Frameworks

The author shares reusable Python modules for continuous wireless compliance testing and automated penetration testing.

Related talks

Wireless Village·20 min

  • DEF CON
  • Wireless
  • Date: Aug 2016
  • Location: Las Vegas

Slaving Rogue Access Points w · Python · Cheap Hardw

Demonstrating how to construct and coordinate automated rogue Wi-Fi access points using inexpensive hardware and custom Python tooling.

wifirogue-apwireless+1