NocShield - NocShield brings network security simulations to m

项目说明

NocShield

![Arduino Lint]()
![DOI]()

*Baca dokumentasi dalam Bahasa Indonesia (README_ID.md)*

NocShield is a modular and lightweight library for Network Security simulations on ESP32. It brings the power of offensive and defensi operations to microcontrollers, making it an excellent tool for learning and demonstrating network and mitigations.

> ⚠️ DISCLAIMER
> This library is created for EDUCATIONAL PURPOSES ONLY. Do not use these tools on networks or devices you do not own or ha permission to test. The authors and maintainers are not responsible for any misuse or damage caused by this software.

Features

* Offensi:
* Deauthentication Attacks: Send 802.11 Deauth frames to disconnect clients.
* Capti (Evil Twin): Set up a fake Access Point with a phishing login page to intercept credentials.
* Hash Cracking: Utilize ESP32's hardware acceleration to simulate dictionary/brute-force attacks against SHA hashes.
* Defensi:
* Packet Monitoring (Sniffer): Use Promiscuous Mode to capture and analyze raw Wi-Fi frames in the air.
* Deauth Detector (IDS): Detect deauthentication storms and trigger alarms.
* Secure Communications:
* Hardware Cryptography: Fast AES encryption/decryption and SHA-256 hashing using the ESP32's built-in mbedtls engine.
* Secure Clients: Examples demonstrating the correct use of Root CA certificates to prevent Man-in-the-Middle (MitM) attacks.

Installation

1. Download this repository as a ZIP file.
2. Open your Arduino IDE.
3. Go to Sketch -> Include Library -> Add .ZIP Library...
4. Select the downloaded ZIP file.

*Note: This library currently only supports ESP32 microcontrollers.*

Examples

You can find several hands-on examples under File -> Examples -> NocShield:

* Offensive:
* DeauthAttack: Simulates disconnecting a specific client from an AP.
* Capti: Creates a fake "Free Public WiFi" that captures entered credentials.
* HashCracker: Demonstrates a dictionary attack against a SHA-256 hash.
* Defensive:
* PacketMonitor: Captures raw 802.11 Management frames.
* DeauthDetector: Triggers an alarm when a Deauth attack is detected.
* DeauthDetector_v2: Same alarm behavior, but tracks counts per source MAC and supports a whitelist to reduce false positives.
* ProbeRequestSniffer: Passively logs nearby devices' Wi-Fi probe requests (SSID + MAC) for auditing your own en. Read-only — it ne.
* SecureComms:
* SecureClient: Demonstrates secure HTTPS requests using Root CA .
* HardwareCrypto: Shows how to use hardware-accelerated AES and SHA functions.

API Reference

Initialization

Offensi

Defensi

Hardware Cryptography

Changelog / Recent Fixes

* decryptAES(): fixed an out-of-bounds read/underflow that could occur when given an empty or malformed ciphertext string, plus added block-size and heap-allocation checks.
* encryptAES(), hashSHA256(): now check mbedtls_* return codes and heap allocations instead of silently continuing on failure.
* bytesToHex() / decryptAES(): build result strings with reserve() up front instead of repeated +=, reducing heap fragmentation on ESP32.
* hexToBytes(): now returns bool and the input length instead of silently producing garbage bytes.
* Added deleted copy constructor/assignment to NocShield (it owns raw pointers internally; copying an instance pre risked a double-free).
* New defensi: ProbeRequestSniffer and DeauthDetector_v2 (see above).

Contributing

Contributions are welcome! Please ensure you test your code and run the Arduino Lint before submitting pull requests.

License

This project is maintained by the Nocturnailed Community.

项目信息

开发语言：C++

Star 数：4

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕NocShield brings network security simulations to microcontrollers. It offers a modular architecture and dynamic memory allocation suited for resource-constrained platforms, helping you simulate offensive and defensive network operations.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。