项目说明
WiFi Rogue Detector
A Python script to detect fake/rogue WiFi networks by analyzing signal strength patterns, SSID names, and scan consistency.
Features
Cross-platform support: Works on Linux and WindowsAutomatic detection: Scans a WiFi networks and analyzes themRisk assessment: Categorizes networks as legitimate or potentially fake/rogueDetailed reporting: Provides signal strength, scan count, and risk levelsHow It Works
The tool detects fake WiFi networks using several criteria:
Single scan detections: Rogue APs usually don't persist across multiple scansSignal strength patterns: Very weak signals (<-80dBm) are suspiciousSuspicious SSID names: Networks starting with "Free", "test", "fake", "demo"Multiple scan consistency: Legitimate networks should appear consistentlyRequirements
Linux
wireless-tools package: sudo apt install wireless-toolsPython 3.xWindows
Built-in netsh command (run as Administrator for best results)Python 3.xInstallation
1. Clone or download this repository
2. Ensure Python 3.x is installed
3. Install required system packages (see Requirements section)
Usage
Prerequisites
Ensure Python 3.x is installed on your system.For Linux: Install wireless-tools using sudo apt install wireless-tools.For Windows: No additional installation required, but run as Administrator for best results.Running the Script
1. Open a terminal or command prompt.
2. Na to the directory containing
wifi_rogue_detector.py.
3. Run the script using Python:
General command:
Linux-specific (may require sudo for scanning):
Windows-specific (run as Administrator):
What Happens When You Run It
The script automatically detects your operating system (Linux or Windows).It scans for a WiFi networks using system commands (iwlist scan on Linux, netsh wlan on Windows).Analyzes the networks based on signal strength, detection frequency, and SSID patterns.Displays results categorized as fake/rogue or legitimate networks.Provides risk levels and detailed information for each network.Interpreting Results
Fake/Rogue Networks: Marked with 🚨 or ⚠️, indicating potential security risks.Legitimate Networks: Listed with ✅, showing trusted networks.Review the criteria used for detection to understand why a network was flagged.Troubleshooting
If the script fails to run, ensure Python is installed and in your PATH.On Linux, if scanning fails, try running with sudo.On Windows, run the command prompt as Administrator.If no networks are detected, check your WiFi adapter and ensure it's enabled.Output Example
Risk Levels
🚨 HIGH RISK: Strong signal but suspicious characteristics⚠️ MEDIUM RISK: Weak signal or single detection✅ LEGITIMATE: Consistent detection with good signal strengthDisclaimer
This tool provides analysis based on common patterns but is not foolproof. Always network authenticity through additional means before connecting to unknown networks.
License
This project is open source. Feel free to use and modify as needed.
项目信息
开发语言:Python
Star 数:3
技术要点
该项目属于防护思路方向的开源资源,代码结构清晰,适合安全研究人员学习参考。项目围绕WiFiThreatAnalyzer is a cross-platform Python tool that scans nearby WiFi networks and identifies potential rogue or fake access points using signal strength patterns, scan consistency, and suspicious SSID naming heuristics. Built for defensive security awareness on Linux and Windows.展开,提供了可运行的实现,对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看,此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论,梳理项目的初始化流程、核心模块职责与数据流转,逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包,解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证,避免影响生产系统。
免责声明
本资源来源于开源社区,仅供安全研究、技术学习与合法授权范围内的攻防演练使用,请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。