r/wireless

We've developed an OSS WiFi survey tool with off-the-shelf hardware, including a couple of cheap USB dongles, a HackRF SDR, Raspberry Pi 4, and a small app that runs on your iPhone and communicates with the rPi over bluetooth. The iPhone app also streams live data into ServiceRadar (https://github.com/carverauto/serviceradar). We're working on a prototype custom PCB and looking for people that might be interested in helping with that, everything in this project is OSS, including any hardware we design. If you're interested in learning more drop me a line or join our Discord.

App will be available on TestFlight and we're writing a blog post that describes how to get this up and running and includes a BOM (bill of materials). Stay tuned.

Been meaning to properly learn how the 802.11 stack works instead of just reading about it, so I built a tool instead. Called it deadair.

Scans for APs and clients, sends deauth frames, but honestly the stuff I liked building more was around that part:

• captures the WPA handshake, dumps it in hashcat format
• passive PMKID grab too
• writes a live pcap so you can just tail it in Wireshark
• there's a WIDS mode that flips it around and detects deauth attacks instead of sending them
• GPS wardriving if you're into that
• little Bubble Tea TUI so it's not just a wall of logs

Go + gopacket. Linux only really, macOS blocks injection at the kernel level so it's sniff-only there

Standard disclaimer since it's a deauth tool: Educational/authorized use only, don't point it at networks that aren't yours

Mostly curious if anyone's dealt with similar channel hopping or sniff and inject concurrency stuff in Go and has thoughts on how I did it. Code's here: https://github.com/meetsoni15/deadair