Skip to content

🔑 WiFi captive portal that capture credentials for ESP8266. Designed for Wireless Penetration tests.

License

Notifications You must be signed in to change notification settings

nocerainfosec/ESP8266-WIFI-Captive-Portal

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 

Repository files navigation

ESP8266 WiFi Captive Portal

Disclaimer

This code is a WiFi Captive Portal implemented for the ESP8266, which acts as a phishing page to collect passwords. It is essential to understand that this code is only ethical or legal purposes and is explicitly labeled as a "Wifi Penetration testing" for "Educational Purposes" only. Performing such attacks without prior permission is illegal and unethical, and using this code or similar techniques to compromise network security or violate someone's privacy is strictly prohibited.

Please note that this should not be used in any real-world scenario.

Updates applied

[+] It is capturing usernames and passwords.

[+] bug fixes while compiling the solution on Arduino.

[+] It now requires password to access "PASS" page, password can be set as desired in the code, default password for .bin file is P@ssw0rd!

Updates to be applied

[+] Option to add certificates to use HTTPS instead of HTTP.

Disclaimer

This project is for testing and educational purposes. Use it only against authorized targets and your own networks and devices. I don't take any responsibility for what you do with this program.

About this project

WiFi captive portal for the NodeMCU (ESP8266 Module) with DNS spoofing.

The built-in LED will blink 5 times when a password is posted.

Warning! Your saved passwords will not disappear when you restart/power off the ESP8266.

Note: If you want to see the stored passwords go to "172.0.0.1/pass". For changing the SSID, go to "172.0.0.1/ssid"

Showcase

Screenshots

172.0.0.1/index 172.0.0.1/post 172.0.0.1/pass 172.0.0.1/pass?password= 172.0.0.1/ssid
This is the main page. Here the user will write his username and password and send it. This is the post page. The user will be redirected here after posting their credentials. This is the protection applied to the pass page, so noone else can snik into it. This is where the attacker can retrieve all the passwords that has been posted. Here the attacker can change the SSID name of the Access Point on the go.

Installation (ESP8266 Flasher - Easy way)

  1. Download ESP8266 Flasher.

  2. Download release.bin file.

  3. Open the ESP8266 Flasher and select config tab and select the .bin file you've just downloaded.

  1. Then, head back to the Operation tabs and select the Node MCU port and press "Flash".

  1. Wait until the process finishes.

  1. Your Node MCU is ready!

Installation (Arduino IDE)

  1. Download and open the sketch using Arduino IDE
  2. Go to "File -> Preferences -> Boards Manager URLs" and paste the following link: http://arduino.esp8266.com/stable/package_esp8266com_index.json
  3. Go to "Tools -> Board -> Boards Manager", search "esp8266" and install esp8266
  4. Go to "Tools -> Board" and select you board"

  1. You can optionally change all things like SSID name and texts of the page like title, subtitle, text body, Password of the protected page, style, you are the boss!
  2. Upload the code into your board.
  3. You are done!

Ethical purposes only!

Again, I must emphasize that using this code or any similar technique for unauthorized access, phishing, or any illegal activities is strictly prohibited and against the law. It is essential to respect others' privacy and adhere to ethical standards while using technology. If you're interested in learning about network security, ethical hacking, or cybersecurity, I encourage you to pursue formal education or ethical hacking certifications through legitimate channels. Always use your skills and knowledge responsibly and lawfully.

❤️ Sponsoring

If you like or rely on the work I do, please consider sponsoring me. I do open source all my projects, it would be really great if I could do more of it.

Other Projects you may like from the Original Author:

About

🔑 WiFi captive portal that capture credentials for ESP8266. Designed for Wireless Penetration tests.

Topics

Resources

License

Stars

Watchers

Forks

Languages

  • C++ 100.0%