Wifiphisher
Wifiphisher is a free Linux framework for penetration testers conducting red team engagements or Wi-Fi security testing.
What Wifiphisher is
Wifiphisher is a free Linux framework for penetration testers conducting red team engagements or Wi-Fi security testing. It creates rogue access points and supports customized web phishing scenarios that can capture credentials or deliver payloads. Its association techniques include Evil Twin, KARMA, and Known Beacons. Community-driven templates are included, and users can create their own scenarios or extend the tool with Python modules. Extension code runs without a sandbox. Wifiphisher identifies Kali Linux as its officially supported distribution and is also available as source code and packages for Linux security distributions including Arch Linux. Running it requires a wireless adapter that supports AP and monitor modes, packet injection, and netlink-capable drivers. The project provides detached GPG signatures and checksums for checking release integrity. It is distributed under the GNU General Public License version 3. The default captive portal uses a self-signed certificate; the FAQ recommends other security tools for bypassing HSTS or HTTPS. Bug reports and improvement proposals are directed to GitHub, with the FAQ as a first reference.
Good
- Free to download under GPL version 3.
- Supports Evil Twin, KARMA, and Known Beacons.
- Users can create custom phishing scenarios.
- Release checksums and detached GPG signatures are provided.
Watch out
- Requires a compatible wireless adapter and drivers.
- Python extension code runs without a sandbox.
- Default captive portal uses a self-signed certificate.
Who it suits
Wifiphisher is intended for penetration testers doing red team engagements or Wi-Fi security testing. Its Linux focus and adapter requirements matter for prospective users.
Verdict
Wifiphisher provides configurable Wi-Fi testing scenarios for Linux security work. Its adapter requirements and unsandboxed extensions make it a specialized tool rather than a general Wi-Fi utility.
Plans and prices
From Wifiphisher's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Free download · source code under GPL |
The facts
Each one read from Wifiphisher's own pages, with the date it was checked.
What it does
- Association attacks
- Its association techniques include Evil Twin, KARMA, and Known Beacons.checked 4 Oct 2026
- Distribution
- The tool is available as source code and through packages for Linux security distributions including Kali Linux and Arch Linux.checked 4 Oct 2026
- Extensions
- Users can write Python modules to extend the tool, and extension code runs without a sandbox.checked 4 Oct 2026
- Hardware requirement
- The README requires a wireless adapter supporting AP and monitor modes with packet injection and netlink-capable drivers.checked 4 Oct 2026
- HTTPS limitation
- The FAQ says its default captive portal uses a self-signed certificate and recommends other security tools to bypass HSTS or HTTPS.checked 4 Oct 2026
- Intended users
- The README identifies penetration testers conducting red team engagements or Wi-Fi security testing as intended users.checked 4 Oct 2026
- License
- Wifiphisher is distributed under the GNU General Public License version 3.checked 4 Oct 2026
- Phishing
- It supports victim-customized web phishing scenarios to capture credentials or deliver payloads.checked 4 Oct 2026
- Purpose
- Wifiphisher is a rogue access point framework for red team engagements and Wi-Fi security testing.checked 4 Oct 2026
- Release integrity
- The download page recommends verifying release integrity and provides detached GPG signatures and checksums.checked 4 Oct 2026
- Support
- The project directs users to GitHub to report bugs or propose improvements and advises reading its FAQ first.checked 4 Oct 2026
- Templates
- It includes community-driven phishing templates and users can create custom scenarios.checked 4 Oct 2026
Where it runs
- Supported platform
- The project describes Linux as its platform and Kali Linux as its officially supported distribution.checked 4 Oct 2026
Alternatives to Wifiphisher
- 1
Pentesterra
Free planWebAPIExtensionLinux7.7From €23 a month - 2
Kali Linux
Free planOpen sourceAndroidLinuxmacOSSelf-hosted7.6Free plan - 3
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 4
Dradis
Free planWebAPILinuxmacOS7.1From $3,600 a year - 5
w3af
Free planWebAPILinuxmacOS6.8Free plan - 6
Caido
Free planWebAPILinuxmacOS6.6Free plan
