![](/assets/headers/header-logo.png) ![](https://img.shields.io/badge/Tools%20%26%20Resources%20Available-82-757575?style=for-the-badge) ### Bluetooth * [bettercap](https://github.com/bettercap/bettercap) - Swiss army knife for WiFi, Bluetooth, HID, and ethernet network. ![last-commit](https://img.shields.io/github/last-commit/bettercap/bettercap?style=flat) * BLE Scanner 4.0 [iOS](https://apps.apple.com/us/app/ble-scanner-4-0/id1221763603) [Android](https://play.google.com/store/apps/details?id=com.macdom.ble.blescanner&gl=US) - Scanner Utility for Bluetooth Low Energy, iBeacon and Eddystone devices. * [BLE-Beacon-Scanner](https://github.com/bowdentheo/BLE-Beacon-Scanner) - Scan for BLE Beacons (iBeacon and Eddystone) ![last-commit](https://img.shields.io/github/last-commit/bowdentheo/BLE-Beacon-Scanner?style=flat) * [BLESuite](https://github.com/nccgroup/BLESuite) - Python package that provides an easier way to test Bluetooth Low Energy (BLE) device. ![last-commit](https://img.shields.io/github/last-commit/nccgroup/BLESuite?style=flat) * [Bluefruit LE Sniffer](https://www.adafruit.com/product/2269) - Passively capture data exchanges between two BLE devices, pushing the data into Wireshark, where you can visualize things on a packet level. * [Bluelog](https://github.com/MS3FGX/Bluelog) - Linux bluetooth scanner ![last-commit](https://img.shields.io/github/last-commit/MS3FGX/Bluelog?style=flat) * [BlueScanner](https://bluescanner.en.uptodown.com/windows) - Windows tool to locate bluetooth devices and get to know its features. * [BSS](https://github.com/joswr1ght/bss) - Bluetooth Stack Smasher ![last-commit](https://img.shields.io/github/last-commit/joswr1ght/bss?style=flat) * [BTcrack](https://github.com/thierryzoller/BTcrack) - Bluetooth PIN and Link-key cracker. ![last-commit](https://img.shields.io/github/last-commit/thierryzoller/BTcrack?style=flat) * [BtleJuice](https://github.com/DigitalSecurity/btlejuice) - BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework. ![last-commit](https://img.shields.io/github/last-commit/DigitalSecurity/btlejuice?style=flat) * [Btmon](https://github.com/matti644/btmon) - Arduino bluetooth monitoring tool. ![last-commit](https://img.shields.io/github/last-commit/matti644/btmon?style=flat) * [Btscanner](https://salsa.debian.org/pkg-security-team/btscanner) - Scans for new devices and retrieves any information requested. ![last-commit](https://img.shields.io/github/last-commit/matti644/btmon?style=flat) * [Crackle](https://github.com/mikeryan/crackle) - Crack and decrypt BLE encryption. ![last-commit](https://img.shields.io/github/last-commit/mikeryan/crackle?style=flat) * [Ellisys Bluetooth Explorer](https://www.ellisys.com/products/bex400/) - All-In-One Wideband BR/EDR and Low Energy sniffer with concurrent capture of Wi-Fi 2x2 802.11 a/b/g/n, 2.4 GHz spectrum, HCI (USB, UART, SPI), WCI-2, logic signals, generic I2C/UART/SPI/SWD, and Audio I2S. * [hcitool](https://github.com/MillerTechnologyPeru/hcitool) - Bluetooth host controller CLI tool for sending HCI commands on MacOS and Linux. ![last-commit](https://img.shields.io/github/last-commit/MillerTechnologyPeru/hcitool?style=flat) * [Sweyntooth](https://github.com/Matheus-Garbelini/sweyntooth_bluetooth_low_energy_attacks) - Captures a family of 18 vulnerabilities across different Bluetooth Low Energy (BLE) software development kits (SDKs) of six major system-on-a-chip (SoC) vendors. ![last-commit](https://img.shields.io/github/last-commit/Matheus-Garbelini/sweyntooth_bluetooth_low_energy_attacks?style=flat) ### Cellular * [Crocodile Hunter](https://github.com/EFForg/crocodilehunter) - A tool to hunt fake eNodeBs, also known commonly as hailstorm, stingray, cell site simulators, or IMSI catchers. ![last-commit](https://img.shields.io/github/last-commit/EFForg/crocodilehunter?style=flat) * [Kalibrate](https://github.com/steve-m/kalibrate-rtl) - Scan for GSM base stations in a given frequency band and can use those GSM base stations to calculate the local oscillator frequency offset. ![last-commit](https://img.shields.io/github/last-commit/steve-m/kalibrate-rtl?style=flat) ### DECT * [gr-dect2](https://github.com/pavelyazev/gr-dect2) - Real-time DECT voice channel decoding by Gnuradio. It allows to listen to a voice when encryption isn't applied. * [re-DECTed](https://github.com/znuh/re-DECTed) - Tools for playing with DECT. ![last-commit](https://img.shields.io/github/last-commit/znuh/re-DECTed?style=flat) ### Hardware * [HackRF One](https://greatscottgadgets.com/hackrf/one/) - HackRF One is a Software Defined Radio capable of transmission or reception of radio signals from 1 MHz to 6 GHz. * [MultiBlue Dongle](https://www.amazon.com/MultiBlue-Dongle-Bluetooth-Keyboard-BT300KMS/dp/B00CRY5K16) - Can be connected to another computer via a USB port and control the victims computer via bluetooth. * [Pluggable BT Dongle](https://plugable.com/products/usb-bt4le/) - Survey on nearby bluetooth devices enumerate the services and even send simple data packet to them. * [Ubertooth One](https://greatscottgadgets.com/ubertoothone/) - Ubertooth One is an open source 2.4 GHz wireless development platform suitable for Bluetooth experimentation. * [Wi-fi Pineapple](https://shop.hak5.org/products/wifi-pineapple) - Automate WiFi auditing with all new campaigns and get actionable results from vulnerability assessment reports. ### NFC * [ACR122U USB NFC Reader](https://www.acs.com.hk/en/products/3/acr122u-usb-nfc-reader/) - Contactless smart card reader/writer developed based on 13.56 MHz Contactless (RFID) Technology * [Keysy](https://tinylabs.io/keysy) - Backup up to four RFID access credentials into a small keyfob form factor. * [libnfc](https://github.com/nfc-tools/libnfc) - Platform independent Near Field Communication (NFC) library. ![last-commit](https://img.shields.io/github/last-commit/nfc-tools/libnfc?style=flat) * [MFCUK](https://github.com/nfc-tools/mfcuk) - MiFare Classic Universal toolKit. ![last-commit](https://img.shields.io/github/last-commit/nfc-tools/mfcuk?style=flat) * [MFOC](https://github.com/nfc-tools/mfoc) - Mifare Classic Offline Cracker. ![last-commit](https://img.shields.io/github/last-commit/nfc-tools/mfoc?style=flat) * [NFCGate](https://github.com/nfcgate/nfcgate) - Android application meant to capture, analyze, or modify NFC traffic. ![last-commit](https://img.shields.io/github/last-commit/nfcgate/nfcgate?style=flat) * [NFC Smart Card Info](https://apkpure.com/nfc-smart-card-info/com.inoapp.cardinfo) - Android App. Shows Java Card applet installed on a contact-less Smart Card and tag info. * [NFC Tag Cloner](https://apkpure.com/nfc-tag-cloner/com.skjolberg.nfc.clone2) - Android App. Clone NFC tags to another tag or to your phone * [NFC TagInfo](https://apkpure.com/nfc-taginfo-by-nxp/com.nxp.taginfolite) - Android App. The “Swiss Army knife” for NFC! Value checker, content viewer and analysis tool. * [pcscd](https://linux.die.net/man/8/pcscd) - PC/SC Smart Card Daemon. A resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system. ### RFID * [ICopyX](https://icopyx.com/) - Hardware to rapidly and easily clone RFID tags like an expert. * [Proxmark](https://proxmark.com) - RFID swiss-army tool, allowing for both high and low level interactions with the vast majority of RFID tags and systems world-wide * [RFIDOt](https://github.com/AdamLaurie/RFIDIOt) - Python RFID / NFC library & tools. * [Wiegotcha](https://github.com/lixmk/Wiegotcha) - Long Range RFID Thief. ![last-commit](https://img.shields.io/github/last-commit/lixmk/Wiegotcha?style=flat) ### SDR * [Airspy](https://v3.airspy.us/) - State of the art SDR hardware for HF and VHF. * [bladeRF Micro 20.0](https://www.nuand.com/bladerf-2-0-micro/) - Next-generation 2x2 MIMO, 47MHz to 6GHz frequency range, off-the-shelf USB 3.0 Software Defined Radio (SDR) * [gqrx](https://github.com/gqrx-sdr/gqrx) - Software defined radio receiver powered by GNU Radio and Qt. ![last-commit](https://img.shields.io/github/last-commit/gqrx-sdr/gqrx?style=flat) * [gr-fosphor](https://github.com/osmocom/gr-fosphor) - GNURadio block for spectrum visualization using GPU. ![last-commit](https://img.shields.io/github/last-commit/osmocom/gr-fosphor?style=flat) * [inspectrum](https://github.com/miek/inspectrum) - Analysing captured signals, primarily from software-defined radio receivers. ![last-commit](https://img.shields.io/github/last-commit/miek/inspectrum?style=flat) * [LimeSDR](https://limemicro.com/products/boards/limesdr/) - A low cost, open source, apps-enabled (more on that later) software defined radio (SDR) platform that can be used to support just about any type of wireless communication standard. * [Multimon-NG](https://github.com/EliasOenal/multimon-ng) - Successor of multimon. Decodes various digital transmission modes. ![last-commit](https://img.shields.io/github/last-commit/EliasOenal/multimon-ng?style=flat) * [rtl_fm](https://github.com/K0NYC/rtl-fm) - Set of scripts that acts as a wrapper for rtl_fm and a few helper scripts for making listening to radio signals with SDR easy. ![last-commit](https://img.shields.io/github/last-commit/K0NYC/rtl-fm?style=flat) * [USRP B210](https://www.ettus.com/all-products/ub210-kit/) - A fully integrated, single-board, Universal Software Radio Peripheral (USRP™) platform with continuous frequency coverage from 70 MHz – 6 GHz. ### Wi-Fi * [AirCheck G3 Pro](https://github.com/aircrack-ng/aircrack-ng) - Hardware-enabled site survey solution for Wi-Fi 6/6E networks. * [Aircrack-NG](https://github.com/aircrack-ng/aircrack-ng) - A complete suite of tools assess WiFi network security. ![last-commit](https://img.shields.io/github/last-commit/aircrack-ng/aircrack-ng?style=flat) * [Airpwn](https://github.com/ICSec/airpwn-ng) - Packet injection for wifi; simplified. ![last-commit](https://img.shields.io/github/last-commit/ICSec/airpwn-ng?style=flat) * [Airstrike](https://github.com/redcode-labs/AirStrike) - Automatically grab and crack WPA-2 handshakes with distributed client-server architecture. ![last-commit](https://img.shields.io/github/last-commit/redcode-labs/AirStrike?style=flat) * [Alfa Card](https://www.amazon.com/s?k=Alfa-AWUS036NHA) - The Atheros chipset supports all 6 WiFi modes. Best success rate of various injection attacks using this Wi-Fi adaptor. * [AWSY](https://github.com/BaiqingL/AWSY) - Are.We.Secure.Yet Framework aims to test the wifi security of a location, attempting to locate individual devices. ![last-commit](https://img.shields.io/github/last-commit/BaiqingL/AWSY?style=flat) * [Beacongraph](https://github.com/daddycocoaman/BeaconGraph) - Graph visualization of wireless client and access point relationships. ![last-commit](https://img.shields.io/github/last-commit/daddycocoaman/BeaconGraph?style=flat) * [bettercap](https://github.com/bettercap/bettercap) - Swiss army knife for WiFi, Bluetooth, HID, and ethernet network. ![last-commit](https://img.shields.io/github/last-commit/bettercap/bettercap?style=flat) * [Chanalyzer](https://www.metageek.com/wi-spy/) - A powerful dual-band spectrum analyzer that measures Wi-Fi and non-Wi-Fi activity in both the 2.4 GHz and 5 GHz bands. * [coWPAtty](https://github.com/joswr1ght/cowpatty) - WPA2-PSK Cracking ![last-commit](https://img.shields.io/github/last-commit/joswr1ght/cowpatty?style=flat) * [cpscam](https://github.com/codewatchorg/cpscam) - Bypass captive portals by impersonating inactive users. ![last-commit](https://img.shields.io/github/last-commit/codewatchorg/cpscam?style=flat) * [dBmonster](https://github.com/90N45-d3v/dBmonster) - Track WiFi Devices With Their Recieved Signal Strength. ![last-commit](https://img.shields.io/github/last-commit/90N45-d3v/dBmonster?style=flat) * [Ekahau HeatMapper](https://www.ekahau.com/solutions/wi-fi-heatmaps/) - Perform wireless network analysis, optimization, and simulation with high-definition visual Wi-Fi heatmaps that take the guesswork out of network coverage and performance. * [FruityWiFi](https://github.com/xtr4nge/FruityWifi) - FruityWiFi is a wireless network auditing tool. ![last-commit](https://img.shields.io/github/last-commit/xtr4nge/FruityWifi?style=flat) * [Giskismet](https://github.com/xtr4nge/giskismet) - Wireless recon visualization tool. ![last-commit](https://img.shields.io/github/last-commit/xtr4nge/giskismet?style=flat) * [iSniff-GPS](https://github.com/hubert3/iSniff-GPS) - Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices. ![last-commit](https://img.shields.io/github/last-commit/hubert3/iSniff-GPS?style=flat) * [inSSIDer](https://github.com/xtr4nge/giskismet) - Helps to remove that frustration by showing you exactly how your network is configured, how neighboring Wi-Fi networks are impacting yours, and gives suggestions for fast, secure Wi-Fi. * [Kismapping](https://github.com/inguardians/kismapping) - A WiFi heatmapping tool which consumes Kismet output and produces a heatmap. ![last-commit](https://img.shields.io/github/last-commit/inguardians/kismapping?style=flat) * [Kismet](https://github.com/kismetwireless/kismet) - A sniffer, WIDS, and wardriving tool for Wi-Fi, Bluetooth, Zigbee, RF, and more. ![last-commit](https://img.shields.io/github/last-commit/kismetwireless/kismet?style=flat) * [KRACK](https://github.com/vanhoefm/krackattacks-scripts) - Scripts to test if clients or access points (APs) are affected by the KRACK attack against WPA2. ![last-commit](https://img.shields.io/github/last-commit/vanhoefm/krackattacks-scripts?style=flat) * [Kr00k](https://github.com/akabe1/kr00ker) - Allows to decrypt some WPA2 CCMP data in vulnerable devices (Access Point or Clients). ![last-commit](https://img.shields.io/github/last-commit/akabe1/kr00ker?style=flat) * [MDK4](https://github.com/aircrack-ng/mdk4) - MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses. ![last-commit](https://img.shields.io/github/last-commit/aircrack-ng/mdk4?style=flat) * [Netsh](https://learn.microsoft.com/en-us/windows-server/networking/technologies/netsh/netsh-contexts) - CLI utility that allows you to display or modify the network configuration of a computer that is currently running. * [PixieWPS](https://github.com/wiire-a/pixiewps) - An offline Wi-Fi Protected Setup brute-force utility. ![last-commit](https://img.shields.io/github/last-commit/wiire-a/pixiewps?style=flat) * [Reaver](https://github.com/t6x/reaver-wps-fork-t6x) - Brute force attack against Wi-Fi Protected Setups \(WPS\) ![last-commit](https://img.shields.io/github/last-commit/t6x/reaver-wps-fork-t6x?style=flat) * [r00kie-kr00kie](https://github.com/hexway/r00kie-kr00kie) - This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. ![last-commit](https://img.shields.io/github/last-commit/akabe1/kr00ker?style=flat) * [SniffAir](https://github.com/Tylous/SniffAir) - Wireless security framework which provides the ability to easily parse passively collected wireless data as well as launch sophisticated wireless attacks. ![last-commit](https://img.shields.io/github/last-commit/Tylous/SniffAir?style=flat) * [tonic](https://www.metageek.com/tonic/) - Provides a reliable process for troubleshooting Wi-Fi devices (endpoints) on-site. * [Wifiphisher](https://github.com/wifiphisher/wifiphisher) - The Rogue Access Point Framework ![last-commit](https://img.shields.io/github/last-commit/wifiphisher/wifiphisher?style=flat) * [Wifite2](https://github.com/derv82/wifite2) - Rewrite of the popular wireless network auditor, wifite. ![last-commit](https://img.shields.io/github/last-commit/derv82/wifite2?style=flat) * [WiGLE](https://www.wigle.net/) - All the networks. Found by Everyone. Wi-fi wardrving database. * [WirelessKeyView](https://www.nirsoft.net/utils/wireless_key.html#DownloadLinks) - Recovers all wireless network security keys/passwords (WEP/WPA) stored in your computer. ### Zigbee * [Killerbee](https://github.com/joswr1ght/killerbee) - IEEE 802.15.4/ZigBee Security Research Toolkit ![last-commit](https://img.shields.io/github/last-commit/joswr1ght/killerbee?style=flat) ### Z-Wave * [Killerzee](https://github.com/joswr1ght/killerzee) - Tools for Attacking and Evaluating Z-Wave Networks ![last-commit](https://img.shields.io/github/last-commit/joswr1ght/killerzee?style=flat)