This code is a WiFi Captive Portal implemented for the ESP8266, which acts as a phishing page to collect passwords. It is essential to understand that this code is only ethical or legal purposes and is explicitly labeled as a "Wifi Penetration testing" for "Educational Purposes" only. Performing such attacks without prior permission is illegal and unethical, and using this code or similar techniques to compromise network security or violate someone's privacy is strictly prohibited.
Please note that this should not be used in any real-world scenario.
[+] It is capturing usernames and passwords.
[+] bug fixes while compiling the solution on Arduino.
[+] It now requires password to access "PASS" page, password can be set as desired in the code, default password for .bin file is P@ssw0rd!
[+] Option to add certificates to use HTTPS instead of HTTP.
This project is for testing and educational purposes. Use it only against authorized targets and your own networks and devices. I don't take any responsibility for what you do with this program.
WiFi captive portal for the NodeMCU (ESP8266 Module) with DNS spoofing.
The built-in LED will blink 5 times when a password is posted.
Warning! Your saved passwords will not disappear when you restart/power off the ESP8266.
Note: If you want to see the stored passwords go to "172.0.0.1/pass". For changing the SSID, go to "172.0.0.1/ssid"
| 172.0.0.1/index | 172.0.0.1/post | 172.0.0.1/pass | 172.0.0.1/pass?password= | 172.0.0.1/ssid |
|---|---|---|---|---|
| This is the main page. Here the user will write his username and password and send it. | This is the post page. The user will be redirected here after posting their credentials. | This is the protection applied to the pass page, so noone else can snik into it. | This is where the attacker can retrieve all the passwords that has been posted. | Here the attacker can change the SSID name of the Access Point on the go. |
 |
 |
 |
 |
 |
-
Download ESP8266 Flasher.
-
Download release.bin file.
-
Open the ESP8266 Flasher and select config tab and select the .bin file you've just downloaded.
- Then, head back to the Operation tabs and select the Node MCU port and press "Flash".
- Wait until the process finishes.
- Your Node MCU is ready!
- Download and open the sketch using Arduino IDE
- Go to "File -> Preferences -> Boards Manager URLs" and paste the following link:
http://arduino.esp8266.com/stable/package_esp8266com_index.json - Go to "Tools -> Board -> Boards Manager", search "esp8266" and install esp8266
- Go to "Tools -> Board" and select you board"
- You can optionally change all things like SSID name and texts of the page like title, subtitle, text body, Password of the protected page, style, you are the boss!
- Upload the code into your board.
- You are done!
Again, I must emphasize that using this code or any similar technique for unauthorized access, phishing, or any illegal activities is strictly prohibited and against the law. It is essential to respect others' privacy and adhere to ethical standards while using technology. If you're interested in learning about network security, ethical hacking, or cybersecurity, I encourage you to pursue formal education or ethical hacking certifications through legitimate channels. Always use your skills and knowledge responsibly and lawfully.
If you like or rely on the work I do, please consider sponsoring me. I do open source all my projects, it would be really great if I could do more of it.
- WiFi-Spam: 📧📡 Spam thousands of WiFi access points with custom SSIDs.
- PwrDeauther: ⚡ Deauth a specific WiFi access point or an entire channel.